The Cloud Security Alliance endorsed NVIDIA's Open Agent Safety Platform, announced 09/28/2026, which combines NVIDIA OpenShell secure runtime software, NVIDIA Sentry running on BlueField-4 DPUs via D…
Akto published a September 29, 2026 analysis of AI supply-chain trust, citing the September 2025 case of the npm-distributed MCP server `postmark-mcp`, which operated normally through its first 15 ver…
The White House announced GOLD EAGLE on July 14, 2026, a cybersecurity vulnerability clearinghouse created under Executive Order 14409 to coordinate and deconflict vulnerability scanning, validate fin…
LLMjacking has grown from a proof-of-concept threat documented by Sysdig in May 2024 into a commercialized criminal enterprise, according to a March 15, 2026 research note from the Cloud Security Alli…
The Cloud Security Alliance named Troy Leach, its Chief Strategy Officer, as Executive Director of the CSAI Foundation on Sept. 14, 2026, tasking the 25-year cybersecurity veteran with convening indus…
Saviynt Inc. Senior Practice Director Tuhin Banerjee argues that role-based access control (RBAC) is failing to govern autonomous AI agents, citing a 2026 industry survey where 59% of organizations ad…
Wiz published a four-pillar framework for AI threat readiness on September 18, 2026, warning that frontier AI models can now autonomously discover zero-day vulnerabilities, generate working exploits, …
An affiliate of the Aurora ransomware operation used Cursor's agentic coding assistant, running Anthropic's Claude Sonnet, to conduct hands-on network exploitation against at least ten organizations b…
Enterprise Management Associates VP of Research Chris Steffen argues that AI watermarking, such as Anthropic's move to comply with the EU AI Act's transparency rules, is insufficient on its own and sh…
Darktrace's annual State of AI Cybersecurity Report 2026, based on a survey of more than 1,500 cyber professionals, found that 87% of security professionals are seeing more AI-driven threats, yet few …
The National Institute of Standards and Technology (NIST) Center for AI Standards and Innovation issued a January 2026 Request for Information on Security Considerations for Artificial Intelligence Ag…
Darktrace VP and Field CISO Nabil Zoldjalali argues that prompt language is emerging as a distinct AI security challenge because prompts express intent and behavior rather than functioning as ordinary…
The Cloud Security Alliance's Top Threats to Cloud Computing 2026 report separates AI-Enhanced Attacks and AI System Compromise into two distinct categories, ranked #2 and #6 respectively, according t…
Schellman's 2026 State of AI Governance Report, based on a survey of more than 500 U.S. enterprise leaders, found that 74% believe their organization could pass an AI compliance audit today while only…
Akto's analysis identifies six security risks in Anthropic's Claude in Chrome browser agent, including indirect prompt injection, identity inheritance, cross-origin authority, approval fatigue, and ex…
The Cloud Security Alliance (CSA) released research showing that deepfakes expose fundamental weaknesses in how organizations establish identity, grant authority, and protect data, and that Zero Trust…
Darktrace's State of AI Cybersecurity 2026 report reveals that 77% of security stacks now include AI, yet trust and understanding lag behind adoption. The survey found 67% use supervised machine learn…
MITRE released a Framework for Continuous Remote Attestation in July 2026, developed with Fr0ntierX and Invary, to address the risk of eBPF layer tampering that can feed corrupted telemetry to AI syst…
MITRE has released a new Framework for Continuous Remote Attestation, co-authored with Invary and Fr0ntierX, now open for public review, to verify system trustworthiness continuously during runtime ra…
Schellman CEO Avani Desai said organizations must prioritize EU AI Act compliance for high-risk AI systems, with Article 50 transparency obligations already in effect since August 2, 2026. The regulat…