Threat modelling stories
A flaw in a widely watched Microsoft repository could have let attackers run code and steal secrets through GitHub Actions, Tenable said.
Banks could face undetected ledger and pricing changes as autonomous AI attacks exploit poorly governed databases, Liquibase warns.
Patching delays now carry greater risk as Google says AI is helping attackers scale intrusions, speed up breaches and automate operations.
Reporters face rising risks from phishing, spyware and device compromise as Bitdefender urges tighter source protection and account security.
Customers gain broader visibility into AI risks as Wiz adds cloud, edge and coding-tool coverage, with Red Agent now in public preview.
The framework is designed to expose hidden risks in production AI systems that can be missed by conventional one-off tests.
Businesses relying on obfuscation and embedded secrets in mobile apps may face easier API attacks as AI can mimic legitimate traffic.
Delaying preparation could leave large firms racing to retrofit encryption before 2029 deadlines set by Google, Cloudflare and India.
Security teams now have a beta tool to probe large language model apps for prompt injection, jailbreaks and data theft before attackers do.
BeyondTrust warns a surge of unsupervised AI agents is creating a hidden “shadow workforce” with admin-level access inside enterprises.
NetSPI unveils an AI-powered overhaul of its pentesting platform UX, promising two-click workflows and sharper risk-based remediation focus.
Lineaje launches UnifAI, a security and governance layer to centralise control, discovery and policy for enterprise agentic AI deployments.
TrendAI and Nvidia link DSX Air with digital twin security tools so AI datacentre “factories” can be hardened before hardware is built.
Women hold under a quarter of cyber roles, but the field is broader, more human and more open to curiosity than many women are told.
Claude Code flaws found by Check Point could let malicious repos run code and grab API keys before developers confirm a project is trusted.
IRONSCALES' Winter 2026 Release debuts three AI agents, outbound encryption and Teams deepfake defences to counter next‑gen phishing.
Researchers can now train on live attack traffic after a new open-source dataset adds 100 million labelled security records from production systems.
UK regulators are racing to assess whether Anthropic’s Mythos model could speed up attacks on banks and unsettle financial stability.
Australian firms risk shifting bottlenecks from coding to testing and security as AI boosts developer output but leaves workflows fragmented.
Businesses must turn generic cyber threat data into tailored, actionable intelligence or risk paying more for security that feels no safer.