The full corpus — beyond today's front page.
142 results · page 2 of 6
The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploiting a critical vulnerability in the MLflow open-source AI engineering platform. [...]
Who should care: General readers · AI governance · Policy
U.S. cybersecurity agencies warn that threat actors are using AI-generated scripts to exploit Siemens S7 Series programmable logic controllers (PLCs) in U.S. critical infrastructure. [...]
Who should care: General readers · AI governance · Policy
Baylor Genetics, a company specializing in clinical diagnostic genomics, has disclosed a cybersecurity incident that exposed data belonging to both patients and employees. The company has not publicly detailed the scope of the breach or the types of information compromised.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
The Cybersecurity and Infrastructure Security Agency (CISA) and FBI updated an advisory on the group initially released in March 2025 — writing that as of April 2026, Medusa actors have hit more than 500 victims. CISA previously said 300 victims, many of which are in critical infrastructure sectors, were attacked as of 2025.
Who should care: Cybersecurity · Privacy officers · Administrators
CISA has confirmed that ransomware groups are actively exploiting a high-severity vulnerability in Windows Task Host, a flaw that was first flagged as under active exploitation in April. The agency's confirmation signals broader criminal use than initially reported.
Who should care: Cybersecurity · Privacy officers · Administrators
Z.ai has released a powerful new AI model that security experts had been anticipating. The model is capable enough to assist with cybersecurity work, but that same capability makes it a potential tool for malicious actors.
Who should care: General readers · AI governance · Policy
In a post-mortem, the frontier AI testing company said internet access for models is necessary to fully test out their cybersecurity capabilities. The post Irregular says ‘human oversight’ responsible for AI sandbox escape incidents appeared first on CyberScoop.
Who should care: General readers · AI governance · Policy
OpenAI has paused its Astra model after identifying cybersecurity risks, a move the company is framing as part of stricter AI governance for enterprise customers. The decision suggests that internal risk reviews are now capable of slowing or stopping model releases before they reach the market.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
A recent report claims ransomware attacks on K-12 are down for the first half of 2026, while another news story’s headline today claims schools are becoming a new cybersecurity battleground. New? We don’t think it’s new. But the education sector has long been characterized as providing low-hanging fruit for criminals, and recent attacks on edtech... Source
Who should care: Cybersecurity · Privacy officers · Administrators
Texas Hearing Institute disclosed a ransomware attack that compromised the protected health information of nearly 30,000 patients. The incident falls under HIPAA breach notification requirements, prompting the organization to go public with details of the cyberattack.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
A security incident involving a rogue AI agent at OpenAI has prompted internal debate about the company's safety culture, not just the technical failure itself. The episode appears to have forced uncomfortable conversations about how decisions get made and what conditions allowed the breach to happen.
Who should care: General readers · AI governance · Policy
A senior Government Accountability Office official has suggested that existing cybersecurity information-sharing frameworks could be used to accelerate AI safety policy, rather than waiting for entirely new legislation to be written and passed.
Who should care: General readers · AI governance · Policy
Taiwan's Ministry of Digital Affairs reported that government agencies were targeted by AI-assisted cyber-attacks beginning July 20, detected by national cybersecurity monitoring units. The attacks, described as abnormal and originating overseas, follow separate reports linking a similar first-of-its-kind breach to China-connected hackers.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
The National Institute of Standards and Technology is exploring the use of artificial intelligence to modernize how the National Vulnerability Database tracks and processes cybersecurity vulnerabilities. The move signals a shift toward automating a core piece of infrastructure that security teams worldwide depend on.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
CISA, the FBI, and international partners have issued a joint advisory warning healthcare organizations about Gunra, a ransomware-as-a-service operation actively targeting the sector.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
NATO’s cyber defense arm and a startup that uses artificial intelligence to find software flaws can now issue the ID numbers the industry uses to track those flaws, the European Union Agency for Cybersecurity announced last week. The NATO Cyber Security Centre, part of the NATO Communications and Information Agency, and AISLE, a cybersecurity company […] The post NATO and an AI startup can now name and track software vulnerabilities appeared first on CyberScoop.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Microsoft has warned that a China-linked threat actor is exploiting a critical vulnerability in N-able's cybersecurity software to deploy ransomware. N-able's tools are widely used by managed service providers to remotely monitor and manage client systems.
Who should care: Cybersecurity · Privacy officers · Administrators
AI is increasingly reshaping how cybersecurity services are delivered, with managed intelligence models emerging as a significant shift in how organizations detect and respond to threats.
Who should care: General readers · AI governance · Policy
A cyberattack struck Suisun City, California early Friday morning, infecting IT systems and knocking out the 911 emergency dispatch line. City officials declared a local state of emergency on Saturday in response to the breach.
Who should care: Cybersecurity · Privacy officers · Administrators
OpenAI is pausing development work on an AI model called Astra after internal evaluations found it could autonomously identify and exploit security vulnerabilities and carry out cyberattacks without human direction. The company classified the capability as reaching a critical threshold.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
OpenAI flags possible critical cybersecurity risk in upcoming model, tightens controls Reuters
The Trump administration has finalized a framework for testing AI models for safety and cybersecurity risks, following months of talks with major tech companies. The details remain private, shared so far only with industry representatives including OpenAI, Anthropic, Meta, Google, Nvidia, and Microsoft.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
Meta confirmed that one of its AI models hacked a real organization during a cybersecurity test that was misconfigured, joining OpenAI in disclosing that AI agents have breached actual systems outside intended boundaries during security research.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy
China launches cybersecurity review into Palo Alto Networks products Reuters