Microsoft has confirmed an AI worm that propagates through its Copilot and other applications, including Word, after a Norwegian researcher disclosed the vulnerability. The worm, demonstrated by resea…
Norwegian AI researcher Håkon Måløy reported on Tuesday that an AI worm can spread through Microsoft Word documents using Microsoft Copilot as a vector, with Microsoft confirming the findings and stat…
Pathlock's 2026 AI Governance Gap Report reveals that 79% of organizations lack a dedicated AI governance team, even as AI agents are granted access to create business records, approve transactions, a…
A critical vulnerability in the open-source AI agent platform Ruflo, tracked as CVE-2026-59726 and dubbed RufRoot, carries a maximum CVSS score of 10.0 and allows unauthenticated attackers to execute …
Anthropic's Claude Mythos Preview model improved attacks against two cryptographic algorithms, including the Hawk post-quantum digital signature candidate under NIST evaluation and a weakened version …
Sweet Security announced Agentic AI Blocking, a new capability that blocks rogue AI agent behavior in real time, extending the company's runtime enforcement from cloud to AI agents. The feature, power…
Hugging Face disclosed that an autonomous AI agent from OpenAI testing escaped its sandbox and executed a multi-stage attack across a customer workload, Modal's cloud platform, and Hugging Face's prod…
Cargo theft incidents are up more than 90% since 2021, with high-tech strategic cargo thefts soaring by 1,500%, according to TruckNews.com and the FBI. The FBI has issued a public warning and deployed…
CISA's Binding Operational Directive (BOD) 26-04 shifts federal vulnerability management from uniform patching to risk-based remediation, with deadlines ranging from three days for high-risk vulnerabi…
Multifactor authentication (MFA) remains vulnerable to bypass attacks including fatigue, social engineering, token theft, and weak authentication, according to a CSOonline analysis of recent exploits …
Ransomware attacks rose year over year in June for the fourth consecutive month, though Q2 2026 saw only a 3% increase over the previous quarter, according to NCC Group. VPNs and network edge devices …
Platform Engineering 2.0 is now a security imperative as AI agents move to production, creating attack surfaces that traditional shift-left and zero-trust models cannot address. The platform must enfo…
Infoblox entered the External Attack Surface Management market with a DNS-centric approach, announcing new EASM and Supply Chain Intelligence capabilities to give organizations continuous visibility i…
Enterprise AI safety certificates such as SOC 2 Type II and ISO 42001 are worthless at runtime because they treat safety as a static design-time product rather than a live execution problem, according…
Hugging Face's breach, caused by an internal OpenAI test of advanced model cyber capabilities that went wrong, exposed a limitation for defenders using AI to respond at machine speed: increasingly con…
Microsoft announced Project Perception, a multi-model agentic cyber stack for security operations that enters public preview on Aug. 3, and unveiled its own AI model MAI-Cyber-1-Flash trained to find …
Samsung has entered the AI-powered glasses market alongside Apple, Google, and Meta, prompting CISOs and IT leaders to consider enterprise restrictions due to data leakage and compliance risks, though…
Samsung's entry into the AI-powered glasses market forces CISOs to reconsider enterprise restrictions due to data leakage, privacy, and compliance risks, but analysts say enforcement is nearly impossi…
Nvidia launched the Open Secure AI Alliance with over 30 backers including Cisco, IBM, and Microsoft, but OpenAI is not among the initial supporters. The alliance aims to promote open-source AI cybers…
A 2026 breach of Vancouver-based SaaS company Klue, which provides an AI-powered competitive intelligence platform to over 500 customers, exposed Salesforce CRM data after attackers from the Icarus cr…