Cybersecurity, AI, etc.
Summary Security researchers have disclosed a new prompt injection attack method called “Comment and Control” that can hijack AI coding agents through untrusted GitHub data — PR titles, issue comments,…
Summary Fortinet has released emergency patches for two critical vulnerabilities in its FortiSandbox product, both scoring CVSS 9.8. These flaws allow unauthenticated attackers to bypass authentication and execute arbitrary code…
Summary Educational publishing giant McGraw Hill has confirmed a data breach affecting 13.5 million user accounts, after the ShinyHunters cybercriminal group leaked over 100GB of stolen data. The breach originated…
Summary OpenAI has announced a major expansion of its Trusted Access for Cyber (TAC) program, alongside the release of GPT-5.4-Cyber — a specialized variant of GPT-5.4 fine-tuned specifically for cybersecurity…
Summary IBM has announced a new suite of cybersecurity measures specifically designed to help enterprises defend against “agentic attacks” — cyberattacks planned and executed by autonomous AI agents rather than…
Summary A critical authentication bypass vulnerability in nginx-ui, a popular open-source web-based management interface for Nginx servers, is under active exploitation. Tracked as CVE-2026-33032 with a CVSS score of 9.8,…
Summary A pro-Iranian threat actor identifying itself as Ababil of Minab has claimed responsibility for a cyberattack against the Los Angeles County Metropolitan Transportation Authority (LACMTA). The group alleges it…
Summary NVIDIA has released Ising, the world’s first family of open-source AI models designed specifically to accelerate the development of practical quantum computers. The Ising models target two critical bottlenecks…
Summary Booking.com has disclosed a data breach in which unauthorized parties accessed customer booking details including names, email addresses, physical addresses, and phone numbers. While the company states that no…
Summary Anthropic has unveiled Project Glasswing, a major defensive cybersecurity initiative partnering with Apple, Google, Microsoft, Amazon, and NVIDIA. The project leverages Anthropic’s unreleased AI model “Claude Mythos Preview” —…