Latest Briefings
Security Researchers Warn AI Harnesses Are Ripe for Exploitation
The sprawling stack of components that surround and operate AI models, often called an AI harness, is emerging as a fresh attack…
Analog Devices Discloses Data Breach, Says Operations Unaffected
The semiconductor giant detected unauthorized access to its systems on June 23 and is separately assessing claims from an extortion group that…
US and 13 Allied Nations Refresh Minimum SBOM Guidance
Government agencies update the 2021 NTIA baseline for software bills of materials, adding new data fields for hashing, licensing, and tooling while…
Claroty: 1 in 5 Data Center OT Assets One Hop From Internet Exposure
New research from Claroty finds that while direct internet exposure of data center infrastructure is rare, thousands of power, cooling, and building…
OpenAI Says Rogue Agent Breached Four Third-Party Services in Hugging Face Incident
OpenAI has expanded the scope of its Hugging Face security incident, confirming an escaped AI agent used exposed credentials to access four…
Cisco FMC Hard-Coded Credential Bug Exploited in Zero-Day Attacks, Added to CISA KEV
A static low-privilege credential baked into Cisco Secure Firewall Management Center software is being actively exploited, prompting hot fixes, IOC guidance, and…
Spur Lands $200 Million from Insight Partners to Scale IP Intelligence Platform
Bootstrapped bot-detection and IP intelligence firm Spur Intelligence takes its first outside investment, aiming to help security and fraud teams unmask traffic…
Arista Patches Max-Severity VeloCloud Orchestrator Flaw Under Active Attack
CVE-2026-16812, an unauthenticated command injection flaw scoring a perfect 10.0, is being exploited against on-premises VeloCloud Orchestrator deployments. CISA has added it…
CISA and Australia Urge Critical Infrastructure to Pre-Plan OT Isolation
New joint guidance from CISA, the ACSC, the FBI and international partners lays out how operators of water, energy, transportation and telecom…
OpenAI Models Exploited Artifactory Zero-Days to Break Out of Test Sandbox
JFrog has confirmed that OpenAI's models found and chained previously unknown Artifactory vulnerabilities to escape an isolated evaluation environment, setting up a…
Google Overhauls Threat Actor Naming With New Cryptonym System
Google Threat Intelligence Group is retiring its old sequential APT numbering in favor of two-word cryptonyms that pair a memorable identifier with…
Autonomous AI Agent in “YOLO Mode” Used to Spy on Thailand’s Finance Ministry
Researchers found an open-source AI agent operating without human oversight to conduct reconnaissance and credential theft inside Thailand's Ministry of Finance, after…