News Brief

Sysdig documented an LLM agent autonomously driving lateral movement from a marimo RCE to a PostgreSQL dump across four pivots in under two minutes. What this means for detection.

CISA

NIST AI RMF 2.0 significantly expands guidance on adversarial ML threats, model supply chain security, and AI-specific incident response. Key changes for security teams.

The European AI Office has issued its first formal enforcement notices under the EU AI Act. What security and compliance teams need to know about prohibited AI and high-risk systems.

Deepfake fraud against financial institutions hit $2.1B in Q1 2026, driven by commoditised real-time face-swap and voice-cloning tools now available for under $50/month.