A vulnerability in Nvidia's NemoClaw could let an attacker gain unauthenticated control of a local Ollama model server through a single malicious website visit, according to research by Cyera. The fla…
A series of incidents, including an OpenAI cybersecurity evaluation where unrestricted models exploited a zero-day vulnerability to hack into Hugging Face's production infrastructure, has raised quest…
Nucleus Security has expanded its exposure management platform with Nucleus Helix, an AI agent for natural-language interaction with security data, plus Nucleus Discover for early exposure detection a…
Researchers from Shanghai Jiao Tong University and Ant Group have demonstrated a new attack technique called InjecMEM that lets hackers plant hidden instructions in an AI agent's memory with a single …
Cisco Talos has identified a Chinese-speaking cybercrime group, tracked as UAT-10147, that is using AI-driven tools to compromise internet-facing Windows and Linux web servers, with a target list of a…
Equifax Inc. is using AI to counter a 30% spike in automated cyberattacks, with its security operations center now automatically handling 50% of incident tickets and processing 19.8 million daily aler…
AI can strengthen enterprise security by continuously monitoring network activity, automating routine tasks, and prioritizing threats, according to experts including Sheetal Mehta, global head of cybe…
CISOs face AI threats on two fronts, but the greater risk may come from employees' own adoption of generative AI, according to a risk-first approach advocated by a CISO. Verizon's 2026 DBIR found that…
Ransomware attacks in 2026 are increasingly AI-enabled and designed to disrupt business operations, steal data, and apply pressure beyond IT environments, according to CSO Online. Attackers are moving…
A critical sandbox escape vulnerability in isolated-vm, a JavaScript library downloaded over 1 million times per week and used in AI agent frameworks including n8n, Sim.ai, Mastra, and Activepieces, w…
Security researchers at ThreatDown warn that a criminal AI service called Kriminal is bypassing guardrails on xAI's Grok, Anthropic's Claude, and other models to resell uncensored AI capabilities for …
Wiz's autonomous AI security agent Red Agent identified and exploited a critical vulnerability in Snowflake's GitHub Actions pipeline that GitHub Copilot had reviewed without flagging, gaining access …
A survey of 93 CISOs and senior cybersecurity practitioners conducted by SimSpace between December 2025 and March 2026 found that 78% have high confidence in their agentic defenses, yet detection and …
Threat-modeling expert Adam Shostack has developed PHANTOM-B, a framework designed to identify AI-specific threats in 15-minute sessions, addressing the struggle CISOs face in securing AI systems. Pre…
Microsoft on Tuesday patched a critical one-click vulnerability in its personal Copilot AI assistant, nearly eight months after security firm Varonis reported the flaw, which allowed attackers to exec…
GitLab has patched a critical vulnerability, CVE-2026-19478, that could let unauthenticated attackers modify or delete public repositories via a single HTTP request, along with a high-risk CSRF flaw (…
A Veracode study found that 44% of AI-generated code contains at least one OWASP Top 10 vulnerability, and no model achieved a security pass rate above 68%, despite producing syntax-correct code 99% o…
Corelight's Provably Better Data research project found that high-fidelity network evidence can improve security operations outcomes by 2-4x across core investigation metrics, with data quality provin…
Wolfgang Goerlich, a public sector CISO and faculty member at IANS Research, predicts that by 2029 the CISO role will evolve into a pacesetter for innovation, advising boards on calculated technology …
At Black Hat USA 2026, Microsoft's David Weston argued that AI is making vulnerability discovery and exploit development cheaper and faster, urging the industry to adopt memory-safe languages like Rus…