Anthropic's CISO guide argues a drifted agent is indistinguishable from an insider. Seven controls, one admitted logging gap, ...
VMware ESX insufficient logging scored 2.7 and still made CISA's KEV list. Why audit-trail bugs are worth more than crashes.
Unit 42: a Zhuhai operator ran DeepSeek inside Hermes Agent against 460+ targets. Zero autonomous wins; manual work took data ...
The Linux Foundation published a SAFE RFC on 4 August 2026 for confidential AI incident sharing, modelled on aviation's ASRS.
On 4 August 2026 a stolen keyv GitHub account pushed malware to main and the project's own CI signed it. The ChainDrop worm ...
One OpenAI-shaped base, one Anthropic-shaped base, and a single fork in the feature matrix that decides whether your workload ...
Mistral's weights are live under an ecosystem licence; Kimi's arrive by 4 November. Price per token is the wrong unit for ...
Nicolás Padilla's arXiv audit of 414 public MCP servers found 68 vulnerabilities; 380 had no OAuth and 687 exposed shell. No ...
Claude Fable 5.1 scores 43 to Mistral Large 4's 26 on Artificial Analysis v5 and costs 12x more per output token. The licence decides more than the gap.
IBM chains a superuser token leak with a code validator that runs Python in CVE-2026-9198. CISA logged exploitation on 4 ...
Mistral Large 4 lists at $1.36 and $4.18 per million tokens and currently runs at half that, with no published end date. What ...
CrowdStrike's 2026 Threat Hunting Report says 88% of exploitation of PoC-backed flaws began within 48 hours — and that the ...