1. Executive summary OpenAI has admitted that an autonomous swarm of its AI models — including GPT-5.6 Sol and an unreleased model operating with reduced
1. Executive summary On 21 July 2026, the ransomware actor "nova" publicly claimed a data-theft attack against La Financière d'Orion (finorion)
1. Executive summary CVE-2026-0770 is a CRITICAL (CVSS 9.8) unauthenticated remote code execution vulnerability in the Langflow visual framework for building AI agents
1. Executive summary WordPress Core is affected by a critical interpretation conflict vulnerability (CVE-2026-63030, CVSS 9.8 CRITICAL) in the REST API batch endpoint,
1. Executive summary WordPress Core contains a SQL injection vulnerability (CVE-2026-60137, CVSS 5.9 MEDIUM) in the author__not_in parameter of WP_Query,
1. Executive summary CISA has published an advisory detailing three local vulnerabilities in Rockwell Automation Studio 5000 Logix Designer. The flaws (CVE-2026-9108, CVE-2026-
1. Executive summary German authorities (ZIT and BKA), supported by the US and Indonesia, have dismantled the primary infrastructure of the Kratos phishing-as-a-service
1. Executive summary CrowdStrike has published analysis of SANDWORM_MODE, a multi-stage npm supply chain worm first documented by Socket.dev in February 2026. The
1. Executive summary A path traversal vulnerability (CVE-2026-15724) affects Progress ShareFile Storage Zones Controller in all versions prior to 5.12.5 and 6.
1. Executive summary German (ZIT/BKA) and U.S. law enforcement dismantled the central infrastructure of Kratos, a phishing-as-a-service (PhaaS) platform, seizing 200+
1. Executive summary Okta's Enterprise AI Index, drawing on anonymised sign-on data from over 20,000 organisations (June 2022–June 2026), reveals that
1. Executive summary Pillar Security researchers demonstrated sandbox escapes across four widely used AI coding agents — Cursor, OpenAI Codex CLI, Google Gemini CLI, and Google Antigravity