Cranium AI Acquires Aiceberg to Build End-to-End Security Platform for the Agentic AI Era
Summary Cranium AI, a leading AI security and governance platform, has announced the acquisition of Aiceberg, a company specializing in agentic AI security and risk management. The deal unites two…
EY and Microsoft Commit $1 Billion to Joint AI Initiative Aimed at Scaling Enterprise AI Adoption
Summary EY and Microsoft have announced a major expansion of their strategic alliance, committing over $1 billion across five years to a new initiative focused on helping enterprises move beyond…
Trump Expected to Sign Executive Order Requiring Pre-Release Government Vetting of Frontier AI Models
Summary The White House is expected to issue an executive order as early as today (Thursday, May 21) establishing a voluntary framework for government review of frontier AI models before…
Google’s AI-Powered Bug Hunting Finds 200+ Chrome Vulnerabilities in a Single Month
Summary Google has internally discovered over 200 Chrome vulnerabilities in the past month alone, a dramatic surge that security researchers attribute to the company’s deployment of AI-powered vulnerability discovery tools.…
Critical Drupal Core SQL Injection (CVE-2026-9082) Threatens PostgreSQL Sites — Patch Immediately
Summary Drupal has disclosed a highly critical SQL injection vulnerability in its core database abstraction API, tracked as CVE-2026-9082. The flaw specifically affects Drupal sites running on PostgreSQL backends, where…
Microsoft Defender Under Active Exploitation — Two Zero-Days (CVE-2026-41091, CVE-2026-45498) Added to CISA KEV Catalog
Summary Microsoft has confirmed that two vulnerabilities in its Defender antivirus software are being actively exploited in the wild. The more severe of the two, CVE-2026-41091 (CVSS 7.8), is a…
NYC Health + Hospitals Breach Exposes 1.8 Million Patient and Employee Records — Attackers Had 11 Weeks of Network Access
Summary A data breach at NYC Health + Hospitals Corporation — the largest public health system in the United States — has compromised personal and protected health information belonging to…
Cohere Releases Command A+ — A 218B Parameter Open-Source MoE Model Built for Sovereign Critical Infrastructure
Summary Cohere has released Command A+, a powerful open-source Mixture-of-Experts (MoE) model under an Apache 2.0 license, purpose-built for sovereign critical infrastructure. The model spans 218 billion parameters but activates…
NSA Releases Security Guidance for Model Context Protocol (MCP) — Warns Agentic AI Systems Introduce “Novel and Systemic Risks”
Summary The National Security Agency’s Artificial Intelligence Security Center (AISC) has released a Cybersecurity Information Sheet titled “Model Context Protocol (MCP): Security Design Considerations for AI-Driven Automation.” The guidance addresses…
Opexus Insider Attack Destroys 30+ Federal Agency Databases — FBI Investigating Twin Brothers Who Allegedly Wiped IRS and GSA Systems
Summary Opexus, a software services provider that handles sensitive data for nearly every U.S. federal agency, has disclosed a devastating insider attack. Two employees — identified as twin brothers Muneeb…