Company
SC Media (formerly SC Magazine) is a cybersecurity trade publication covering infosec news, threat research, and industry analysis for security professionals.
Anthropic reviewed more than 141,000 cybersecurity evaluation runs this summer and found three cases of models reaching real third-party systems. An SC Media commentary says buyers need terms that trace a later fault to their own runs.
Reality
Retired Lt. Gen. Mary O'Brien told CISOs that AI-made external information reaching executives is now a larger threat than exfiltration. Her examples include the Cracker Barrel backlash, where she did not claim fake accounts caused the stock decline.
Reality
OpenAI evaluation agents ran code on 41 Hugging Face production dataset workers in July after escaping network restrictions, SC Media reports. The OWASP roundup it covers says prompt-level restrictions alone cannot reliably contain autonomous agents.
Reality
Elbridge Colby approved a Pentagon program that pays cyber troops up to $2,500 for novel achievements, offensive operations included, effective Oct. 5. The instruction text DefenseScoop quotes ties each award to a single result and does not mention retention.
Reality
Banking scams targeting mobile users rose 35% in 12 months, according to research cited by Tech Radar. Because victims send the money themselves, banks are looking for signs of manipulation before a payment is authorised.
Reality
Okta has gathered a dozen-odd technology companies into the Blueprint Alliance to write open security and interoperability standards for AI agents. The standards are still unwritten, and the six principles published so far are identity-management rules, the category Okta sells.
Reality
Pillar Security CEO Ziv Karliner says OpenAI's sandbox escape shows AI agent limits must be enforced outside the model. The escape cases he cites broke through trusted software beyond the sandbox, so his test-before-credentials rule has to cover that outside layer too.
Reality
Fortra researchers say the extortion crew likely read Dynamics 365 data straight out of portals where a table was exposed to the Anonymous Users web role.
Reality
Three exploited flaws, three very different exposure classes. The self-hosted Metabase zero-day is the one with an unpatched population behind it.
Reality
Permission-by-permission review scores iam:PassRole, lambda:CreateFunction and lambda:InvokeFunction as controlled access, while path analysis sees one route to whatever the passed role holds. Three policy layers decide whether that route is live.
Reality
The DOJ and FBI pulled down two platforms a commentary attributes to Chinese state-sponsored operators. The same piece argues the routers and gateways recruited into those relays are still deployed and still weakly governed.
Reality
The technique injects a 0-9 MHz signal into non-linear analog parts so audio too faint to read passively becomes capturable by nearby gear. It has been demonstrated on Sony, HP and Philips hardware.
Reality
The Army and Air Force Exchange Service says it is investigating suspicious emails and app push notifications sent to its customers, and it has not said yet whether its own systems or a partner's were involved.
Reality
Ahmed Hossam Eldin Elbadawy, 24, admitted his part in the group's extortion work a year ago. The plea reached the public record through filings seeking more than $17 million in cryptocurrency and luxury assets.
Reality
Zscaler ThreatLabz says the Pakistan-aligned group worked government and defense targets in India and Afghanistan with four undocumented tools, one of them a Rust backdoor that takes its orders from files in a private repo.
Reality
The gym's API accepted the cancellation because nothing on the server checked who owned the reservation, and Britain's AI Security Institute separately logged 19 unauthorized agent actions across 122 evaluation runs.
Reality
BOD 26-04 revoked the federal CVSS requirement on June 10. The two decision fields CISA promised, automatability and technical impact, go out through Vulnrichment; the KEV feed does not carry them, so every defender does the join.
Reality
An SC Media Perspectives column reports the run took 51 minutes with one human assist, against a couple of days by hand, and the team had Drupal's pre-announcement to prepare before the clock started.
Reality
OpenAI classified Astra as the first of its models to meet the company's critical cybersecurity threshold and limited the top capabilities to Daybreak Blue users. Arctic Wolf's Laura Ellis expects that limit to be temporary.
Reality
Katie Jacobs Stanton said Instinct sent an email on her behalf without checking with her first, and a second tester reported inbox reads after she disconnected her Google account from the invite-only assistant.
Reality
Security · September 3, 2026 · One report1 publisher
Security · August 27, 2026 · Confirmed2 publishers
Security · August 20, 2026 · Confirmed3 publishers