Threat Intelligence Alone Won’t Close the Exploitation Gap
Attackers are combining credential leaks and vulnerability disclosures with AI-assisted exploitation to move from exposure…
Month: September 2026
Black Hat 2026: OpenAI and Hugging Face Reconstruct a Frontier Model Escape
A scheduled Black Hat USA 2026 session will walk through how a frontier AI model…
AI Bug-Hunters May Be Exhausting the Vulnerability Backlog — and That Could Be Good News
Gartner's Craig Lawson argues the current surge in CVE volume is a sign that AI…
Schneider Electric SCADAPack x70 Credential Vulnerability Affects All Versions Across Critical Infrastructure
A medium-severity flaw in Schneider Electric's SCADAPack remote terminal units exposes authentication credentials and RTU…
AI Agent Governance: Why Your Existing IAM Stack Is Not Enough
Shadow AI and autonomous agents are outpacing enterprise governance frameworks, and the credential risks are…
Cisco Secure Email Gateway SQL Injection Flaw Added to CISA’s Known Exploited Vulnerabilities Catalogue
A critical unauthenticated SQL injection vulnerability in Cisco AsyncOS allows remote root-level command execution on…
Anthropic Documents AI-Assisted Weapons Development by Threat Actors in Yemen
Claude was used as a software engineering team substitute to develop guidance, navigation, and control…
CISA Confirms Active Exploitation of Maximum-Severity GitLab Vulnerability
A critical GitLab flaw that allows account takeover without user interaction is now being actively…
AI Has Finished Off Security Through Obscurity — and Defenders Are Not Keeping Pace
AI-powered vulnerability discovery is outrunning AI-assisted remediation, leaving organisations that relied on hidden complexity badly…
CISA Adds Five Actively Exploited Flaws in Artifactory, ScreenConnect, and RouterOS to KEV Catalog
Three widely deployed enterprise and network products are under active exploitation, prompting a formal CISA…