IBM and Red Hat’s Lightwell service pairs a $712 million savings model with embargoed fixes for paying customers. Security teams still have little public data to verify the claims More than 400 previously unknown vulnerabilities in widely used Java libraries have been fixed through a new IBM and Red Hat remediation service. Only one of […]
Continue Reading
Cisco Talos and Recorded Future identified four malware delivery methods and exposed infrastructure linked to the campaign, which researchers assess may have a Kazakhstan connection. A threat group targeting government organizations across Central Asia and the Commonwealth of Independent States (CIS) has used four different methods to deliver malware, including a WinRAR vulnerability exploit, while […]
Continue Reading
Rubrik is one of a handful of companies with access to Anthropic’s Claude Mythos, an AI model so good at finding software flaws that it has not been released to the public. At its partner summit in Goa, the company brought Code Guardian, which uses Mythos to test customers’ code the way an attacker would, […]
Continue Reading
Aikido flags self-propagating malware in trusted packages, with execution shifting from install-time to runtime behavior A compromised npm package linked to Memtensor is being used to distribute a self-propagating supply chain worm capable of spreading across repositories and package registries, according to security firm Aikido. The malware, also identified in a related PyPI package, executes […]
Continue Reading
The company claims new model reduces operating costs by up to 40% while improving performance and resistance to prompt injection Anthropic has introduced Claude Opus 5.5, a new flagship AI model that the company said delivers improved performance while reducing compute costs and strengthening alignment safeguards. The release marks the first model in Anthropic’s Claude […]
Continue Reading
Broadcom also joins SE Labs’ new PIVOT programme, as participation in the US-backed MITRE Engenuity evaluations falls from 30 vendors to 11 A wave of major cybersecurity vendors is shifting away from the US Department of Defense-backed MITRE Engenuity ATT&CK Evaluations toward a new independent testing programme run by British company SE Labs, according to […]
Continue Reading
A trick once used to sneak secret instructions past AI chatbots has jumped over to old-fashioned email scams — and it’s been working at massive scale. Microsoft’s security researchers say they’ve caught a phishing campaign quietly slipping invisible characters into scam emails to sneak past spam filters, using a technique that until now mostly showed […]
Continue Reading
On August 27, 2026, OpenAI published an open letter titled “A call for collective action on cyber defense,” and asked industry, government, and AI leaders to join it. Within days it had drawn signatures from over 100 organizations — Anthropic, Google, Microsoft, AWS, Cisco, CrowdStrike, Palo Alto Networks, IBM, banks like Citi and Standard Chartered, […]
Continue Reading
OpenAI began rolling out GPT‑6 Astra on Thursday, a model the company calls its most capable and most aligned yet, while confirming the system has crossed a safety threshold that triggers stricter cybersecurity safeguards. GPT‑6 Astra is rolling out today to a limited set of organizations, OpenAI said in a blog post announcing the model. […]
Continue Reading
Unlike current ‘static’ processing, where the model ingests the video at a fixed frames-per-second rate (default 1 FPS, adjustable via API), agentic video understanding pairs the model’s core reasoning with native video tools to dynamically search, scan, and inspect target video segments across visual frames, audio, and transcripts. Across standard video analysis benchmarks, Gemini models […]
Continue Reading