7 noviniek
The ESRB issued a warning on July 7, 2026 that frontier AI models enable attackers to conduct cyberattacks at unprecedented speed and scale. European banking regulators (EBA, EIOPA, ESMA) backed the warning.
Sysdig documented the first ransomware attack run entirely by an LLM agent—from initial Langflow RCE breach to encrypting 1,342 Nacos configs—with no human operator.
Noma Security researchers discovered a prompt injection flaw in GitHub Agentic Workflows: a public issue with hidden plain-English instructions tricked the AI agent into leaking private repository files as a public comment.
A security disclosure on the Claude Code GitHub repo reports potential cross-account data exposure between workspace instances, gaining 266 points on Hacker News within hours. Anthropic is actively investigating the issue.
Anthropic launched a formal vulnerability rewards program via HackerOne targeting cybersecurity research on Fable 5 — the first such structured bug bounty for a frontier AI model from Anthropic.
Anthropic, together with Amazon, Microsoft, and Google, proposed the CJS scale (CJS-0 to CJS-4) — the first cross-industry standard for rating AI jailbreak severity across four axes: capability gain, breadth, weaponizability, and discoverability.
Boston-based Nebulock raised a $25M Series A led by FirstMark for its AI-native contextual security platform that autonomously hunts threats across endpoint, cloud and identity. Customers include Cribl, HealthEdge and Bain Capital.
