Artificial intelligence / Machine learning

Mastering AI and Machine Learning: Your Resource for Automation, Analytics, Threat Detection, and More.

Hugging Face ‘attacker’ revealed to be OpenAI agents that escaped testing sandbox

Laura FrenchJuly 22, 2026

OpenAI said GPT-5.6 Sol and a pre-release model exploited vulnerabilities to “cheat” on ExploitGym.

Today's Top AI/ML Headlines

AI/ML News

Application security

JADEPUFFER agentic ransomware returns, targets AI assets with ENCFORGE payload

Laura FrenchJuly 22, 2026

The agent abused the victim’s Docker daemon to access and encrypt AI-related files.

Vulnerability Management

LegacyHive, ACR Stealer, Hugging Face, Route 53, and Kieran Human from Threatlocker – Kieran Human – SWN #600

July 21, 2026

Nudification, Yeats, LegacyHive, ACR Stealer, Hugging Face, Route 53, 764, Wordpress, Kieran Human from Threatlocker, and More. Segment Resources: Malicious Edge extension abuses Native Messaging as bridge to malware: https://www.bleepingcomputer.com/news/security/malicious-edge-extension-abuses-native-messaging-as-bridge-to-malware/. This segment ...

Application security

Hugging Face uses GLM 5.2 to investigate AI agent-driven cyberattack

Laura FrenchJuly 20, 2026

Hugging Face turned to an open-weight model after being restricted by frontier model guardrails.

Vulnerability Management

AI Security at Scale, CMMC phase II paused, and the Weekly Enterprise News – Keith Hollender – ESW #468

July 20, 2026

Interview with Keith Hollender, CEO and Co-Founder of Arcova. Why AI Security Is Becoming an Execution Problem, Not Just a Governance Problem. As enterprises move from AI experimentation to adoption at scale, security leaders are under pressure to enable innovation without introducing unmanaged risk. The challenge is no longer whether organizations...

Vulnerability Management

M. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More – SWN #599

July 17, 2026

M. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More on this episode of the Security Weekly News.

Vulnerability Management

1999 Called and It Wants Its Exploits Back – PSW #935

July 16, 2026

This week, our technical segment covers a new open-source tool written by Paul (and Claude) that helps you keep your Linux systems up to date and assess supply chain risks. It's called "fettle" and is a pure Python implementation that gives you even more features than previously discussed! Then in the security news: The GodDamn Ransomware , CMMC su...

AI/ML

CISOs Build Practical Playbook for Governing Agentic AI

Kelley DamoreJuly 16, 2026

A practitioner-built framework for securing, and scaling agentic AI

Vulnerability Management

Mr. Data, Joomla Babooa, 1VPNS, RabbitMQ, UEFI, Center 16, Sextortion, Aaran Leyland – SWN #598

July 14, 2026

Mr. Data, Joomla Babooa, 1VPNS, RabbitMQ, UEFI, Center 16, Sextortion, Aaran Leyland, and More on the Security Weekly News.

AI/ML

Shadow AI Risks Explained: Securing AI Agents, MCP & Enterprise Data – WC #1

July 13, 2026

Shadow AI is rapidly transforming enterprise security — and creating new risks CISOs can’t ignore. In this SC Media webcast sponsored by Sumo Logic, cybersecurity experts Adrian Sanabria, Chaz Clawson, and David Gervin break down the rise of Shadow AI, AI agents, MCP (Model Context Protocol), prompt injection, AI governance, and the evolving threat...

AI/ML

Cloud Security Meets AI: What CISOs Need to Govern Before They Scale – Brent Neal – CSP #226

July 13, 2026

AI is changing cloud security fast, but the biggest challenge is not just adoption. It is governance. In this episode, Jess sits down with Brent Neil, CISO at RapidScale, to talk about what CISOs should be watching as AI becomes embedded in cloud environments, business workflows, and sensitive data systems. Brent shares practical insight on AI gove...

Fast Five

Selected by the SC Media Editorial team every Tuesday.

Sign up now for the top five issues cybersecurity pros need to know this week.

Artificial intelligence / Machine learning

Hugging Face ‘attacker’ revealed to be OpenAI agents that escaped testing sandbox

Today's Top AI/ML Headlines

AI models caught cheating in cybersecurity evaluations

Mithra AI launches to verify data before AI models produce answers

Guide helps organizations evaluate AI in security operations centers

Head of federal AI testing lab resigns after three months

Artificial Intelligence / Machine Learning: Explained and Explored

The organizations that got breached had strong identity programs

In Europe, security has become the price of entry to the AI market

7 mistakes companies make deploying AI agents

Bridging the divide: The convergence of AI and infosec

Why context rules in the AI era

More Mythos-like models are coming — what organizations can do now

Cut to the chase: How to save time and effort through validation in exposure management

3 ways to close cybersecurity’s remediation gap

CISOs no longer get to choose because AI is redefining the SOC

AI regulations are here – and most organizations aren’t ready

AI/ML News

JADEPUFFER agentic ransomware returns, targets AI assets with ENCFORGE payload

LegacyHive, ACR Stealer, Hugging Face, Route 53, and Kieran Human from Threatlocker – Kieran Human – SWN #600

Hugging Face uses GLM 5.2 to investigate AI agent-driven cyberattack

AI Security at Scale, CMMC phase II paused, and the Weekly Enterprise News – Keith Hollender – ESW #468

M. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More – SWN #599

1999 Called and It Wants Its Exploits Back – PSW #935

CISOs Build Practical Playbook for Governing Agentic AI

Mr. Data, Joomla Babooa, 1VPNS, RabbitMQ, UEFI, Center 16, Sextortion, Aaran Leyland – SWN #598

Shadow AI Risks Explained: Securing AI Agents, MCP & Enterprise Data – WC #1

Cloud Security Meets AI: What CISOs Need to Govern Before They Scale – Brent Neal – CSP #226

Fast Five

Selected by the SC Media Editorial team every Tuesday.

AI/ML Events

Identity security under pressure: AI, compliance, and the gaps you can’t afford to ignore

Who’s watching your AI? A security-leader panel on runtime visibility and accountability

The Brittle Identity Perimeter — Why Behavioral AI Is the Next Frontier of Identity Security

Securing Agentic AI: Lessons and Strategies from the Agentic AI Task Force

Rise of the machines: How to secure and win the AI revolution