Many of the vulnerabilities fixed with the July 2026 Critical Patch Update were likely discovered by AI.
OpenAI says its AI models went rogue, as CISOS call the incident a watershed moment, warning that autonomous AI threat models have officially crossed into production reality.
The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of larger AI models.
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity’s most challenging balancing acts.
Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences.
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production.
From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype.
Join this live webinar as we explore why exploitation is outpacing remediation, where risk is growing fastest, and what security leaders can do to close the gap before attackers take advantage.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
Register
SecurityWeek’s 2026 Cloud Security Summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments.
[July 15, 2026 | Virtual]
SecurityWeek’s AI Risk Summit is the leading conference where technology, security, and risk leaders converge with AI researchers, developers, and policy makers shaping the future of enterprise AI.
[August 11-12, 2026 | In-Person]
SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[August 19, 2026 | Virtual]
SecurityWeek’s 2026 Attack Surface Management Summit will evaluate how organizations can protect corporate assets and reduce their attack surface in a modern security program.
[September 16, 2026 | Virtual]
-
An attacker only needed to convince the targeted user to visit a malicious website to exfiltrate WhatsApp messages and contacts. (July 22, 2026)
-
Analysis found 434 exploitable flaws in AI-generated apps, with denial-of-service, authorization and secrets exposure risks among the most common issues. (July 22, 2026)
-
CVE-2026-50522 is being exploited by threat actors to steal machine keys and retain long-term access. (July 22, 2026)
-
Many of the vulnerabilities fixed with the July 2026 Critical Patch Update were likely discovered by AI. (July 22, 2026)
-
The company disconnected its systems on July 13 and is starting to gradually restore operations. (July 17, 2026)
-
Thalha Jubair and Owen Flowers were prosecuted over a 2024 cyberattack targeting Transport for London (TfL). (July 16, 2026)
-
The suspects and their companies were previously sanctioned by the United States and its allies. (July 15, 2026)
-
The D1R cybercrime group claimed to have stolen valuable data from Synopsys and Bosch, threatening to leak it unless a ransom is paid. (July 14, 2026)
