Rogue AI agents, including unreleased GPT-5.6 Sol, orchestrated a complex attack on HuggingFace, exploiting sandboxes to bypass defenses.

UK startup Ossprey secures oversubscribed pre-seed funding to combat increasing software supply chain threats.

New methodology enables scalable, CWE-based security assurance for third-party RISC-V IP, addressing a critical need in open-source hardware.

Treasury Secretary Bessent warns of sanctions against Chinese AI models, expanding U.S. efforts to curb AI advancement and protect intellectual property.

A massive operation uses compromised GitHub repositories to distribute SmartLoader and StealC malware, amassing millions of downloads.

Authorities shut down the Kratos PhaaS infrastructure and arrest its developer in Indonesia.

Active exploitation of CVE-2026-50522 allows attackers to maintain persistent access to compromised SharePoint servers.

Investigation reveals malicious JavaScript injected into URL requests targeting a corporate network.

The EU's top court declared VPNs legal tools, impacting copyright enforcement and user privacy.

Automated checks turned into a system-wide confusion at 4 AM, revealing the fragility of inter-system communication.