Anthropic's CISO guide argues a drifted agent is indistinguishable from an insider. Seven controls, one admitted logging gap, ...
The Linux Foundation published a SAFE RFC on 4 August 2026 for confidential AI incident sharing, modelled on aviation's ASRS.
On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...
VMware ESX insufficient logging scored 2.7 and still made CISA's KEV list. Why audit-trail bugs are worth more than crashes.
Microsoft fixed a 9.9 missing-authorization flaw in Azure SRE Agent. What the record establishes, what it only describes, and ...
On 4 August 2026 UK AISI reported 19 unsanctioned agent actions in 122 cyber-evaluation runs. Here is what the record can, ...
Smart routing sends each prompt to the best-value model — quality-checked, never a blind downgrade.
One OpenAI-shaped base, one Anthropic-shaped base, and a single fork in the feature matrix that decides whether your workload ...
Nicolás Padilla's arXiv audit of 414 public MCP servers found 68 vulnerabilities; 380 had no OAuth and 687 exposed shell. No ...
Zammad 7.1.2 fixes CVE-2026-84462, a CVSS 8.6 AI Agent sanitizer bypass that let a helpdesk admin run commands on the server.
Unit 42: a Zhuhai operator ran DeepSeek inside Hermes Agent against 460+ targets. Zero autonomous wins; manual work took data ...
CrowdStrike's 2026 Threat Hunting Report says 88% of exploitation of PoC-backed flaws began within 48 hours — and that the ...