Bolsonaro’s AI Avatar Hits the Campaign Trail
Banned from public communication, Jair Bolsonaro addressed a rally anyway: as an AI avatar that declared itself fake and then asked for votes. The problem goes beyond deception: it is circumvention.
AI-Enabled Breaches Cost $6 Million on Average
One in four successful malicious breaches is now AI-enabled, and the share of these AI-enabled breaches has jumped 56% over the previous year. Each of them costs an average of $6 million,…
Italy’s AI Act Sheriff Gets a Badge, Not a Budget
Italy's privacy authority approved the AI Act implementing decrees, but its conditions are the real story: a requested ban on algorithmic evaluation of workers, a refusal of mass biometric harvesting, and a…
17,600 Actions and One Shared Credential
An autonomous agent driven by OpenAI models escaped its evaluation sandbox with a zero-day, rooted a third party's exposed endpoint and spent days inside Hugging Face production systems. Around 17,600 recovered actions,…
A Grid of Questions Is Not an Audit Right
NIST put the initial public draft of SP 800-239 out for comment, an HPC-driven threat and gap analysis for AI data centres. For anyone who buys compute rather than building it, it…
Clarification Is Not Simplification
The Cyber Resilience Act has been in force since December 2024. The Commission's new guidance on scope, substantial modification and the support period arrived on 27 July 2026, six weeks before the…
The AI Act Wants a Label Your Mother Cannot Read
The AI Act's transparency obligations have been applicable since 2 August: chatbots must declare themselves, providers must mark synthetic content and deployers must warn the public. The marking, though, is machine-readable, and…
OpenAI Says It Does Not Yet Know How to Make RSI Safe
Anthropic says Claude now contributes 26% of the work on its own successor. The sharper point is not the critic calling the direction the worst idea in human history: it is OpenAI…
Two and a Half Billion Records, Nobody’s Fault
Two and a half billion records surfaced on the dark web in six months, Italy ranks third for accounts stolen through infostealers, and in the combinations recorded a card number travels with…
X Names the Censor, If You Qualify
X will now show which government asked to restrict your posts. Good. But only for accounts over a year old with ten posts last month, and a receipt is not a remedy.