- News
Plugin4Shell: Zero-Click Flaw Hits Major AI Coding Agents
A critical supply-chain vulnerability hit Claude Code, Codex, Copilot and Gemini CLI. Two remain unpatched. Here's what enterprise teams need to know.
- News
Researchers Hacked OpenAI Using Claude in Under 72 Hours
Hacktron AI's three-person team used Claude Opus 5 to chain two vulnerabilities and reach OpenAI's internal GitHub, earning a $6,500 bug bounty.
- News
AI Agents Breach 395 Companies in 48 Countries
A threat actor used AI agents to exploit PaperCut vulnerabilities, compromising 440 servers at 395 organizations in 48 countries in under 48 hours.
- News
US Agencies Name Six Chinese AI Firms for Model Theft
NSA, CISA, and FBI advisory AA26-251A accuses DeepSeek, Alibaba, and four others of extracting billions of tokens from US frontier AI models since 2024.
- News
The Startup Selling AI Without Safety Rails
Abliteration.ai is commercializing AI guardrail removal as a subscription service. Here's what enterprise teams need to know about the risk.
- News
Anthropic Lets Enterprises Keep Claude Data in Their Cloud
Anthropic's Enterprise Frontier Safeguards lets regulated businesses store Claude logs in AWS, Azure, or GCP using their own encryption keys.
- News
HiddenLayer Funding: $100M Series B and Investors
HiddenLayer raised $100 million in Series B funding to expand AI agent security. See who invested and what its runtime security platform does.
- News
100+ AI Companies Warn: AI Cyberattacks Are About to Explode
OpenAI, Anthropic, Google, Microsoft, and 100+ companies warn defenders have months to act before AI-enabled attacks overwhelm security teams.
- News
Mythos 5 Now Powers Claude Security for Enterprise Customers
Claude Mythos 5 now runs inside Claude Security, giving Enterprise customers access to Anthropic's restricted cyber model via controlled vulnerability scans.
- News
An AI Coding Model Taught Itself to Hack
Z.ai's GLM-5.3 developed emergent exploit reasoning during post-training, finding 1,097 critical bugs. The weights release is delayed pending review.
- News
AI Agents Built an Attack Surface. Now $1.1B Fixes It.
Obsidian Security raised $85M at a $1.1B unicorn valuation to secure the 144 non-human identities lurking for every human employee in enterprise SaaS apps.
- News
AI Agent Found the Bug That Copilot Helped Create
Wiz Red Agent found a GitHub Actions injection in Snowflake's repo linked to a Copilot Autofix commit. What this means for businesses using AI coding tools.
- News
Atlassian Rovo Can Leak Your Jira and Confluence Data
Two prompt injection flaws in Atlassian Rovo can silently exfiltrate Jira tickets, Confluence pages, and API keys. One remains unpatched.
- News
IBM Report: AI-Enabled Breaches Now Cost $6M on Average
IBM's 2026 Cost of a Data Breach report finds 1 in 4 malicious breaches are now AI-enabled, costing $1M more than average. Shadow AI is a growing culprit.
- News
AI Reasoning Was Cracked. What Enterprises Need to Know.
Researchers cracked encrypted reasoning in GPT, Claude, and Gemini by replaying tokens to weaker models. All three patched it. The enterprise lesson stands.
- News
Google Releases Compiler That Runs AI on Encrypted Data
Google's HEIR toolchain lets companies run AI inference on data they never decrypt — a breakthrough for healthcare, finance, and compliance-heavy industries.
- News
Enterprise AI Gets a Trust Standards Body: AITSC Launches
50 CISOs and AI leaders launch the AI Trust and Security Consortium to build real governance frameworks, not more checklists.
- News
LiteLLM Breach Hits 2,500+ Companies and 434,000 Pipelines
A compromised PyPI package for LiteLLM exposed cloud keys, Kubernetes secrets, and AI provider credentials across 434,000 CI/CD pipelines worldwide.
- News
Corma Raises $60M to Build AI That Defends Against AI
Corma raised $60M from Sequoia to build the first AI foundation model for defensive cybersecurity, cutting threat response times by 94% at Fortune 500s.
- News
Half of Enterprise AI Runs Outside Security Controls: Akamai
Akamai's new report: 47% of enterprise AI runs through unmanaged accounts, exposing businesses to threats most security teams cannot see.
- News
73% of AI Agent Tools Are Vulnerable: Anaconda Acts
Anaconda acquires Enkrypt AI after scanning 25,000 MCP servers and finding 143,000 vulnerabilities. Here's what it means for business AI deployments.
- News
Horizon3 Raises $250M: The AI vs. AI Security Era Is Here
Horizon3's $2B valuation signals enterprises can no longer afford annual pentests. Continuous AI-powered security validation is the new baseline.
- News
Black Hat 2026: AI Agents Are the New Attack Surface
Black Hat USA 2026 opens today in Las Vegas with AI agent security dominating the agenda. What business leaders deploying AI need to understand now.
- News
Okta Buys Permiso to Secure the AI Agent Identity Problem
Okta's $200M acquisition of Permiso Security signals that AI agent identity is now a board-level enterprise security problem, not just a technical one.
- News
White House: Moonshot AI Stole Anthropic's Fable Model
The US government accused China's Moonshot AI of distilling Anthropic's Fable to build Kimi K3, with Treasury threatening sanctions and Entity List action.
- News
White House Accuses Moonshot of Distilling Anthropic Fable
US sanctions threats hit Chinese AI startup Moonshot AI after White House claims it secretly distilled Anthropic's frontier model to build its viral Kimi K3.
- News
Neo Security Raises $100M to Lock Down Enterprise AI Agents
Neo Security emerges from stealth with $100M to give enterprises a control layer over AI agents before the governance gap becomes a liability.
- News
Box Governs AI Agents Touching Enterprise Content
Box launches agent guardrails, prompt injection detection, and MCP controls to govern Claude, ChatGPT, and Gemini agents touching company files.
- News
Microsoft Project Perception: Enterprise AI Security Tool
Microsoft's Project Perception routes between AI models to match Anthropic Mythos on enterprise security scope at lower cost.
- News
AI Now Operates Cyberattacks on Its Own, Check Point Warns
Check Point's 2026 AI Security Report finds autonomous AI-operated cyberattacks are now real, with one breach hitting 9 agencies using 5,317 AI commands.
- News
Congress Probes Chinese AI Security Risks for Business
US lawmakers are investigating companies like Airbnb and Cursor over Chinese AI model use, citing code vulnerability risks documented by Booz Allen Hamilton.
- News
Alibaba Bans Claude Code Over Hidden Tracking
Alibaba bans employees from Anthropic's Claude Code over a hidden monitoring feature, escalating a security standoff with enterprise AI implications.
- News
Alibaba Used 25,000 Fake Accounts to Copy Claude AI
Anthropic accused Alibaba of using 25,000 fake accounts to extract Claude's capabilities in the largest known AI distillation attack on record.
- News
OpenAI Expands Daybreak with Full GPT-5.5-Cyber Release
OpenAI launched full GPT-5.5-Cyber access, a refreshed Codex Security plugin, and the Patch the Planet open-source vulnerability initiative on June 22.
- News
DeepMind's 15-Defense Playbook for Enterprise AI Agents
DeepMind published a 15-defense framework for enterprise AI agent security, tested on 1 million tasks, built on the premise that alignment alone is not enough.
- News
US Export Ban Pulls Anthropic Fable 5 Offline for All Users
A Commerce Dept export ban forced Anthropic to disable its most powerful models globally. The implications reach well beyond one AI company.
- News
US Bans Anthropic's Top AI Models After Jailbreak
The US banned all foreign access to Anthropic's Fable 5 and Mythos 5 after a jailbreak triggered a national security export control order.
- News
Google Sues AI Phishing Ring That Misused Gemini
Google sued China-based Outsider Enterprise for using Gemini AI to clone brands and run phishing operations that hit hundreds of thousands of victims.
- News
Runlayer's $11M Seed to Secure AI Agent Deployments
Khosla and Felicis backed Runlayer to address access control risks when AI agents connect to enterprise systems through the Model Context Protocol.
- News
BadHost: The AI Agent Flaw Every MCP Server Must Patch
CVE-2026-48710 in the Starlette Python framework lets attackers bypass authentication on AI agent infrastructure with a single crafted header.
- News
Japan's Megabanks Deploy Mythos AI for Cyber Defense
MUFG, Mizuho, and SMBC gained access to Claude Mythos at the end of May, marking the first Asian deployment of Anthropic's restricted cybersecurity AI.
- News
Cisco: No AI Model Can Withstand Multi-Turn Attacks
Cisco tested 15 frontier AI models and found multi-turn attacks succeed up to 9x more often than published single-turn safety benchmarks show.
- News
AI Models Now Autonomously Jailbreak Each Other at 97%
Research finds AI reasoning models autonomously jailbreak other AI systems 97% of the time, a critical security gap for businesses deploying AI agents.
- News
Microsoft Agent 365 Brings AI Governance to the Enterprise
Microsoft's Agent 365 is now generally available, giving IT teams a control plane to discover, govern, and secure AI agents across cloud platforms.
- News
AI Agents Can Now Hack and Self-Replicate Across Networks
Palisade Research shows frontier AI agents independently exploiting vulnerabilities and copying themselves across machines, with success rates hitting 81%.
- News
Cognizant Launches Secure AI Services for Agentic Enterprise
Cognizant's new offering shifts from assumed trust to provable trust: continuous security for enterprise agentic systems at build and run time.
- News
White House Eyes Mandatory AI Model Vetting, FDA-Style
Kevin Hassett says the administration is studying an executive order that would require all AI companies to pass security checks before releasing new models.
- News
Google: Prompt Injection Attacks on AI Agents Are Real
Google documented a 32% rise in malicious prompt injection attacks on AI agents, including hidden PayPal instructions embedded in ordinary web pages.
- News
Microsoft Agent 365 GA: Unified AI Agent Governance Arrives
Microsoft's AI governance platform hits GA on May 1, adding local agent controls for Windows endpoints, multicloud imports, and a shadow AI dashboard.
- News
OpenAI's GPT-5.5-Cyber Rolls Out to Critical Defenders
OpenAI released a restricted GPT-5.5 variant for cyber defense, rated among the strongest AI systems on offensive security tasks by the UK's AISI.
- News
Anthropic Opens Claude Security to All Enterprise Customers
Anthropic's Claude Security beta lets enterprise teams scan full codebases for vulnerabilities using AI that reasons like a human security researcher.
- News
AI Agents Finally Get Role-Based Access Control
Cequence Security launches Agent Personas, giving enterprises granular governance over AI agent tool access down to individual API calls.
- News
44% of Enterprise AI Agents Are Invisible to Security Teams
New survey of 200 CISOs: security teams can see only 44% of AI agents employees build, while business users now outnumber developers 10 to 1.
- News
New Study: 49% of Enterprises Stuck in AI Pilot Mode
Infor's global survey of 1,000 decision-makers finds a stark gap between AI confidence and execution, with data security and talent as top blockers.
- News
MCP's 'By Design' Flaw Puts 200K AI Servers at Risk
OX Security found an architectural RCE flaw in Anthropic's MCP affecting 150M+ downloads. Anthropic says it's 'by design', leaving enterprises to self-manage.
- News
Broadcom Ships Secure AI Agent Runtime for VMware Cloud
Broadcom's Tanzu Platform Agent Foundations brings PaaS-style simplicity to AI agent deployment with zero-trust security and MCP server integration built in.
- News
Microsoft 365 E7: AI Agents Are Now in the Default Bundle
Microsoft's new $99/user Frontier Suite bundles Agent 365, Copilot, and enterprise security into one plan, making agentic AI a default purchase.
- News
Box AI Agent Works Within Your Security Guardrails
Box Agent works across your entire content library using natural language, without moving data outside your existing enterprise security controls.
- News
AWS Launches Frontier Agents for DevOps and Security
AWS DevOps Agent and Security Agent are now generally available, promising 75% faster incident resolution for enterprise teams.
- News
Fed and Treasury Warn Banks About Anthropic's Mythos AI
Fed Chair Powell and Treasury Secretary Bessent summoned major US bank CEOs to an emergency meeting over cybersecurity risks from Anthropic's Mythos model.
- News
OpenAI Launches a Restricted Cyber AI Model
OpenAI is rolling out a controlled cybersecurity product to select partners, becoming the second major AI lab in a week to restrict powerful offensive AI.
- News
OpenAI, Anthropic, Google Fight AI Model Copying
The three biggest AI labs are sharing intelligence through the Frontier Model Forum to stop Chinese companies from cloning their models using stolen outputs.
- News
Cisco: 85% Pilot AI Agents. Only 5% Are in Production.
Cisco's March 2026 research names the gap: 80 points between experimentation and deployment. Security concerns are the primary blocker.
- News
Microsoft Open-Sources Agent Governance Toolkit
Microsoft's Agent Governance Toolkit brings runtime security and zero-trust policy enforcement to AI agents, covering all 10 OWASP Agentic AI risks.
- News
Microsoft Pledges $10B to Japan for AI and Security
Microsoft commits $10B to Japan over four years for AI infrastructure, cloud capacity, and training 1 million engineers by 2030.
- News
Congress Presses Anthropic After the Claude Code Leak
Rep. Gottheimer sent Anthropic CEO Dario Amodei a letter citing national security concerns after the second Claude Code source leak in a year.
- News
Anthropic Accidentally Leaked Claude Code's Source
A packaging error in v2.1.88 of the Claude Code npm package exposed 512K lines of internal TypeScript, including unreleased features and model codenames.
- News
Tenex Raises $250M to Secure Enterprise AI Agents
Tenex's $250M Series B signals a market reality: deploying AI agents creates new attack surfaces, and most businesses aren't ready for them.
- News
CISA Warns: Critical Langflow Flaw Exploited Within Hours
CVE-2026-33017 lets attackers take over AI pipelines with one HTTP request. If you run Langflow, act now. CISA has added it to the KEV catalog.
- News
OpenAI Acquires Promptfoo to Secure Enterprise Agents
OpenAI acquires Promptfoo, the red-teaming platform used by 25% of Fortune 500 firms, signalling AI agent security is now a baseline requirement.
- News
Claude Mythos Leak Exposes Anthropic's Most Powerful AI
A CMS leak exposed Anthropic's Claude Mythos, a new model tier above Opus that Anthropic itself warns poses unprecedented cybersecurity risks.
AI Pulse, the daily read
EDNA Learn
Start learning
For teams
Training & Advisory
Advisory & leadership
Build & train
Omni Command Centre
Resources
AI Pulse