The latest AI security developments, threats, and industry updates.
Anthropic's unreleased Mythos model found a structural flaw in HAWK, a NIST post-quantum digital signature candidate, in 60 hours of multi-agent computation, cutting the cost of a key recovery attack by a factor of 67 million.
Varonis uncovered Dolphin X, a RAT with an AI behavioral profiler that scores infected victims by value. ZeroBEC exposed Forg365, a phishing-as-a-service platform with AI lure generation targeting Microsoft 365.
Google's Gemini 3.5 Flash Cyber is restricted to governments and trusted partners. Anthropic's Claude Security plugin ships to all Claude Code users for free. Both launched within 48 hours of each other. The divergence reveals a live debate inside AI labs about who should hold the keys.
NVIDIA and 36 industry partners — including Microsoft, Cisco, CrowdStrike, and Hugging Face — launched the Open Secure AI Alliance on July 27, 2026, releasing the NOOA framework for testing and auditing AI agent behaviour. The coalition cites recent autonomous agent attacks as the catalyst.
Zenity Labs disclosed AgentForger on July 23, a ChatGPT Workspace Agents flaw that let a single crafted URL silently build and deploy an attacker-controlled AI agent with full access to an enterprise's connected apps — email, calendar, Slack, Teams, and more.