AI-generated summary Obsidian Security announced its Runtime Policy Decision Engine to give security teams centralized control over AI agent actions before they execute. The company states that the engine uses context regarding identities, access levels, and third-party applications to allow or block actions or require human approval.
AI-generated summary Intezer researchers used AI agents to rebuild source code for Slack, Apple’s Finder, and a TinyTurla-NG sample from shipped programs and vendor documentation. The team added a new feature powered by a small local model to the rebuilt Slack app after the AI reverse engineering process.
AI-generated summary Abnormal AI released its 2026 State of Behavioral Security Report, showing that AI agents topped the list of planned investments in behavioral monitoring. Security professionals expressed division regarding their organizations' ability to establish and maintain baselines for normal AI agent behavior.
AI-generated summary Acronis TRU Cyber Pulse 2026 reports that cybercriminals are using AI agents to coordinate attacks. Researchers identified more than 575 malicious OpenClaw skills delivering malware to Windows and macOS systems.
AI-generated summary Anthropic says it has upgraded Claude Fable and Claude Mythos to version 5.2, bringing improvements in coding, reasoning, and vision. Anthropic says the updated models generate outputs up to 30 percent faster than previous versions and are available at a lower price.
AI-generated summary WorkOS confirmed that a security researcher using the AI penetration testing framework ARTEX accidentally breached an internal sales application. CrowdStrike reported that a likely financially motivated threat actor used ARTEX to breach a South Korean finance company.
AI-generated summary The Malwarebytes connector for Claude checks suspicious links, phone numbers, and email addresses without leaving the chat. The integration includes six tools and works with both free and paid Claude plans without requiring a separate account.
AI-generated summary Wirken is an open-source gateway designed to sit between messaging applications and artificial intelligence agents to limit access if an agent is compromised. The gateway handles credentials in an encrypted vault, runs shell commands in a container, and records actions in a signed audit log.
AI-generated summary Prosecutors said three individuals were indicted on charges of wire fraud and aggravated identity theft after allegedly using artificial intelligence to steal about $129 million. Court documents state that Jacob Soall, Sharon Hazan, and Guy Sheetrit targeted thousands of companies worldwide by impersonating corporate executives and attorneys.
AI-generated summary OpenAI says it has introduced GPT-6 Cyber, a cybersecurity model trained to find and validate exploitable vulnerabilities while staying within set scopes. OpenAI says the model scored 48.5 percent on ExploitGym and outperformed GPT-5.6 Cyber across key benchmarks.
AI-generated summary Cyberhaven launches Agentic Data Security to help security teams track and control how AI agents use company data. Cyberhaven says the new module provides visibility into agent actions and stops sensitive data before it leaves the organization.
AI-generated summary Arkose Labs rolls out expanded Arkose Agent Trust Manager capabilities to help businesses control agentic traffic across customer journeys. Kevin Gosschalk, CEO of Arkose Labs, says companies can now classify agent sessions and apply allow, monitor or block policies at each step.
AI-generated summary Box has announced Box Architect for building agentic workflows and new threat protection capabilities. Teams will be able to use frontier AI to create workflows and apps while protecting enterprise content.
AI-generated summary PortSwigger has made available Burp AT, an agentic pentesting solution that enables enterprises to delegate pentests with defined limits. The solution helps security teams investigate applications more deeply and more frequently while maintaining control over scope and permissions.
AI-generated summary Sysdig has released Sysdig AI Defense to provide organizations with tools to monitor and control AI agent activity across endpoints and cloud environments. The platform checks agent actions against company policies and records agent activity and policy decisions for investigations and audits.
AI-generated summary Google Cloud is keeping its CodeMender AI tool in preview while adding controls for businesses to isolate attack simulations and target code scans. Thales Group says its early evaluation of CodeMender shows the potential to reduce vulnerability discovery time by over 95 percent while keeping human oversight.
AI-generated summary Resemble AI releases insights on detecting AI agents that use browser-use and disguise themselves as regular visitors. Resemble AI says security teams should start with OAuth consent logs and outbound traffic to find agents set up by employees.
AI-generated summary Paubox released a survey showing that healthcare leaders frequently find unapproved AI tools handling patient data without IT knowledge. The survey indicates that AI-generated code has contributed to hardcoded credentials and the exposure of patient data in healthcare organizations.
AI-generated summary Okta released the 2026 Customer Identity Trends Report detailing consumer readiness for AI agents that make purchases and handle personal information. Okta states that customer control, account security, and ease of use influence the adoption of AI agents by consumers.
AI-generated summary OpenAI announced an autonomous vulnerability discovery, exploitation, and patching pipeline powered by an upcoming cyber model to examine the Linux kernel. OpenAI says the system validated and generated patches for 948 local privilege escalation vulnerabilities in Linux at an API cost of $1.2 million.
The top AI news in your email delivered each morning. Choose categories