SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Bug Bounty Stories

American Stories

Bug Bounty stories

NCC Group says human testers still vital in AI security
Data Protection

NCC Group says human testers still vital in AI security

AI tools are speeding routine checks, but hidden business logic flaws and context-specific risks still need human testers to spot them.

By Sean Mitchell • 5 min read • Last month

Global Stories

Bug Bounty stories

Bugtri launches in Sydney to curb AI vulnerability spam
Application Security

Bugtri launches in Sydney to curb AI vulnerability spam

Security teams are drowning in AI-generated bug reports, and 11 early users are already testing a system that filters the noise.

By Sean Mitchell • 3 min read • Last week
CrowdStrike launches AI security challenge with AWS
Digital Transformation

CrowdStrike launches AI security challenge with AWS

Defenders will test prompt-injection tactics against AI agents as CrowdStrike and AWS offer USD $100,000 in prizes for a virtual red-team contest.

By Sean Mitchell • 4 min read • This month
Google adds security controls for AI agents in Chrome
Software-as-a-Service

Google adds security controls for AI agents in Chrome

Browser-based AI agents will face tighter enterprise oversight as Google moves to curb data leaks and unauthorised actions in Chrome.

By Mark Tarre • 4 min read • This month
EU AI Act deadline exposes growing agentic security risks
Data Protection

EU AI Act deadline exposes growing agentic security risks

Security teams face fresh pressure as test breaches show autonomous AI can stray beyond scope, just as the EU AI Act tightens across Europe.

By Sofiah Nichole Salivio • 6 min read • This month
HackerOne launches H1 Remediation for faster fixes
Digital Transformation

HackerOne launches H1 Remediation for faster fixes

Critical vulnerability backlogs have swelled 29-fold, prompting a tool that sends fix plans into engineering systems and AI coding tools.

By Sofiah Nichole Salivio • 5 min read • Last month
ASC-IT launches Darkmoon for private AI pentesting
Data Protection

ASC-IT launches Darkmoon for private AI pentesting

The platform lets security teams run AI pentests without exposing customer infrastructure data to external models.

By Joseph Gabriel Lagonsin • 4 min read • Last month
AI moves from hype to targeted frontline & finance use
Digital Transformation

AI moves from hype to targeted frontline & finance use

Businesses are narrowing AI deployments to specific tasks as scrutiny grows over costs, returns and the need for human judgement.

By Sofiah Nichole Salivio • 7 min read • Last month
Businesses urged to rethink young workers entry paths
Manufacturing

Businesses urged to rethink young workers entry paths

Employers risk worsening shortages in cybersecurity and frontline roles unless they open new entry routes and training for young workers.

By Mark Tarre • 7 min read • Last month
Microsoft patches 622 flaws, including SharePoint bugs
Network Security

Microsoft patches 622 flaws, including SharePoint bugs

Defenders face added pressure as the update covers two actively exploited flaws and a SharePoint bug that could enable remote code execution.

By Mark Tarre • 4 min read • Last month
HackerOne joins Anthropic cyber defence AI programme
Software-as-a-Service

HackerOne joins Anthropic cyber defence AI programme

The controlled trial could help security teams cut false positives and speed remediation as frontier AI moves beyond finding bugs to validating risk.

By Sofiah Nichole Salivio • 4 min read • Last month
Anthropic widens Fable 5 safeguards & rates jailbreaks
Malware

Anthropic widens Fable 5 safeguards & rates jailbreaks

New safeguards will let Fable 5 block more harmful cyber prompts, as Anthropic also seeks a common scale for jailbreak risk.

By Sean Mitchell • 4 min read • Last month
Linux Foundation launches Akrites to fix open source flaws
Security Operations Centres

Linux Foundation launches Akrites to fix open source flaws

Backed by Amazon, Google and Microsoft, the scheme aims to speed fixes for flaws that could ripple through banks, hospitals and power grids.

By Joseph Gabriel Lagonsin • 5 min read • Fri, 26th Jun 2026
OpenAI expands Daybreak with patching tools & partners
Network Security

OpenAI expands Daybreak with patching tools & partners

The move aims to help defenders turn faster vulnerability discovery into working fixes, as OpenAI broadens access to its cyber tools and partners.

By Sean Mitchell • 5 min read • Tue, 23rd Jun 2026
Patchstack & GoDaddy add WordPress vulnerability detection
Security Operations Centres

Patchstack & GoDaddy add WordPress vulnerability detection

Eligible Managed WordPress customers gain visibility into flaws as they are disclosed, as WordPress attacks are being exploited within hours.

By Sean Mitchell • 4 min read • Thu, 18th Jun 2026

Stories from Other Regions

Bug Bounty stories

OpenAI AI model escapes test & breaches Hugging Face
Fintech

OpenAI AI model escapes test & breaches Hugging Face

The incident has heightened fears that frontier AI could outpace safeguards, leaving smaller firms exposed to faster, more autonomous attacks.

By Sofiah Nichole Salivio • 5 min read • Last month
Agoda launches public bug bounty with USD $6,000 reward
Data Protection

Agoda launches public bug bounty with USD $6,000 reward

Researchers can now earn up to USD $6,000 for exposing flaws in Agoda's core web services, APIs and mobile app via HackerOne.

By Sean Mitchell • 4 min read • Thu, 25th Jun 2026