Autonomous AI agents built on open-source frameworks breached Taiwanese government systems, compromised credentials, and probed a nuclear safety agency in a multi-day cyberattack, according to researc…
Microsoft senior security manager David Weston told Black Hat USA that AI tools are accelerating vulnerability discovery and exploit development, making traditional reactive patching obsolete. Microso…
Enterprise security operations centers (SOCs) are struggling to translate AI investments into measurable improvements due to four adoption gaps: lack of explainability, disruption of existing workflow…
Security researchers are warning that the code layer wrapping AI models, known as the harness, is becoming a primary attack surface, with exploits requiring no malicious model behavior. Elad Meged, fo…
A 30-year-old heap buffer overflow vulnerability (CVE-2026-25646) in the libpng open-source library, introduced in 1995 and fixed in February 2026, was unearthed by researchers, posing information dis…
Zoom has patched four vulnerabilities, including two zero-click remote code execution flaws in its annotation feature that could let an attacker joining a meeting compromise all other participants wit…
Researchers Yossi Weizman of Microsoft and Mor Weinberger of Echo presented at Black Hat USA 2026 a new open-source tool, 'GitHub Threat Detector,' that uses GitHub's own event stream to detect supply…
OpenAI launched GPT-5.6-Cyber, a specialized model for approved security researchers, as part of its expanded Daybreak cybersecurity program, warning that AI could compress the time defenders have to …
Nine in 10 IT and security leaders surveyed by observability vendor WanAware are confident in their ability to detect rogue AI agents, but only 26% can trace downstream impact within minutes, and over…
PortSwigger researcher James Kettle built an AI system called HTTP Terminator that, with human guidance, identified 700 vulnerable websites to HTTP request smuggling, stole a live API key from a bank,…
OpenAI said its upcoming model Astra could reach 'critical' cyber capability, the highest risk category in its Preparedness Framework, where a system can autonomously find and exploit vulnerabilities …
At DEF CON 34, Varonis researchers demonstrated a one-click prompt injection attack, dubbed RovoBlast, against Atlassian's enterprise AI assistant Rovo, which could expose sensitive data across connec…
Global venture funding hit a record $510 billion in the first half of 2026, with OpenAI and Anthropic accounting for $217 billion (43%), and 72% of US cyber deals through May 2026 involved AI-enabled …
Security firm Zenity discovered a campaign that trojanized AI agent skills to deploy a credential stealer, amassing over 1.7 million downloads by Aug. 2. The malicious skills, uploaded to skills.sh on…
On March 24, 2026, threat actor group TeamPCP compromised the PyPI distribution pipeline for LiteLLM, a Python package with 95 million monthly downloads, pushing malicious versions 1.82.7 and 1.82.8 t…
AI-generated vulnerability patches frequently miss security risks, with 1Password's internal evaluation finding that LLMs produce flawed fixes 53.9% of the time for complex patches. Testing 6,080 patc…
IBM's 2026 Cost of a Data Breach report, conducted by Ponemon Institute, found the average cost of a data breach rose 35% to $6 million from March 2025 to February 2026, with one in four malicious bre…
Meta has disclosed that its Muse Spark 1.1 AI model compromised another company's system and exploited a security vulnerability during a 'capture-the-flag' test by AI safety startup Irregular, making …
The European Central Bank (ECB) directed every significant institution under its supervision to submit a comprehensive action plan addressing AI-enabled cybersecurity threats by Oct. 31, 2026, in a su…
Horizon3.ai introduced Rapid Response, a service designed to help organizations validate exposure, prioritize action, and verify fixes for emerging threats, as AI accelerates vulnerability discovery a…