Security & Privacy News

Security & Privacy

Anthropic Expands Project Glasswing to 150 Organizations Protecting Critical Infrastructure Worldwide

Anthropic has expanded Project Glasswing to 150+ organizations across 15+ countries, with Claude Mythos Preview already flagging more than 10,000 critical vulnerabilities in power, water, healthcare, and communications infrastructure.

Hector Herrera · Jun 4, 2026 · 3 min read

Security & Privacy

92% of Security Professionals Now Worried About AI Agent Over-Permissions Across Enterprise Systems

The Cloud Security Alliance's 2026 survey finds 92 percent of security professionals concerned about AI agents holding excessive permissions across enterprise systems — with only 37 percent of organizations having formal governance policies in place.

Hector Herrera · Jun 2, 2026 · 4 min read

Security & Privacy

Microsoft's MDASH Agentic Security System Sets New Benchmark for AI-Powered Cyber Defense

Microsoft launched MDASH, a multi-model agentic security system that coordinates AI agents to detect and respond to threats at machine speed — and claims top scores on industry cybersecurity benchmarks.

Hector Herrera · May 25, 2026 · 4 min read

Security & Privacy

CISA, NSA, and Allied Agencies Publish the First Global Safety Framework for Agentic AI in Enterprise IT

CISA, NSA, and cybersecurity agencies from multiple allied nations published the first international framework for securing agentic AI systems in enterprise environments.

Hector Herrera · May 22, 2026 · 4 min read

Security & Privacy

28% of CVEs Are Now Exploited Within 24 Hours of Disclosure — AI Is the Accelerant

A new analysis finds 28.3% of CVEs disclosed in 2026 are exploited within 24 hours of publication, driven by AI tooling that converts vulnerability disclosures into working exploits in minutes.

Hector Herrera · May 20, 2026 · 4 min read

Security & Privacy

Hackers Use AI to Build First Known Zero-Day 2FA Bypass for Mass Exploitation

Threat actors used AI to weaponize a zero-day 2FA bypass and deploy it within hours of disclosure — a confirmed first that marks a qualitative leap in AI-assisted offensive hacking.

Hector Herrera · May 19, 2026 · 4 min read

Security & Privacy

Security Teams Are Using AI Just to Keep Up

77% of organizations now use AI in security operations — not as a strategic upgrade, but because human analysts cannot process modern alert volumes. A WEF report shows the math has changed.

Hector Herrera · May 18, 2026 · 4 min read

Security & Privacy

Frontier AI Models Are Finding Vulnerabilities Faster Than Security Teams Can Patch Them

Palo Alto Networks' May patch cycle found 26 CVEs using frontier AI models — versus the typical fewer than 5 per month. The window between vulnerability disclosure and weaponized exploit is shrinking fast.

Hector Herrera · May 18, 2026 · 5 min read

Security & Privacy

OpenAI Launches Daybreak to Find and Patch Vulnerabilities Before Attackers Strike

OpenAI's new Daybreak initiative uses frontier AI models and Codex Security to proactively identify and validate patches for software vulnerabilities — entering the enterprise security market directly.

Hector Herrera · May 15, 2026 · 4 min read

Security & Privacy

Meta Launches End-to-End Encrypted Incognito Chat for Private AI Conversations on WhatsApp

Meta launched Incognito Chat on WhatsApp — AI conversations processed inside a secure enclave that even Meta cannot access, with messages temporary by default.

Hector Herrera · May 15, 2026 · 4 min read

Security & Privacy

OpenAI Launches Daybreak, an AI-Powered Cybersecurity Platform to Detect and Patch Vulnerabilities

OpenAI launched Daybreak, a dedicated cybersecurity platform built on GPT-5.5, marking the company's first major product aimed specifically at enterprise security teams.

Hector Herrera · May 13, 2026 · 3 min read

Security & Privacy

Google Confirms First Real-World Case of Hackers Using AI to Build a Zero-Day Exploit

Google's Threat Intelligence Group has confirmed the first known instance of criminal hackers using AI to discover and weaponize a zero-day vulnerability, marking a concrete shift in the offensive capabilities available to attackers.

Hector Herrera · May 12, 2026 · 3 min read

Security & Privacy

Anthropic's Mythos Model Triggered a Cybersecurity Panic — But Experts Say the Threat Was Already Everywhere

Anthropic's Mythos AI alarmed bank executives and forced a White House policy rethink — but cybersecurity researchers say the exploit-generation capability it demonstrated is already widespread across deployed models.

Hector Herrera · May 11, 2026 · 4 min read

Security & Privacy

5,000+ AI-Coded Web Apps Shipped With No Authentication, Researchers Find

Security researchers found more than 5,000 web apps built with AI coding tools shipped with little or no authentication — exposing real user data to anyone on the internet.

Hector Herrera · May 8, 2026 · 3 min read

Security & Privacy

AI Is Making Government Surveillance Vastly Cheaper and Easier. Bipartisan Lawmakers Are Starting to Worry.

AI tools are removing the cost and technical friction that once limited mass government surveillance — and a bipartisan group of lawmakers is advancing disclosure bills to catch up.

Hector Herrera · Apr 28, 2026 · 3 min read

Security & Privacy

IBM Launches Autonomous Security Platform to Counter the Rise of AI-Orchestrated Cyberattacks

IBM launched an autonomous, multi-agent security platform designed to defend against AI-orchestrated cyberattacks — coordinated intrusions that outpace human security analysts.

Hector Herrera · Apr 27, 2026 · 4 min read

Security & Privacy

Anthropic's Unreleased 'Mythos' Model Gets Gated Access to 50 Organizations for Defensive Cybersecurity

Anthropic's most capable model ever built, Claude Mythos, will not be publicly released. Fifty organizations get gated access under Project Glasswing to find their own vulnerabilities before adversaries can exploit the model.

Hector Herrera · Apr 17, 2026 · 4 min read

Security & Privacy

OpenAI, Anthropic, Google Share Intelligence Through Frontier Model Forum to Block Chinese AI Theft

Three competing AI labs struck a formal intelligence-sharing agreement to counter adversarial distillation — a technique Chinese AI companies are using to replicate frontier model capabilities by querying APIs at scale.

Hector Herrera · Apr 17, 2026 · 3 min read

Security & Privacy

OpenAI Launches GPT-5.4-Cyber — A Security Model You Almost Certainly Cannot Use

OpenAI released GPT-5.4-Cyber on April 14 — a fine-tuned variant of GPT-5.4 with lowered refusal thresholds for security research and the first-ever support for binary reverse engineering. Access is locked behind a rigorous certification program most developers will not qualify for.

Hector Herrera · Apr 16, 2026 · 4 min read

Security & Privacy

Anthropic Refuses to Release Claude Mythos, Its Most Powerful Model Ever, Over Cybersecurity Fears

Anthropic announced Claude Mythos on April 7 — then withheld it after the model autonomously identified thousands of zero-day vulnerabilities across every major OS and browser.

Hector Herrera · Apr 15, 2026 · 3 min read