From Hacks to Bioweapons, Claude Misuse Is Now Everywhere
Plus: The US disrupts the internet’s biggest black market, a Conti ransomware hacker gets prison time, Meta fails to stop...
Blog
When the Whole Company Adopts AI: What It Does to Your SOC
Over the past year, we watched a new class of alert appear in enterprise security operations centers and grow faster...
OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
The "major malicious attack" that targeted RubyGems in May 2026 was the work of a swarm of OpenAI agents, according...
After 9/11, we came together. After Bondi, we didn’t
Twenty-five years later, it’s easy to remember the images of September 11 but harder to reconstruct how that morning felt....
EU Cyber Resilience Act Reporting Obligations Take Effect for Manufacturers
As of September 11, 2026, manufacturers of products with digital elements are subject to new incident reporting obligations under the...
The AI Exchange: Innovators in Payment Security Featuring Integrity360
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature...
Weekly Update 521: Breach Perception v. Reality
12 September 2026 I think what really resonates with me this week is being able to completely turn the tables...
Friday Squid Blogging: Rotting Squid on a Beached California Boat
Friday Squid Blogging: Rotting Squid on a Beached California Boat Smells awful: But an estimated 30 to 50 tons of...
My Talk at DEF CON
My Talk at DEF CON Last month, I gave a talk at DEF CON on AI hacking: what happens when...
Meta Sued Over Training Data for Its AI and Face-Recognition Systems
The proposed class action alleges Meta illegally harvested people’s Facebook and Instagram photos to train its AI image-generation models and...
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet Pierluigi Paganini...
Teams and Copilot are changing addresses: update your firewalls
if ( !emtpy($headline_subheadline ) ) : ?> Two popular Microsoft services will be redirected to new URLs, causing problems for...
ConnectWise patches critical ScreenConnect authentication failure after five days
if ( !emtpy($headline_subheadline ) ) : ?> The company seeks to reassure users after revealing a new vulnerability. endif; ?>...
Apple’s A20 Pro rewrites the rules for chip design — again
if ( !emtpy($headline_subheadline ) ) : ?> Apple didn't just set the rules for folding devices this week, it also...
Anthropic finds evidence of a fourth AI escaping from containment
if ( !emtpy($headline_subheadline ) ) : ?> After plowing through four million more chat transcripts, though, it hasn’t found any...