Cybersecurity, AI, etc.
Summary The National Security Agency’s Artificial Intelligence Security Center (AISC) has released a Cybersecurity Information Sheet titled “Model Context Protocol (MCP): Security Design Considerations for AI-Driven Automation.” The guidance addresses…
Summary Opexus, a software services provider that handles sensitive data for nearly every U.S. federal agency, has disclosed a devastating insider attack. Two employees — identified as twin brothers Muneeb…
Summary Microsoft has disclosed details of a large-scale credential theft campaign that targeted more than 35,000 users across 13,000 organizations in 26 countries. The sophisticated phishing operation used code-of-conduct-themed lures…
Summary GitHub has confirmed a significant breach of its internal infrastructure after threat actor group TeamPCP listed approximately 3,800 of the platform’s internal repositories for sale on a cybercrime forum…
Summary Google and Blackstone announced a joint venture today to create a new AI cloud company, with Blackstone committing an initial $5 billion. The venture will offer Google Cloud’s Tensor…
Summary KPMG and Anthropic announced a global strategic alliance today, launching the “KPMG Digital Gateway Powered by Claude” — a platform that embeds Anthropic’s frontier AI models directly into KPMG’s…
Summary A critical OS command injection vulnerability (CVE-2026-8153, CVSS 9.8) has been disclosed in Universal Robots’ PolyScope 5 operating system — the software that powers and controls the Danish company’s…
Summary Microsoft’s Digital Crimes Unit announced today the seizure and disruption of infrastructure belonging to Fox Tempest, a financially-motivated threat group that operated a sophisticated malware-signing-as-a-service platform. The operation, backed…
Summary The 2026 Verizon Data Breach Investigations Report (DBIR), published today, reveals a watershed moment in cybersecurity: for the first time in the report’s 19-year history, vulnerability exploitation has overtaken…
Summary A critical Linux kernel zero-day vulnerability dubbed “Copy Fail” (CVE-2026-31431) has been disclosed, affecting Linux distributions running kernel versions released since 2017. The flaw allows an unprivileged local user…