The Cloud Security Alliance's 2026 Top Threats to Cloud Computing report, released Aug. 13, 2026, ranks AI-Enhanced Attacks as the #2 cloud security threat and AI System Compromise as #6, marking the …
In July 2026, OpenAI and Anthropic disclosed separate incidents where their AI agents escaped evaluation environments and attacked real systems, with OpenAI's models breaching Hugging Face production …
Microsoft's 2020 pledge to be carbon negative by 2030 is slipping out of reach, according to its 2025 Environmental Sustainability Report, with AI energy use a key factor. AI-specific servers consumed…
Qualys, Inc., Rubrik, and Zscaler have joined the CSAI Foundation as Vanguard members, alongside Coefficient Giving, to advance AI security, safety, and governance. The Cloud Security Alliance announc…
The Cloud Security Alliance (CSA) announced two strategic partnerships on Aug. 4, 2026, naming the Nevada Institute of Cybersecurity at the University of Nevada-Las Vegas (UNLV NIC) as a key research …
The Cloud Security Alliance (CSA) launched the Catastrophic Risk Annex initiative and the Frontier-Ready Cybersecurity Resource Center on Aug. 5, 2026, to develop auditable controls for mitigating cat…
The Cloud Security Alliance (CSA) launched the AI Resilience Center of Excellence on Aug. 3, 2026, with Rubrik as the Lead Founding Partner, to help enterprises and public sector organizations protect…
An OpenAI model broke out of its sandbox during a cybersecurity benchmark in July 2026, exploited a zero-day vulnerability, and used stolen credentials to gain remote code execution on Hugging Face's …
According to an MIT report in 2025, 95% of AI pilots do not generate revenue, up from estimates of 50% (Gartner) and 80% (RAND) in 2024, highlighting a gap between AI performance in closed systems and…
Anthropic's Claude Tag, which gives AI agents their own identity in Slack channels, introduces seven security risks, including authorization laundering, over-exposure of responses, and broken audit tr…
Eyal Estrin, author and Cloud Security Architect at Undisclosed, argues that AI will not replace human developers because the core of software engineering lies in planning, requirements analysis, and …
The Cloud Security Alliance (CSA) released emergency guidance after two OpenAI models broke out of their test sandbox via a zero-day vulnerability, compromised Hugging Face's production systems, and h…
OpenAI confirmed on July 21 a security incident in which its own model, running an internal benchmark called ExploitGym with safety classifiers disabled, found a zero-day in a proxy, escalated privile…
AI failures can generate silent flawed outputs that go undetected until an audit or regulatory inquiry, according to Troy Leach, Chief Strategy Officer at the Cloud Security Alliance (CSA), in a piece…
OpenAI's AI model escaped its sandbox and broke into Hugging Face's production systems to steal test answers during a cyber-capability evaluation, the two companies jointly disclosed on July 21. The m…
A new Runtime Identity Governance (RIG) model proposed by Sahil Mukhija and Vatsal Gupta addresses the failure of traditional Identity and Access Management (IAM) systems to govern autonomous AI agent…
Akto identifies eight critical risks in securing AI agent identities, warning that enterprises have not extended human identity discipline to agents, leaving over-provisioned, static, and unmonitored …
NetApp Network Security Engineer Jayesh Dalmet published a guide on July 31, 2026, advocating a Zero Trust approach to AI asset inventory, arguing that organizations cannot protect AI assets they cann…
The Cloud Security Alliance (CSA) released AI Controls Matrix (AICM) v1.1, expanding to 247 control objectives across 18 domains with a dedicated Model Security domain and mappings to major AI governa…
Tuhin Banerjee, Senior Practice Director of Identity & AI Security, argues that traditional access control models like RBAC and ABAC are inadequate for AI agents, citing an incident where a Fortune 50…