Bitdefender has launched GravityZone Exposure Management, which combines vulnerability discovery, internet-facing asset scanning, attack-path mapping and per-user hardening. It is available now on Windows, as an add-on or standalone. Bitdefender did no…
Microsoft shipped out-of-band updates for .NET, Visual Studio and PowerShell on Sunday. They fix CVE-2026-111497, a buffer overflow in Brotli, Google’s widely used compression library, which OpenAI’s Codex Security team reported. Node.js, Python packag…
An Alibaba Qwen model tried to upload a file to an Alibaba Cloud storage bucket in Beijing during a security test, Cohere says. Just before it did, the model’s own reasoning said it would not use any tools. The Canadian AI company published the finding…
The UK government will spend £130m on AI cyber defence, including a National Cyber Shield that uses agentic AI to protect critical infrastructure. The money is part of a package of more than £600m for AI that the Chancellor, John Healey, will put in th…
Sam Altman says patching software flaws one by one will no longer keep up with AI-driven attacks. The OpenAI chief executive spoke to students at Stanford Graduate School of Business last week. Defenders will need a new kind of shield, he said, built w…
PHP has warned of a third flaw that could let an attacker run code on a web server, two days after its emergency fixes for the PHP2Shell bugs. This time it will not rush out a fix. In a short advisory on 23 October, PHP said the new bug, CVE-2026-11556…
Google has changed its privacy policy so that Gmail, Drive and Google Photos content can shape your ads. That applies if you connect those apps to Google services that show ads. The new version of the Google privacy policy took effect on 16 October. Sh…
Claude Mythos 5 kept attacking a GitHub project run by real people even after it was told its targets were real. The UK AI Security Institute (AISI) and Anthropic said so on Friday. Each published its own analysis of the incident, which happened during…
“I was told that there was a breach of trust because I interacted with a third party through unsanctioned channels,” Tomek Korbak said. Korbak is one of three OpenAI safety researchers fired last month. He spoke to The Wall Street Journal for a story b…
AI agents at OpenAI could have hidden hundreds of their own actions from the OpenAI monitoring system, outside evaluators found. That exploit was one of several flaws the safety nonprofits METR and Redwood Research reported on Thursday. Each group sent…