OpenAI’s Evaluation Agent Broke Out of Its Sandbox and Attacked Hugging Face
A capability-testing exercise with guardrails removed produced an autonomous attack chain that breached a third…
Month: July 2026
EU and US Banks Found Leaking Customer Data via Advertising Trackers
Tracking pixels embedded in banking websites have been quietly transmitting customer data to advertising platforms,…
Paying Ransomware Operators Does Not End the Threat
New Proofpoint survey data confirms that a significant share of organisations that pay ransoms face…
CISA Adds Langflow RCE Vulnerability to Exploited Vulnerabilities Catalogue
A remote code execution flaw in the Langflow AI agent framework is being actively exploited,…
CISA Adds Four Actively Exploited Vulnerabilities to Known Exploited Catalog
Two WordPress core flaws, a Langflow code execution risk, and an ageing DD-WRT buffer overflow…
US AI Regulation Finds Its Footing, but the Ground Keeps Shifting
The Trump administration's abrupt pivot toward frontier AI controls signals a new regulatory era, but…
MIT’s $3 Million AI Surveillance Rollout Raises the Stakes for Campus Privacy Governance
A 500-camera deployment with real-time facial classification at one of the world's most prominent universities…
CVE-2026-60137: WordPress Core — WordPress Core SQL Injection Vulnerability
What security leaders need to know about CVE-2026-60137, CVE-2026-63030, wordpress.
Head of NIST’s AI Safety Testing Centre Departs After Three Months
Chris Fall's brief tenure at the Center for AI Standards and Innovation raises questions about…
Critical WordPress vulnerability chain exploited within hours of disclosure
Two bugs — individually awkward to exploit, devastating when combined — enabled unauthenticated remote code…