The National Institute of Standards and Technology is asking the public how to rebuild the National Vulnerability Database for an era of artificial intelligence, opening a 62-day comment window on August 12, 2026 that closes October 13, 2026 at 11:59 p.m. Eastern Time. The request for information published in the Federal Register seeks input on the NVD's scalability, automation, interoperability, transparency, and utility, and on where AI should, and should not, be trusted inside the… [...]
A security researcher, working with colleagues at Johns Hopkins University, opened a GitHub pull request, typed a malicious instruction into the PR title, and watched Anthropic’s Claude Code Securit [...]
Enterprise data teams moving agentic AI into production are hitting a consistent failure point at the data tier. Agents built across a vector store, a relational database, a graph store and a lakehous [...]
During Operation Lunar Peek in November 2024, attackers gained unauthenticated remote admin access — and eventual root — across more than 13,000 exposed Palo Alto Networks management interfaces. P [...]
Microsoft assigned CVE-2026-21520, a CVSS 7.5 indirect prompt injection vulnerability, to Copilot Studio. Capsule Security discovered the flaw, coordinated disclosure with Microsoft, and the patch was [...]
Earlier today, OpenAI launched GPT-5.6-Cyber, a specialized model designed to perform advanced vulnerability research and exploit development for approved defenders — including categories of work th [...]