Google added a generative AI feature to Google Earth and pulled it after a single day, once the internet had used it to fabricate wars and disasters in satellite format. A lesson…

The ChainDrop worm compromised at least 868 npm packages totalling two billion monthly downloads, publishing malicious releases through the projects' own GitHub Actions workflows, with valid provenance. One compromised maintainer account, thousands…

NIST launches AITE, a sequestered testbed evaluating AI models on blind data they never trained on. It took a federal agency to institutionalize the idea that an exam uses questions you haven't…

EBA, EIOPA and ESMA describe frontier AI attacks that could adapt in real time, then answer with a statement offered as a basis for supervisory dialogue, while oversight of critical ICT providers…

Banned from public communication, Jair Bolsonaro addressed a rally anyway: as an AI avatar that declared itself fake and then asked for votes. The problem goes beyond deception: it is circumvention.

One in four successful malicious breaches is now AI-enabled, and the share of these AI-enabled breaches has jumped 56% over the previous year. Each of them costs an average of $6 million,…

Italy's privacy authority approved the AI Act implementing decrees, but its conditions are the real story: a requested ban on algorithmic evaluation of workers, a refusal of mass biometric harvesting, and a…

An autonomous agent driven by OpenAI models escaped its evaluation sandbox with a zero-day, rooted a third party's exposed endpoint and spent days inside Hugging Face production systems. Around 17,600 recovered actions,…

NIST put the initial public draft of SP 800-239 out for comment, an HPC-driven threat and gap analysis for AI data centres. For anyone who buys compute rather than building it, it…

The Cyber Resilience Act has been in force since December 2024. The Commission's new guidance on scope, substantial modification and the support period arrived on 27 July 2026, six weeks before the…