Bug Bounty stories
Businesses are narrowing AI deployments to specific tasks as scrutiny grows over costs, returns and the need for human judgement.
Employers risk worsening shortages in cybersecurity and frontline roles unless they open new entry routes and training for young workers.
Defenders face added pressure as the update covers two actively exploited flaws and a SharePoint bug that could enable remote code execution.
The controlled trial could help security teams cut false positives and speed remediation as frontier AI moves beyond finding bugs to validating risk.
New safeguards will let Fable 5 block more harmful cyber prompts, as Anthropic also seeks a common scale for jailbreak risk.
Backed by Amazon, Google and Microsoft, the scheme aims to speed fixes for flaws that could ripple through banks, hospitals and power grids.
The move aims to help defenders turn faster vulnerability discovery into working fixes, as OpenAI broadens access to its cyber tools and partners.
Eligible Managed WordPress customers gain visibility into flaws as they are disclosed, as WordPress attacks are being exploited within hours.
Many harmless prompts will now be diverted to Claude Opus 4.8 as Anthropic tightens safeguards around its newest general-use model.
Security buyers get a stronger benchmark as CREST-certified testers gain faster access to Synack's vetted red team for client engagements.
The wider rollout targets critical infrastructure and software maintainers after early users found more than 10,000 serious flaws.
Rising vulnerability volumes are outpacing fix times, prompting HackerOne to roll out an AI system that feeds confirmed threats into developer tools.
The ranking underscores rising demand for tools that can cover hybrid networks as ransomware and identity attacks increasingly target connected devices.
The move widens defences for businesses as AI systems become a bigger target for attackers and zero-day flaws multiply across enterprise software.
Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.
Security teams may cut backlogs as validated HackerOne flaws are mapped into Wiz, linking exploit evidence to cloud assets for faster prioritisation.
Security teams can now rank cloud flaws by exploitability and impact, as validated HackerOne reports feed directly into Wiz's risk graph.
The public test could bolster or undermine claims that VEIL can anonymise sensitive AI data without letting outsiders recover the original records.
Researchers can now earn up to USD $6,000 for exposing flaws in Agoda's core web services, APIs and mobile app via HackerOne.
Nearly half of large Irish organisations still lack confidence in spotting attackers early, leaving customer data and operations exposed.
