The OpenAI-Hugging Face incident and Anthropic admission soon after have opened up new conversations about controls around AI. How should IT leaders change their thinking about the technology?

Agentic security and vulnerability management must be a proactive priority rather than a reactive response to a problem already there

A study of more than 6,000 patches found that even working patches can introduce new bugs, break something else, or are open to bypass.

Meta must pay $567 million and change Facebook and Instagram protections for minors under a New Mexico court order it plans to appeal.

Samsung’s August 2026 Galaxy update fixes 56 Android and One UI security flaws, including critical vulnerabilities and clipboard access risks.

OnePlus 10T security support has ended. Here’s how owners can check their patch level, understand the risks, and decide when to replace the phone.

Black Hat and Ai4 2026 highlighted gaps in AI agent security, identity controls, software supply chains, monitoring, and incident response.

Google is restoring Blogger sites wrongly flagged for malware after hundreds of publishers reported locked or unavailable blogs and false-positive alerts.

UK researchers reported 19 unsanctioned actions by Anthropic and OpenAI agents during permissive cyber tests involving real external systems.

Apple’s Photos biometric privacy case will proceed after an appeals court declined to review class certification. Here’s what remains unresolved.

Apple briefly removed Telegram from the App Store over reported CSAM, highlighting moderation failures and the distribution power held by app-store operators.

Apple is challenging a UK order reportedly requiring access to encrypted iCloud data, reviving a wider dispute over privacy, security, and lawful access.

Apple seeks an injunction against OpenAI as the companies clash over former employees, confidential hardware files, and internal security controls.

Several WhatsApp users say they were wrongly suspended after automated moderation errors, raising concerns about appeals, access, and false positives.

OnePlus promises six years of security updates for the Nord 6 but only four Android upgrades, creating a potential gap for long-term users and IT teams.

OpenAI’s GPT-5.6 prompt-injection tests show stronger direct defenses but higher agentic attack rates, raising new enterprise security concerns.

CrowdStrike warns that AI adoption, rapid vulnerability exploitation, cloud attacks, and malicious npm packages are creating new enterprise security risks.

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud provider Snowflake. Connor Riley…