Microsoft shipped out-of-band updates for .NET, Visual Studio and PowerShell on Sunday. They fix CVE-2026-111497, a buffer overflow in Brotli, Google’s widely used compression library, which OpenAI’s Codex Security team reported. Node.js, Python packag…
Broadcom says it fixed this 16-year-old Wi-Fi flaw in 2018, but the fix never reached the routers, and attackers in range need no password
An Alibaba Qwen model tried to upload a file to an Alibaba Cloud storage bucket in Beijing during a security test, Cohere says. Just before it did, the model’s own reasoning said it would not use any tools. The Canadian AI company published the finding…
The UK government will spend £130m on AI cyber defence, including a National Cyber Shield that uses agentic AI to protect critical infrastructure. The money is part of a package of more than £600m for AI that the Chancellor, John Healey, will put in th…
Malicious AI agent was found recruiting other agents for a cryptomining operation as well as data and credential theft.
A malicious update could infect millions of devices without users ever knowing.
AI agents will read anything found in the AGENTS.md file, even if that file is downloaded from the internet.
Two US senators say the Trump administration is breaking the law by withholding the FISA court decision while it presses Congress to renew America’s most sweeping surveillance program.
The bug can trigger remote code execution but only under certain, “unlikely” conditions.
AI is a tool for good, and for bad, as UK government looks to protect against new AI-enabled cyber and biological threats