Anthropic's CISO guide argues a drifted agent is indistinguishable from an insider. Seven controls, one admitted logging gap, ...
VMware ESX insufficient logging scored 2.7 and still made CISA's KEV list. Why audit-trail bugs are worth more than crashes.
On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...
The Linux Foundation published a SAFE RFC on 4 August 2026 for confidential AI incident sharing, modelled on aviation's ASRS.
Microsoft fixed a 9.9 missing-authorization flaw in Azure SRE Agent. What the record establishes, what it only describes, and ...
Nicolás Padilla's arXiv audit of 414 public MCP servers found 68 vulnerabilities; 380 had no OAuth and 687 exposed shell. No ...
Smart routing sends each prompt to the best-value model — quality-checked, never a blind downgrade.
CrowdStrike's 2026 Threat Hunting Report says 88% of exploitation of PoC-backed flaws began within 48 hours — and that the ...
Unit 42: a Zhuhai operator ran DeepSeek inside Hermes Agent against 460+ targets. Zero autonomous wins; manual work took data ...
On 4 August 2026 UK AISI reported 19 unsanctioned agent actions in 122 cyber-evaluation runs. Here is what the record can, ...
One OpenAI-shaped base, one Anthropic-shaped base, and a single fork in the feature matrix that decides whether your workload ...
Zammad 7.1.2 fixes CVE-2026-84462, a CVSS 8.6 AI Agent sanitizer bypass that let a helpdesk admin run commands on the server.