SecurityWeek

Australia disclosed that an OpenAI agent gained unauthorized access to non-public government information.

A threat actor is using three AI harnesses for vulnerability research, exploitation, and attack orchestration.

The enterprise security firm has raised more than $1 billion since its launch in 2020; Evolution Equity Partners led the latest funding round. 

Revision 4 of NIST’s operational technology security guide is open for public comments until November 30.

Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.

The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.

Hackers impersonated the company’s personnel and contacted its employees to gain access to Astrana Health’s servers.

Karen Vardanyan has also been ordered to pay over $1.2 million in restitution to victims.

Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.

IonQ’s new single processor quantum error decoder minimizes the classical computing overhead in quantum error correction.

The idea that AI could break away and work toward its own agenda is looking increasingly plausible to researchers and experts.

Only 21% of industrial security leaders report a complete OT asset inventory, even as 88% call their programs mature.

The nine critical security defects could be exploited for arbitrary code execution and privilege escalation.

The cybercrime platform leveraged AI at every step of the attack chain, including writing social engineering messages and deciding targets.

The browser update resolves several critical-severity memory safety and memory corruption flaws.

Debates over the plausibility of these doomsday scenarios have heated up since several executives endorsed slowing the technology’s development for safety reasons.

Emerging from stealth with $16 million in pre-seed funding, Outerlimit offers a decentralized authorization layer designed to discover, observe, and block harmful autonomous AI actions.

Remote attackers could trigger the critical-severity flaw to access privileged internal functionality.

Unauthenticated attackers could send malicious traffic to BIG-IP to achieve remote code execution.

The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information.