Three high-severity flaws in vulnerable versions of Hugging Face’s diffusers library let crafted model repositories silently execute arbitrary code during affected loading flows, bypassing the safeguard built to prevent exactly that. According to research from threat exposure management firm Zafran Security… Read More "Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard"
Kevin Mandia’s Armadin Raises $255 Million at $2.5 Billion Valuation
Armadin, the AI-native cybersecurity startup founded by Mandiant founder Kevin Mandia, has raised $255.5 million in Series B funding at a valuation topping $2.5 billion. The company has now raised a total of $445 million only seven months after its… Read More "Kevin Mandia’s Armadin Raises $255 Million at $2.5 Billion Valuation"
OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates
Ravie LakshmananOct 01, 2026Artificial Intelligence / Vulnerability OpenAI on Wednesday said it identified and disrupted a coordinated distillation campaign that was designed to illicitly extract protected reasoning from its artificial intelligence (AI) models. A “core cluster of the activity,” going… Read More "OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates"
Industrial Orgs See Cybersecurity Risk as Growth Obstacle
PRESS RELEASE MILWAUKEE, September 22, 2026 — Rockwell Automation, Inc. (NYSE: ROK), the world’s largest company dedicated to industrial automation and digital transformation, today released “Operational Resilience in the Age of Connectivity,” an industry insights report based on input from… Read More "Industrial Orgs See Cybersecurity Risk as Growth Obstacle"
MI5 Warns Over 100 Academics Helped China’s Espionage Plans
The UK’s domestic security agency has warned that over 100 academics have helped Beijing’s spies to improve their espionage capabilities. MI5 issued the rare espionage alert on September 30, calling out the China General Technology Research Institute (CGTRI), or China… Read More "MI5 Warns Over 100 Academics Helped China’s Espionage Plans"
The Secrets of the US Spyware King
Rather than see Paragon’s lack of access to logs as an accountability problem, however, Boyd describes it as a selling point: No one would buy their products if the company could see a customer’s sensitive targeting information or logs that… Read More "The Secrets of the US Spyware King"
500,000 Active Credentials Left Exposed on GitHub
Truffle Security has discovered over half a million active unique credentials exposed in public GitHub repositories. A total of 1,103,438 exposed credentials were discovered through the scanning of 224 million public GitHub repositories in August 2025. At the end of… Read More "500,000 Active Credentials Left Exposed on GitHub"
Why AI agents are like the dog that pushed kids into the Seine
There is an interesting story about a French dog on the banks of the Seine river that helps us understand misbehaving AI agents. The dog is trained to save children from drowning. He succeeds and is rewarded, becoming an overnight… Read More "Why AI agents are like the dog that pushed kids into the Seine"
Deception by Design: CISA’s Guide to Tricking Cybercriminals
While lurking within an organization’s environment, a threat actor discovers a file labeled passwords.XLS and thinks, “Jackpot!” What the actor doesn’t realize is that opening the file alerts the security team. It was a trap. Deceptive techniques relying on decoys,… Read More "Deception by Design: CISA’s Guide to Tricking Cybercriminals"
AI Threats Top Cybersecurity Preparedness Gap, PwC Finds
Threats targeting AI systems is the area that cybersecurity leaders currently feel last able to address, with skills, accountability and data protection gaps also looming large, according to PwC. The consulting giant polled 3934 business and tech leaders across 71… Read More "AI Threats Top Cybersecurity Preparedness Gap, PwC Finds"