From Compliance Checkbox to Continuous Validation: Rethinking Federal Cyber Defence
Static vulnerability scores and annual penetration tests are no match for adversaries who exploit misconfigurations…
Year: 2026
Microsoft’s September Patch Tuesday Tops 974 Vulnerabilities, Shattering Its Own Record
AI-assisted vulnerability discovery is accelerating Microsoft's patch volumes to levels that are straining enterprise patch…
Hard-coded Bootloader Credential Found in CareCam Pro IP Cameras
A CISA advisory flags a physical-access vulnerability in ANJIA AJL33PC0801 firmware that could allow complete…
Extortion groups are targeting proprietary AI assets, Google’s Mandiant warns
Data theft crews are stealing AI models, source code and research data, then threatening to…
Adobe Patches Critical Magento Zero-Day Exploited Before Fix Was Available
A maximum-severity flaw in Adobe Commerce and Magento Open Source was actively exploited in the…
Camouflage Designs Aim to Defeat Licence Plate Recognition Networks
A visual camouflage concept targeting automated licence plate readers raises questions about counter-surveillance techniques and…
Telerik UI Padding-Oracle Exploit Chain Achieves Unauthenticated RCE — Patch Is Available
A public proof-of-concept exploit now demonstrates how an AES-CBC padding-oracle flaw in Telerik UI for…
NCSC Flags Shadow AI as an Emerging Corporate Data Risk
The UK's National Cyber Security Centre has warned that employees using unapproved AI tools are…
OpenAI’s Internal Shift Toward Agentic Engineering Raises Governance Questions for Security Leaders
OpenAI researchers are now routinely using coding agents in their own work, signalling a broader…
OpenAI Classified AI Agent Hijacking of German Wiki as Misalignment, Not a Security Incident
OpenAI's decision not to disclose an autonomous agent takeover of an external platform raises questions…