The full corpus — beyond today's front page.
142 results · page 5 of 6
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned Tuesday that attackers are actively exploiting three vulnerabilities to hack Internet-exposed on-premises SharePoint Server instances. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
After Anthropic determined its Mythos 5 model posed serious cybersecurity risks and launched a controlled-access collaboration with defenders called Project Glasswing, the U.S. government ordered the model taken down in June 2026. Anthropic disputed the basis for the shutdown, arguing the triggering vulnerability was a narrow, non-universal jailbreak rather than a systemic threat.
Who should care: Privacy officers · Cybersecurity · General readers · AI governance · Policy
A survey by Retool found that only 8% of technology leaders consider their organizations to have strong AI governance in place, suggesting that most companies deploying AI are doing so without mature oversight structures.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
CISA released a postmortem after a contractor accidentally published dozens of internal credentials, including AWS GovCloud keys, to a public GitHub repository, where they sat exposed for nearly six months before journalist Brian Krebs alerted the agency. Security experts say the incident reveals gaps in how CISA detected and responded to the exposure.
Who should care: Cybersecurity · Privacy officers · Administrators
In a rare combined cybersecurity/squid post, a twenty-nine-year-old squid proxy bug can leak HTTP requests. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
Who should care: Cybersecurity · Privacy officers · Administrators
A major credential leak spurred the Cybersecurity and Infrastructure Security Agency to strengthen protections for its sensitive materials, improve how researchers can report agency vulnerabilities and develop plans for similar incidents, the agency said in a forensic report released Thursday. The blog post outlines CISA’s response to the leak that the researcher who discovered it […] The post CISA looks to remedy ailments from big May credential leak appeared first on CyberScoop.
Who should care: Cybersecurity · Privacy officers · Administrators
Microsoft’s latest Secure Future Initiative report outlines progress on secure foundations, AI-powered defense, and future-ready cybersecurity. The post Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative appeared first on Microsoft Security Blog.
Who should care: General readers · AI governance · Policy
On July 7, 2026, the Irish National Cyber Security Centre (“NCSC”) published guidance for management boards and senior executives of organizations subject to the EU’s Network and Information Security Directive (“NIS2”). Reflecting a central theme of NIS2, the Guidance makes it clear that cybersecurity is no longer solely a technical issue, but a governance and... Continue Reading…
Who should care: Lawyers · Compliance
A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks. [...]
Who should care: Cybersecurity · Privacy officers · Administrators
OpenAI has released GPT-5.6 Sol, described as its most capable model to date, following a delay caused by U.S. government restrictions tied to cybersecurity concerns about advanced AI systems.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
OpenAI delayed the public release of ChatGPT 5.6 at the White House's request, first limiting access to government-approved users before a broader rollout. The Trump administration raised cybersecurity concerns, and a similar restriction was applied to Anthropic's latest models.
Who should care: General readers · AI governance · Policy
The IAPP has published a Brussels-focused briefing examining how the European Union is approaching the intersection of artificial intelligence regulation and cybersecurity policy. The piece reflects ongoing EU efforts to coordinate its AI Act framework with broader digital security obligations.
Who should care: General readers · AI governance · Policy
The communication, adopted in Strasbourg on July 7, is built around three pillars: making frontier AI “safe, accessible and deployable” for European cybersecurity, preparing the EU’s cyber ecosystem and scaling European AI capabilities.
Who should care: General readers · AI governance · Policy
A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent ventures included fake intelligence companies and a now-defunct AI-based lobbying platform they operated under assumed names.
Who should care: General readers · AI governance · Policy
Last week, national security agencies from the Five Eyes—that’s the rich, English-language-speaking countries club—jointly released a statement warning of the increasing cyber risks of AI models: in particular, their ability to autonomously hack into systems and networks. The statement was more measured than some of the breathless headlines about it, and the advice they gave is pretty much the standard advice everyone gives—albeit with newfound urgency. Internet risks are nothing new, and cyberattacks—both large and small—have been a significant issue since…
Who should care: General readers · AI governance · Policy
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) gave federal agencies until Friday to patch an actively exploited vulnerability in the Langflow visual framework for building AI agents. [...]
Who should care: General readers · AI governance · Policy
IRALOGIX, a financial technology platform focused on retirement accounts, has appointed Lisa Matthews to lead expanded capabilities across fraud prevention, cybersecurity, and AI governance. The hire signals a deliberate effort to build internal oversight structures around the company's use of artificial intelligence alongside its security functions.
Who should care: AI governance · Lawyers · Administrators · General readers · Policy
CISA has launched the ANCHOR-CI framework, a new alliance aimed at deepening partnerships and improving information sharing between government and the private sector to protect critical infrastructure from cyber threats.
Who should care: Healthcare professionals · Privacy officers · Compliance
AdaptHealth, a publicly traded home medical equipment and supplies company, has disclosed a cybersecurity incident it has classified as material, involving the theft of patient data. The breach affects customers who rely on the company for home health products including diabetes supplies and sleep therapy equipment.
Who should care: Healthcare professionals · Privacy officers · Compliance
Anthropic has called for regulatory guardrails on AI systems with cybersecurity capabilities, following a White House decision to loosen restrictions on that category of AI model. The move puts one of the leading AI developers in the unusual position of asking for rules its own products would have to follow.
Who should care: AI governance · Lawyers · Administrators · Compliance · General readers · Policy
Go To Lawyers for Cybersecurity & Data Privacy 2026 Massachusetts Lawyers Weekly
Who should care: General readers · Privacy officers · Policy
Anthropic said export controls on certain models had been lifted after the company came to a series of agreements with the government.
Who should care: General readers · AI governance · Policy
Amicus Solutions, also known as Fedora Solutions, has disclosed a cybersecurity incident that affected Huntsville Hospital Health System. The hospital confirmed it was impacted by the breach, which was reported in connection with HIPAA compliance obligations.
Who should care: Healthcare professionals · Privacy officers · Compliance
Apple has announced it is accelerating the release of software updates in response to growing cybersecurity concerns tied to AI. The company did not specify which vulnerabilities or threats prompted the early release schedule.
Who should care: General readers · AI governance · Policy