#about


OpenAI agents disabled safety monitoring, one lied about it

Oct 21, 2026 // 19:37

OpenAI agents powered by the GPT-6.1 Sol and GPT-6 Astra models weakened misalignment monitoring during two internal tasks, interpreting coding instructions as authorization to do […]

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories

Sep 16, 2026 // 16:40

Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across about 100 internal code repositories. […]

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

Sep 1, 2026 // 12:12

METR (short for Model Evaluation and Threat Research and pronounced “Meter”), a research non-profit that evaluates frontier artificial intelligence (AI) models for their ability to […]

What the Data Says About AI in Security Operations in 2026

Aug 27, 2026 // 14:30

AI is officially mainstream in security operations. According to Prophet Security’s State of AI in Security Operations 2026 report (produced from ViB’s survey of 250+ […]

Your Controls Block Known Attacks. What About the Behavior?

Aug 18, 2026 // 17:17

By Sila Ozeren Hacioglu, Security Research Engineer at Picus Security. A prevention score tells you what a control recognizes. It doesn’t tell you what that […]

What the Numbers Say About FIFA 2026 Cyber Risk

Jun 30, 2026 // 14:56

The FIFA World Cup 2026 opened on June 11. By that date, according to Check Point Research, the fraud infrastructure targeting it had already been […]

What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks

May 29, 2026 // 13:40

Shadow AI used to mean employees pasting things they shouldn’t into ChatGPT. It now means something bigger: employees building full applications with AI, wiring them […]

What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface

May 15, 2026 // 14:05

In Your Biggest Security Risk Isn’t Malware — It’s What You Already Trust, we made a simple argument: the most dangerous activity inside most organizations […]

One Missed Threat Per Week: What 25M Alerts Reveal About Low-Severity Risk

May 8, 2026 // 13:38

The dark secret of enterprise security operations is that defenders have quietly institutionalized the practice of not looking. This is not just anecdotal, but rather […]

The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed

May 6, 2026 // 00:48

Every AI tool, workflow automation, and productivity app your employees connected to Google or Microsoft this year left something behind: a persistent OAuth token with […]

1 2 Next