All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
A threat group called GreyVibe, likely linked to Russia, has been running cyberattacks since August 2025 against Ukrainian and other organizations using AI-generated fake content and custom malware tools. The group uses ChatGPT, Gemini, and other AI tools to create realistic phishing lures (fake websites and emails impersonating legitimate organizations), and likely uses AI to help develop malware like LegionRelay (a remote access trojan, or RAT, which lets attackers control a victim's computer from afar) and FallSpy (Android spyware that steals personal data). Researchers say the attackers show less sophistication than typical state-sponsored groups and may include current or former cybercriminals.
Okta, a company that provides identity security tools (software that verifies who users are and controls access to systems), reported strong earnings driven by increased demand from companies building agentic AI (AI systems that can independently perform tasks and make decisions). CEO Todd McKinnon emphasized that while agentic AI is boosting interest in Okta's security products, the company is preparing for long-term infrastructure needs rather than chasing short-term profits.
Anthropic, an AI company that makes Claude (a large language model, or LLM, which is software trained on huge amounts of text to generate human-like responses), has become the most valuable AI startup in Silicon Valley after raising $65 billion in funding, pushing its valuation to $965 billion and surpassing competitor OpenAI. The company's valuation jump is driven by strong revenue from Claude Code, an AI coding assistant, which reached a $47 billion annual run rate. Anthropic is now preparing for an initial public offering (IPO, when a private company sells shares to the public to raise money), alongside other major AI companies.
Microsoft is releasing an updated version of Microsoft 365 Copilot (an AI assistant integrated into Microsoft's productivity tools) with a faster loading time and redesigned interface. The new version uses progressive disclosure (showing only relevant tools based on what you ask for, rather than all options at once) and includes an improved prompt box that lets you format text directly.
Anthropic, the company behind Claude (a large language model, or LLM, which is an AI trained on massive amounts of text to generate human-like responses), raised $65 billion in funding and is now valued at $965 billion, making it the world's most valuable AI startup. The company's growth has been driven by widespread adoption of its products by large businesses, especially after releasing powerful coding tools recently.
A sandbox escape vulnerability in nono (a sandboxing tool using Landlock/seccomp, which are Linux security features that restrict what programs can do) allows processes running inside the sandbox to break out by communicating with systemd D-Bus sockets (the inter-process communication system that manages user services). An AI agent or untrusted tool with bash access could exploit this to write files or run commands outside the sandbox with the user's permissions.
vLLM version 0.14.1 has a security flaw where a setting called `trust_remote_code` is permanently turned on in two model files, even when users try to turn it off. This allows RCE (remote code execution, where attackers can run harmful code on your computer) through malicious models downloaded from HuggingFace, a popular model repository. This is a partial fix attempt for two earlier vulnerabilities that didn't fully solve the problem.
OpenTelemetry Go's `ParseFile` function has a file descriptor leak (a reference to an open file that is never closed), where each call to parse a schema file leaves the file open in memory. In a long-running application that repeatedly parses schema files, these open files can accumulate until the process runs out of available file descriptors and crashes, causing a denial of service (unavailability).
Geordie, an AI security startup, raised $30 million to expand its platform that helps organizations monitor and control AI agents (AI systems designed to complete tasks independently) deployed across their systems. The platform provides real-time visibility into agent behavior and risks, while its Beam tool uses context engineering (a technique that shapes how AI systems understand and respond to instructions) to constrain agent behavior at scale.
A removed safety check in OpenTelemetry Go's baggage parsing (the mechanism for passing contextual data between services) allows attackers to send extremely large or malformed baggage headers that consume excessive CPU and memory while being fully processed and logged, creating a denial-of-service vulnerability. The parser no longer rejects oversized inputs upfront and instead processes every invalid member completely, sending errors to the logging system by default.
Anthropic is releasing Claude Opus 4.8, a new AI model designed to be more 'honest' by better recognizing when it doesn't have enough information to answer confidently. The model addresses a common problem where AI systems make unsupported claims (stating things as fact without solid evidence), and early testers found that Opus 4.8 is about 4 times less likely to do this compared to its predecessor.
Apple is planning a major redesign of Siri, its voice assistant, for iOS 27, which may feature a ChatGPT-like chat interface. The redesign shows a pill-shaped chat bubble that appears from the Dynamic Island (the notch area on iPhones) with options to choose between Ask, Siri, and ChatGPT, though Apple has not officially confirmed these details and the final design may differ.
Wassym Bensaid, Rivian's chief software officer, leads both Rivian's internal software development and RV Tech, a joint venture with Volkswagen that builds the operating system and electrical architecture for future electric vehicles from Volkswagen Group brands. Rivian recently launched an AI-powered voice assistant in its R1 vehicles and is preparing to release the R2, the first car built on the new shared architecture developed through the joint venture. The article discusses how Rivian is moving toward AI-powered, agent-like software platforms in cars while reducing reliance on traditional physical controls and Apple CarPlay integration.
This bulletin covers multiple security incidents including a privilege escalation flaw in Azure Backup for AKS (a Kubernetes container management system) with a CVSS score of 9.9, a massive network of 1,350 command-and-control servers (systems attackers use to control compromised computers) discovered across Middle Eastern infrastructure providers, and a supply chain attack on DAEMON Tools software where attackers compromised legitimate signed binaries (executable files verified as authentic). The incidents highlight ongoing vulnerabilities in cloud services, infrastructure, and software distribution systems.
Attackers are increasingly using AI agents (autonomous software that can act independently) to find and exploit security vulnerabilities much faster than before, with the time from a vulnerability becoming public to actual attacks dropping from 2.3 years in 2018 to about 10 hours in 2026. Organizations continue to suffer breaches due to common problems like misconfigurations (incorrect security settings), unpatched systems (software without the latest security fixes), and identity sprawl (too many user accounts and access permissions), not because they lack awareness of these issues but because fixing them at scale is difficult.
Endava, a software contracting firm, uses Codex (an AI tool for code generation and software development) to transform into an 'agentic organization' where AI agents work alongside teams throughout project lifecycles. The tool enables small teams to deliver large amounts of work faster by codifying senior expertise into guidance for junior developers, compressing weeks of sequential analysis and design work into days, and improving knowledge transfer across the organization.
Fix: The source states: 'Support for restricting this behavior has since been added and the fix is available in the repository pending release.' However, no specific version number, patch details, or explicit mitigation steps are provided in the text.
GitHub Advisory DatabaseGreyVibe is a Russia-linked hacking group that uses AI tools like ChatGPT and Google Gemini across all stages of attacks, from creating fake websites to building custom malware, targeting Ukrainian military and government entities since August 2025. Although the group appears less sophisticated than elite state actors (evidenced by design flaws in their AI-generated malware and casual naming conventions), they leverage AI to operate at a much higher capability level than their technical skill would normally allow. Researchers expect GreyVibe's AI expertise and attack complexity to continue increasing over time.
AI agents (AI systems that can take actions by using external software tools) aren't inherently dangerous, but the risk comes from how they're set up and deployed in organizations. The main concern is the overlap between what the AI can do and what tools it has access to, which can create security vulnerabilities if not managed carefully.
Fix: For the Azure Backup for AKS vulnerability: Microsoft has patched the flaw and enforced additional validation checks that did not exist in March 2026. For the DAEMON Tools supply chain attack: CISA requires Federal Civilian Executive Branch agencies to apply necessary fixes by May 30, 2026, and the incident is tracked as CVE-2026-8398.
The Hacker NewsA LayerX Security report shows that enterprise AI risk is not spread evenly across workers but is concentrated among a small group of "power users" (employees who use AI much more frequently and deeply than average) and a few dominant platforms like ChatGPT and Copilot. While most employees use AI casually, the top 5% of users generate far more AI conversations and sensitive data exposure, and AI tools are fragmenting across many unmanaged platforms like personal accounts and browser extensions, making it hard for organizations to see and control where their data goes.
Organizations are rapidly adopting AI agents (autonomous systems that can execute tasks and make decisions without human intervention), but this creates serious security risks that traditional defenses cannot match. Threat actors are developing agentic attacks (cyberattacks powered by AI that learn and adapt autonomously) that move faster than human security teams can respond, while AI agents themselves lack the judgment to avoid harming their own enterprises. The security industry must evolve from manual fixes to automated, scaled remediation strategies to defend against machine-speed attacks.