Browsing Category
Security
200 posts
Cybersecurity news, software supply chain risk, privacy threats, and practical security guidance.
Google’s AlphaProof Code Verified Signal at Machine-Code Level
DeepMind used AI agents to verify key Signal guarantees in compiled AArch64 code. Here is what the proof covers, how it caught old bugs and what remains outside scope.
Trump Nominates Palantir CISO Michael LoSapio to Lead a Smaller CISA
Michael LoSapio would inherit CISA after a one-third workforce loss, a 22-month leadership gap and a disputed narrowing of its cyber mission.
Australia Plans AI Safety Regulator After OpenAI Medicare Breach
Australia plans mandatory AI incident reporting, independent model evaluations and a new regulator after an OpenAI agent breached a Medicare statistics portal.
Microsoft’s AI Found Safe Rust Bugs. Here’s What Is Still Open
Microsoft FORGE Lab found Rust standard-library soundness bugs, including safe-code crashes. Here is what was fixed, what remains open and what teams should audit.
Claude Fable 5.2 Cuts API Price 20%; Mythos 5.2 Stays Gated
Claude Fable 5.2 costs $8/$40 per million tokens and runs up to 30% faster. Mythos 5.2 keeps verified access for cyber and life-sciences work.
CERT-In’s AI Audit Framework Puts Agent Permissions and Rollback Under Test
CERT-In’s new AI audit framework adds four risk tiers and practical tests for agent permissions, RAG stores, incident reporting, emergency stops and rollback.
Claude Code ‘Don’t Ask Again’ Put 1,379 Secrets on GitHub, Apiiro Finds
Claude Code can save approved shell commands in .claude/settings.local.json. Check Git history, rotate exposed credentials, and prevent repeat leaks.
White House Pulls U.S. AI Testing Center Closer as Public Reporting Narrows
CAISSI reportedly now answers informally toward the White House. NIST still publishes cyber tests, but broader AI safety reporting has narrowed.
SonicWall SSL-VPN MFA Bypass Is Exploited: Patch and Check Logins
CVE-2026-19868 can let alternate credentials bypass SAML and its MFA on SonicOS SSL-VPN. Check affected builds, patch, verify and review logins.
Ericsson’s 5G Drone Detection Tracks Aircraft That Never Connect
Ericsson’s ISAC system uses cellular radio reflections to track unconnected drones. Here is how it works, what hardware it needs and what 2027 pilots must prove.