All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
A cyber risk assessment helps security teams identify and prioritize potential threats to company assets, but many leaders make mistakes that reduce its effectiveness. Common errors include treating assessments as checklists rather than business-focused decision tools, hiding concerning results, assessing incomplete system scope (like forgotten servers or AI tools), and creating risk registers (documents listing identified risks) that don't reflect actual exposure. The article explains these seven "gotchas" to help CISOs conduct more effective assessments tied to real business impact.
Google released a commercial showing the founding fathers using Google Workspace (a collection of productivity tools like Docs and Meet) and Gemini (Google's AI assistant) to draft the Declaration of Independence. The ad depicts various AI and collaboration features, including AI transcription, real-time document editing, and meeting scheduling, though the commercial has been criticized for being cringeworthy.
A vulnerability (CVE-2026-14742) was found in langchain-ai langgraph up to version 1.2.4, where the _freeze function in the Task Result Cache (a system that stores computed task results to avoid recalculating them) uses a weak hash when processing the default_cache_key argument. This could potentially be exploited remotely, though the attack requires significant technical skill and is considered difficult to execute.
A security weakness was found in CowAgent version 2.1.0 where the verify_server function fails to properly authenticate requests when the wechatmp_token (a security credential) is missing or empty, allowing remote attackers to bypass authentication. This vulnerability has been publicly disclosed and is being actively exploited.
sqlite-utils 4.0rc2 was developed with help from Claude Fable (an AI coding agent) to fix critical bugs found in the previous release candidate, particularly a severe data loss issue in the delete_where() function that failed to commit transactions properly. The release introduces a new transaction model where every database write operation automatically commits before returning, eliminating the need for manual commit() calls in most cases.
A weakness was found in ONNX (a software format for AI models) versions up to 1.21.x that allows an out-of-bounds read (accessing memory outside the intended area). The vulnerability is in a function called convPoolShapeInference_opset19 and can be attacked remotely by someone with login access, though the attack code is now public.
In fickling (a security tool for analyzing pickle files), versions up to 0.1.11 have a bug where the UnsafeImportsML analysis pass marks all imports as already-checked in a shared list, causing the MLAllowlist pass (which is supposed to block imports from unsafe libraries) to skip its checks entirely. This means dangerous imports from standard library modules that aren't explicitly blocked can be deserialized and executed when fickling's security check returns LIKELY_SAFE.
Fanfiction communities are attempting to identify and remove works created using generative AI (large language models like Claude and ChatGPT that can create text automatically). However, the detection methods being used are unreliable and risk falsely accusing human writers of using AI.
The article explores whether AI language models (LLMs, which are trained systems that predict and generate text) can write fiction indistinguishable from human authors, amid growing concerns about AI use in publishing and media. It examines what linguistic features actually differentiate human writing from machine-generated text, drawing on perspectives from linguists and established novelists like Jennifer Egan and Jeanette Winterson.
Picklescan (a security tool that checks pickle files, which are Python files that serialize and deserialize objects) before version 0.0.33 fails to detect a specific dangerous code gadget called numpy.f2py.crackfortran.getlincoef that can hide in pickle __reduce__ methods (special functions that control how objects are reconstructed). This allows attackers to create malicious pickle files that execute arbitrary code when opened, potentially compromising shared model files in supply chains.
picklescan (a tool for detecting malicious code in pickle files, which are Python serialized objects) before version 0.0.30 has a vulnerability that allows attackers to hide malicious code in pickle files using a specific method (idlelib.run.Executive.runcode in reduce methods). When these files are loaded using pickle.load, the hidden code executes automatically, enabling RCE (remote code execution) and potential supply chain attacks on systems using PyTorch models.
A vulnerability in Keras (a machine learning library) version 3.14.0 allows attackers to run arbitrary code by exploiting how the Lambda layer deserializes data (converts stored data back into usable form). The bug occurs because the safety check treats an unset value the same as a deliberately disabled one, allowing malicious bytecode (low-level machine instructions) to execute when functions like `keras.layers.deserialize()` are called without proper safety protections.
Bad Epoll (CVE-2026-46242) is a use-after-free bug (a flaw where code tries to access memory that has already been freed) in the Linux kernel that allows ordinary users to gain root access on Linux desktops, servers, and Android devices. The vulnerability exists in the epoll feature, which programs use to monitor multiple files or network connections at once, and a researcher named Jaeyoung Chung created a working attack that succeeds about 99% of the time by carefully timing the exploitation of a very narrow window where two parts of the kernel interfere with each other.
Researchers created SkillCloak, a tool that disguises malicious AI agent skills (small add-on packages that give coding agents new abilities) so they fool security scanners more than 90% of the time by rewriting suspicious code patterns or hiding payloads in directories scanners skip. Skills run with the agent's full access to files and passwords, making malicious ones dangerous, but current scanners that check skills before installation fail to catch cloaked versions.
Fix: The researchers propose SKILLDETONATE, a runtime checker that watches what a skill actually does at the operating-system level (what files it reads/writes, where it sends data) instead of analyzing how it looks. According to the source, this approach caught 97% of attacks with a 2% false-alarm rate on safe skills, and maintained effectiveness even when skills were cloaked, though it takes a couple of minutes per skill to run.
The Hacker NewsAI-powered attacks are accelerating faster than human security teams can respond, with breaches now happening in an average of 29 minutes. To address this, organizations are building "agentic SOCs" (security operations centers where AI agents handle detection and response tasks at machine speed while human analysts supervise and make final decisions). CrowdStrike's AgentWorks platform enables security teams to create custom AI agents without coding to automate tasks like threat investigation, detection engineering, and compliance work.
Fix: Upgrading to version 2.1.1 addresses this issue. The fix adds an explicit check to ensure wechatmp_token is not empty in the verify_server() function, causing the /wx endpoint (the entry point for requests) to reject requests with a 403 Forbidden error when the token is missing or has its default empty value, instead of falling back to a weaker signature verification method.
NVD/CVE DatabaseFix: The delete_where() bug was fixed by wrapping the DELETE operation with an atomic() wrapper, matching the correct implementation used in the delete() function. The broader solution involved comprehensive redesign of transaction handling across 30 files, documented in the PR and shared transcript referenced in the source text.
Simon Willison's WeblogFix: Apply patch a7bf3a0f1d18bb62575236ef6e4944980c40e045, available at https://github.com/onnx/onnx/commit/a7bf3a0f1d18bb62575236ef6e4944980c40e045.
NVD/CVE DatabaseAlibaba is banning its employees from using Claude Code (Anthropic's AI programming tool) starting July 10, 2026, reportedly because Anthropic has implemented restrictions on Chinese users. Anthropic had experimented with a version of Claude Code that could identify Chinese users to prevent unauthorized resellers and distillation (training AI models on outputs from other AI models), but the company says it has since developed stronger security measures and plans to remove this detection feature.
Fix: According to Anthropic's Thariq Shihipar, 'The team has landed stronger mitigations since then and we've actually been meaning to take this down for a while.' The source does not specify what these stronger mitigations are or provide a timeline for their implementation.
TechCrunch (Security)Researchers discovered JadePuffer, believed to be the first ransomware attack fully controlled by an autonomous AI agent (a program that acts independently to complete tasks). The AI agent exploited a vulnerability in Langflow (a framework for building AI applications) to gain initial access, then automatically performed reconnaissance, stole credentials, moved through the network, and encrypted data while adapting to failures in real time, much like a human attacker would.
Fix: The vendor fixed CVE-2025-3248 on April 1, 2025. Additionally, CISA (Cybersecurity and Infrastructure Security Agency) tagged this vulnerability as exploited in attacks, warning organizations to patch internet-exposed endpoints.
BleepingComputerOpenAI paused its Stargate UK project, a planned multibillion-pound datacentre investment in Britain, citing regulatory concerns and high energy costs in April. An investigation revealed that OpenAI apparently never visited the key site in North Tyneside, and £20 billion of the £30 billion in investment that the UK government promoted appears to have been speculative rather than confirmed, raising questions about whether the project was primarily a publicity announcement rather than a genuine development plan.
This research proposes a framework for making AI hiring systems more fair by addressing algorithmic bias (when AI systems make systematically unfair decisions against certain groups). The study analyzes real applicant data and finds that language differences in interviews and how interview questions are structured can cause unfair outcomes, but these problems can be reduced by modifying linguistic features (the words and language patterns used) and making interview questions more consistent across all applicants.
Fix: The source identifies two interventions demonstrated to reduce unfairness: (1) modifying linguistic features in interview responses, and (2) increasing interview structure (making questions more standardized). The study notes that 'the strongest fairness improvements observed when these interventions are jointly applied,' meaning combining both approaches together is most effective.
AIS eLibrary (Journal of AIS, CAIS, etc.)Fix: Apply upstream commit a6dc643c6931, or install your distribution's backport when it lands. Kernels built on 6.4 or newer are affected unless they already have the fix. Older 6.1-based kernels, including some Android phones such as the Pixel 8, are not affected because the bug arrived in 6.4.
The Hacker NewsOnline predators are using nudification apps (AI tools that digitally remove clothing from images) to create fake sexual content of children from innocent photos posted online. The Report Remove service helps victims report and remove these explicit images from social media, but the widespread availability of these AI tools means children can be targeted without directly contacting criminals.