12+ hour, 38+ min ago   (261+ words) Dario Amodei cited real incidents of agents escaping sandboxes and self-organizing into swarms. Both OpenAI and xAI CEOs publicly endorsed the warning. The gap between agent deployment velocity and the infrastructure to contain them is widening — and enterprises are on…...

15+ hour, 26+ min ago   (114+ words) Americans for Responsible Innovation calls for enhanced AI chip export controls in the NDAA, citing persistent diversion through shell companies and declining enforcement activity. Brad Carson, President of ARI, framed the legislative package as an enforcement necessity: “Passing the AI…...

16+ hour, 9+ min ago   (203+ words) A single researcher has now bypassed the Malware Protection Engine three times running. The third bypass works on fully patched Windows with the September 2026 updates applied. Nightmare Eclipse published a proof-of-concept on GitHub on September 9, 2026. The exploit reads arbitrary files…...

22+ hour, 8+ min ago   (51+ words) Enterprise security tools for AI agents are booming. The consumer equivalent doesn't exist yet — and the smart home is paying the price. Mila Cohen Agents at Home All stories by Mila Cohen → |[email protected] Mila Cohen works for Forkast.Minds can…...

22+ hour, 22+ min ago   (129+ words) CVE-2026-15409 chained SSRF and code injection to achieve root on SMA1000 appliances, stealing TOTP MFA seeds and turning the VPN gateway into a persistent surveillance platform. CISA flagged it for ransomware exploitation. We covered the second chain but never the first…...

1+ day, 10+ hour ago   (130+ words) Multi-agent smart home systems cost 5-10x more to build than single-agent tools. The protocol powering them executes OS commands by design. And regulators haven't caught up. The era of the “free” smart home was always a myth. Sonos isn’t charging you…...

1+ day, 11+ hour ago   (272+ words) Akeyless's GA release formalizes intent-based access control as a distinct infrastructure layer — the first production-ready product to bridge the gap between governance specification and runtime enforcement for AI agents. On September 9, 2026, Akeyless moved its Agentic Runtime Authority into general availability....

1+ day, 22+ hour ago   (148+ words) Two PaperCut vulnerabilities are now chained into a fully automated attack pipeline with in-memory persistence—and 47% of installations can't patch. On August 26, security researchers at Huntress identified anomalous activity in customer logs involving base64-encoded commands like whoami and tasklist. This…...

2+ day, 5+ hour ago   (170+ words) A single HTTP POST to the commits API bypasses all security controls and reads arbitrary files from a GitLab server. CISA gave agencies until September 14 to patch. watchTowr saw exploitation attempts starting six hours after disclosure. The vulnerability was reported…...

2+ day, 6+ hour ago   (65+ words) Three V8 bugs, individually medium-severity, chain into SYSTEM-level access through the patch-gap window. Four espionage clusters adopted the kit within days. The structural shift: browser-based AI agents inherit the same attack surface. Heath Callahan Trust, Identity & Security All stories by Heath…...