OpenAI revealed several new incidents in which its models deviated from instructions, constraints, or a user’s expectations, adding to a growing list of warning signs that have the industry increasingly calling for tighter restrictions on AI development. The latest examples… Read More "Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents"
China-Linked Hackers Impersonate AI Experts to Target US Policy
A China-aligned group has posed as well-known AI policy figures and economists to steal login credentials from AI policy specialists at US think tanks, universities and law firms. Proofpoint, which tracks the group as TA419, said in research published October… Read More "China-Linked Hackers Impersonate AI Experts to Target US Policy"
AI Has Changed Attack Speed, Not Security Fundamentals
People who know me well know that I am a very direct person and as such, I don’t enjoy overcomplicating terms used to describe straightforward things. In recent months, Frontier AI and other tools have allowed attackers and defenders alike… Read More "AI Has Changed Attack Speed, Not Security Fundamentals"
CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV
Ravie LakshmananOct 01, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities (KEV), following reports of active exploitation. The… Read More "CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV"
ShinyHunters Hacked Cl0p. Now What About Cl0p’s Victims?
ShinyHunters apparently breached rival ransomware gang Cl0p last week, and the incident could pose additional risks to victim organizations caught in the middle. ShinyHunters is a financially motivated cybercrime group known primarily for data theft and extortion attacks. The group’s… Read More "ShinyHunters Hacked Cl0p. Now What About Cl0p’s Victims?"
AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched
A years-old Linux kernel flaw allowing local privilege escalation to root has been disclosed after AI-assisted research uncovered a race condition in net/sched. In new research published July 27, Lee Jia Jie of Singapore offensive security firm STAR Labs said… Read More "AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched"
Treasury Blacklists Most-Wanted ATM Malware Developer and His Network
The US Treasury Department has sanctioned the alleged developer of malware used in ATM jackpotting attacks linked to Tren de Aragua (TdA), along with members of his network and two Mexico-based companies. Anibal Alexander Canelon Aguirre, known as ‘Prometheus,’ was… Read More "Treasury Blacklists Most-Wanted ATM Malware Developer and His Network"
How Financial Services Companies Can Modernize Their Software Supply Chain
Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take to upgrade the platform where they live. Somebody prices… Read More "How Financial Services Companies Can Modernize Their Software Supply Chain"
How AI Agents Can Trigger Runaway Costs for Enterprises
AI applications can rack up unexpected costs when they lack effective controls on how much compute power and other resources a request is allowed to consume. The large language model (LLM) vulnerability, known as unbounded consumption, can take several forms,… Read More "How AI Agents Can Trigger Runaway Costs for Enterprises"
Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard
Three high-severity flaws in vulnerable versions of Hugging Face’s diffusers library let crafted model repositories silently execute arbitrary code during affected loading flows, bypassing the safeguard built to prevent exactly that. According to research from threat exposure management firm Zafran Security… Read More "Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard"