OpenAI has announced that it’s pausing some “internal activities” involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation found it had made significant advancements in agentic coding and cybersecurity. In response to the discovery, the AI upstart… Read More "OpenAI’s Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause"
OWASP Introduces Agentic AI Security Maturity Framework
The Open Worldwide Application Security Project (OWASP) has rolled out a new agentic AI security maturity framework intended to help organizations close the gap between the agentic systems they deploy and the governance those systems require. The framework appears in… Read More "OWASP Introduces Agentic AI Security Maturity Framework"
Practical Lessons From Lloyds’ Agentic AI Security Playbook
Lloyds Banking Group is treating agentic AI not as a theoretical threat or boardroom buzzword, but as an engineering problem to be designed, constrained and tested at scale. In a candid session at the Open Worldwide Application Security Project’s (OWASP)… Read More "Practical Lessons From Lloyds’ Agentic AI Security Playbook"
Critical Flaws Discovered in Belgian eID Software Used by 2 Million People
DEF CON — A security researcher has revealed severe, now-resolved security vulnerabilities in the Connective digital identity system, a browser extension used by over two million users in Belgium. Developed by Nitro Software Belgium, the software is used by eight… Read More "Critical Flaws Discovered in Belgian eID Software Used by 2 Million People"
Meta AI Bug Exposes Over 20,000 Instagram Accounts
Unauthorized third parties gained access to thousands of Instagram accounts by exploiting a vulnerability in an AI support tool, Meta has revealed. Meta said it discovered the problem with the AI-powered High Touch Support (HTS) tool on May 31. The… Read More "Meta AI Bug Exposes Over 20,000 Instagram Accounts"
How DSIT Protects Thousands of UK Orgs from Cyber Vulnerabilities
The UK’s Department of Science, Innovation and Technology (DSIT) is responsible for securing over half a million domains across thousands of government organizations. This ranges from the smallest Parish Councils to the behemoth that is the National Health Service (NHS)… Read More "How DSIT Protects Thousands of UK Orgs from Cyber Vulnerabilities"
Two-Thirds of Open Source Community Unaware of Cyber Resilience Act
A leading open source security body has warned of “stagnating awareness and structural unreadiness” in the community ahead of a key December 2027 deadline for compliance with the Cyber Resilience Act (CRA). The CRA is an EU effort to introduce… Read More "Two-Thirds of Open Source Community Unaware of Cyber Resilience Act"
Prompt Injection Remains Unsolved, OWASP Researcher Warns
Prompt injection remains an unsolved architectural problem that could hamper the development of AI, said Ariel Fogel, a contributor to the Open Worldwide Application Security Project (OWASP), during Infosecurity Europe 2026. Fogel, an AI security researcher at Pillar Security’s office… Read More "Prompt Injection Remains Unsolved, OWASP Researcher Warns"
OpenAI Unveils ChatGPT Account Security Controls
ChatGPT users have gained two new security controls: one aimed at preventing data theft through prompt injection and another at tracking account sign-ins. According to OpenAI, the first of these, Lockdown Mode, is an optional setting that limits how far… Read More "OpenAI Unveils ChatGPT Account Security Controls"
North Korean Hackers Use Fake Coding Tasks to Steal Crypto
A likely North Korean threat actor has phished software developers at almost 100 organizations with fake job and code-review lures to steal cryptocurrency and credentials. According to new analysis from Proofpoint, which tracks the cluster as UNK_DeadDrop, the campaign sent… Read More "North Korean Hackers Use Fake Coding Tasks to Steal Crypto"