Threat modelling Stories

Global Stories

Threat modelling stories

CREST launches AI testing standard for cyber firms

Buyers of AI tools now have a benchmark to judge testing providers, as CREST's new standard targets gaps in assurance and due diligence.

By Mark Tarre • 4 min read • 2 days ago

Data Science

FIRST launches VulnOptiCON 2026 in Luxembourg on AI

Rising disclosure volumes are forcing security teams to predict which flaws attackers will exploit as FIRST broadens its vulnerability conference in Luxembourg.

By Sofiah Nichole Salivio • 4 min read • 3 days ago

Malware

Google Cloud urges stronger cyber basics amid AI attacks

As attackers use AI to speed up phishing and malware, companies are being told that multi-factor authentication and patching matter more than ever.

By Mark Tarre • 4 min read • 3 days ago

Network Security

Public exploit code targets Cudy router flaw chain

Patching is urgent for Cudy WR3000 rev 2.0 routers, as public code shows how two flaws can let attackers gain root command execution.

By Sean Mitchell • 5 min read • 3 days ago

Data Protection

Prem launches CyberScan for Bitcoin security audits

The new tool aims to catch Bitcoin software flaws between formal audits after a regression led to more than USD $116 million stolen.

By Sofiah Nichole Salivio • 4 min read • Last week

Virtualisation

Vercel launches public bounty to test sandbox escape

Researchers can claim up to USD $1 million for breaking Vercel Sandbox's isolation, as the cloud provider opens its boundary to public scrutiny.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Cloud Security

Google Cloud unveils AI harness that finds flaws fast

In two days, the system uncovered more than 100 critical bugs in stolen code repositories, outpacing manual review and aiding incident response.

By Mark Tarre • 5 min read • Last week

Space

NASA lab console flaw allows unauthorised commands

Unauthorised access could let attackers send arbitrary commands to spacecraft and instruments via NASA's AIT-GUI console, now fixed in version 2.5.2.

By Sean Mitchell • 4 min read • Last week

Cloud Security

ArmorCode gets verified Claude access for cyber defence

Verified access to Anthropic's Claude models should sharpen ArmorCode's exploitability scoring as security teams race to cut alert noise.

By Joseph Gabriel Lagonsin • 4 min read • This month

Network Security

Anthropic says Claude models accessed real systems in tests

Misconfigured test setups let three Claude models touch live systems, exposing production data and credentials during security exercises.

By Mark Tarre • 4 min read • This month

Cloud Security

Island flags security concerns in nearly half of MCP servers

Nearly half of scanned MCP server builds carried at least one security concern, underscoring fresh supply chain risks as AI agents rely on them.

By Sean Mitchell • 5 min read • This month

Cloud Security

AI security experts call for stronger deployment controls

The move could reshape enterprise AI security as vendors and regulators demand stronger controls around access, logging and containment.

By Mark Tarre • 3 min read • Last month

Cloud Security

BreachLock report flags AI, cloud & web logic risks

Cloud audits produced the highest critical finding rate, while every AI system tested showed vulnerabilities and web logic flaws rose sharply.

By Joseph Gabriel Lagonsin • 3 min read • Last month

Application Security

PRC model aims to reshape software security compliance

New EU cyber rules are pushing software vendors to prove security is built into products, not bolted on after release.

By Sean Mitchell • 4 min read • Last month

Cloud Security

OpenAI model breaches Hugging Face in unprecedented incident

Security experts warn the breach shows autonomous AI can exploit old misconfigurations at machine speed, widening enterprise identity and containment risks.

By Sofiah Nichole Salivio • 4 min read • Last month

Stories from Other Regions

Threat modelling stories

Privileged Access Management

AI agent used fake identities to push malicious code

Cybersecurity experts warn single-person approvals are now vulnerable after an AI agent used fabricated identities to slip malicious code past checks.

By Sean Mitchell • 6 min read • This month

Phishing

UK AI tests find Claude & GPT-5.6-Sol rogue actions

The findings heighten concern that frontier AI agents can breach boundaries, pressure real people and target software supply chains under loose controls.

By Joseph Gabriel Lagonsin • 5 min read • This month