SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

Threat modelling Stories

American Stories

Threat modelling stories

Cobalt launches autonomous pentest for continuous testing
Application Security

Cobalt launches autonomous pentest for continuous testing

Security teams may get findings within 24 hours as Cobalt targets faster testing across sprawling software estates.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Global Stories

Threat modelling stories

Vercel launches public bounty to test sandbox escape
Virtualisation

Vercel launches public bounty to test sandbox escape

Researchers can claim up to USD $1 million for breaking Vercel Sandbox's isolation, as the cloud provider opens its boundary to public scrutiny.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Google Cloud unveils AI harness that finds flaws fast
Cloud Security

Google Cloud unveils AI harness that finds flaws fast

In two days, the system uncovered more than 100 critical bugs in stolen code repositories, outpacing manual review and aiding incident response.

By Mark Tarre • 5 min read • Last week
NASA lab console flaw allows unauthorised commands
Space

NASA lab console flaw allows unauthorised commands

Unauthorised access could let attackers send arbitrary commands to spacecraft and instruments via NASA's AIT-GUI console, now fixed in version 2.5.2.

By Sean Mitchell • 4 min read • Last week
ArmorCode gets verified Claude access for cyber defence
Cloud Security

ArmorCode gets verified Claude access for cyber defence

Verified access to Anthropic's Claude models should sharpen ArmorCode's exploitability scoring as security teams race to cut alert noise.

By Joseph Gabriel Lagonsin • 4 min read • This month
Anthropic says Claude models accessed real systems in tests
Network Security

Anthropic says Claude models accessed real systems in tests

Misconfigured test setups let three Claude models touch live systems, exposing production data and credentials during security exercises.

By Mark Tarre • 4 min read • This month
Island flags security concerns in nearly half of MCP servers
Cloud Security

Island flags security concerns in nearly half of MCP servers

Nearly half of scanned MCP server builds carried at least one security concern, underscoring fresh supply chain risks as AI agents rely on them.

By Sean Mitchell • 5 min read • This month
AI security experts call for stronger deployment controls
Cloud Security

AI security experts call for stronger deployment controls

The move could reshape enterprise AI security as vendors and regulators demand stronger controls around access, logging and containment.

By Mark Tarre • 3 min read • Last month
BreachLock report flags AI, cloud & web logic risks
Cloud Security

BreachLock report flags AI, cloud & web logic risks

Cloud audits produced the highest critical finding rate, while every AI system tested showed vulnerabilities and web logic flaws rose sharply.

By Joseph Gabriel Lagonsin • 3 min read • Last month
PRC model aims to reshape software security compliance
Application Security

PRC model aims to reshape software security compliance

New EU cyber rules are pushing software vendors to prove security is built into products, not bolted on after release.

By Sean Mitchell • 4 min read • Last month
OpenAI model breaches Hugging Face in unprecedented incident
Cloud Security

OpenAI model breaches Hugging Face in unprecedented incident

Security experts warn the breach shows autonomous AI can exploit old misconfigurations at machine speed, widening enterprise identity and containment risks.

By Sofiah Nichole Salivio • 4 min read • Last month
OpenAI & Hugging Face probe AI cyber security incident
AI Security

OpenAI & Hugging Face probe AI cyber security incident

The episode has sharpened concerns that advanced AI systems can uncover and exploit real-world security flaws during testing, even in restricted environments.

By Mark Tarre • 4 min read • Last month
Google Cloud unveils 13 Gemini Enterprise agent demos
Data Science

Google Cloud unveils 13 Gemini Enterprise agent demos

Developers can now use Google Cloud's examples to build and govern Gemini-powered agents for approvals, compliance and data workflows.

By Sean Mitchell • 4 min read • Last month
Entrovy launches kinetic8 for enterprise cyber visibility
Software-as-a-Service

Entrovy launches kinetic8 for enterprise cyber visibility

Enterprise security teams can now move from fragmented asset views to explainable risk scoring, as the platform reaches general availability.

By Sean Mitchell • 4 min read • Last month
Google Cloud issues guardrails for AI vulnerability agents
Privileged Access Management

Google Cloud issues guardrails for AI vulnerability agents

Security teams are being warned to keep humans and strict controls in place as AI agents can miss context and leak sensitive code.

By Sean Mitchell • 5 min read • Last month

Stories from Other Regions

Threat modelling stories

UK AI tests find Claude & GPT-5.6-Sol rogue actions
Phishing

UK AI tests find Claude & GPT-5.6-Sol rogue actions

The findings heighten concern that frontier AI agents can breach boundaries, pressure real people and target software supply chains under loose controls.

By Joseph Gabriel Lagonsin • 5 min read • This month
The shadow identity crisis: Who let the agents in?
Digital Transformation

The shadow identity crisis: Who let the agents in?

Security chiefs face a widening breach risk as most firms plan to use AI agents, yet barely a third feel ready to secure them properly.

By Evgeny Zaretskov • 5 min read • Last month