Patch Management
Microsoft Warns AI-Driven Vulnerability Discovery Will Mean Busier Patch Tuesdays
Patch Tuesdays get busier as AI drives vulnerability discovery — defender-team cadence review this week.
Policy & Government
UK Government Launches “Cyber Shield” Agentic-AI Defense Plan and Cyber Resilience Pledge
A national-scale agentic-AI defense plan from the UK — defender teams and industry partners align this week.
Supply Chain Attack
Researchers Disclose "HalluSquatting" Technique Targeting AI Coding Assistants
An AI-hallucination supply-chain finding with organization-wide implications — defender review this week.
Vulnerabilities
"GitLost" Disclosure: Researchers Say GitHub Agentic Workflows Could Leak Private Repository Data
An agentic-workflow data-exposure disclosure with organization-wide DevSecOps implications — defender review this week.
Vulnerabilities
Researchers Disclose Google Dialogflow CX "Rogue Agent" Flaw That Could Have Enabled AI Chatbot Data Theft
An AI-agent identity disclosure with cloud-defender implications — Dialogflow CX posture review this week.
Ransomware
Sysdig Documents "JadePuffer," Reportedly the First Fully Agentic-AI-Driven Ransomware Case
The first documented agentic-AI ransomware analysis lands — cloud-defender teams review posture and the human-in-the-loop nuance this week.
Artificial Intelligence (AI)
Adversa AI Research — “GuardFall” Shell Injection Bypasses 10 of 11 Open-Source AI Coding Agents
An AI-coding-agent bypass with cross-vendor implications — defender posture-review work for organizations running open-source agents this week.
Artificial Intelligence (AI)
"BioShocking" Research Tricks AI Browsers Into Leaking User Credentials
A multi-vendor AI-browser research disclosure — defender posture-review work for organizations deploying agentic browsers this week.
Artificial Intelligence (AI)
CIA's Ratcliffe Frames Advanced AI as ‘Akin to Digital Nuclear Weapons’
A senior US-intelligence framing lands mid-cycle — how AI-cyber policy hardens in focus this week.
Artificial Intelligence (AI)
Microsoft Warns Poisoned MCP Tool Descriptions Can Turn AI Agents Into Data-Leak Channels
A fresh vendor-research disclosure at the intersection of AI agents and supply-chain risk — Microsoft says poisoned tool descriptions can quietly redirect what an agent does, and pairs the research with defender guidance for teams shipping agentic AI this week.
Mobile Security
Researchers Disclose 282 iOS AI Apps Leaking API Keys in Network Traffic
A scale-significant AI-app privacy disclosure with developer accountability implications: Wake Forest researchers found 282 of 444 iOS AI apps exposing usable LLM credentials in their own network traffic, and most stayed open months after notification.
Vulnerabilities
Researchers Disclose Amazon Q Developer VS Code Flaw Affecting Cloud Credentials
A coding-AI-assistant flaw with cloud-credential implications — defender posture review for the week.