IT Brief US - Technology news for CIOs & IT decision-makers
United States

Threat modelling Stories

American Stories

Threat modelling stories

Cobalt launches autonomous pentest for continuous testing
Application Security

Cobalt launches autonomous pentest for continuous testing

Security teams may get findings within 24 hours as Cobalt targets faster testing across sprawling software estates.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Global Stories

Threat modelling stories

FIRST launches VulnOptiCON 2026 in Luxembourg on AI
Data Science

FIRST launches VulnOptiCON 2026 in Luxembourg on AI

Rising disclosure volumes are forcing security teams to predict which flaws attackers will exploit as FIRST broadens its vulnerability conference in Luxembourg.

By Sofiah Nichole Salivio • 4 min read • 3 days ago
Google Cloud urges stronger cyber basics amid AI attacks
Malware

Google Cloud urges stronger cyber basics amid AI attacks

As attackers use AI to speed up phishing and malware, companies are being told that multi-factor authentication and patching matter more than ever.

By Mark Tarre • 4 min read • 3 days ago
Public exploit code targets Cudy router flaw chain
Network Security

Public exploit code targets Cudy router flaw chain

Patching is urgent for Cudy WR3000 rev 2.0 routers, as public code shows how two flaws can let attackers gain root command execution.

By Sean Mitchell • 5 min read • 3 days ago
Prem launches CyberScan for Bitcoin security audits
Data Protection

Prem launches CyberScan for Bitcoin security audits

The new tool aims to catch Bitcoin software flaws between formal audits after a regression led to more than USD $116 million stolen.

By Sofiah Nichole Salivio • 4 min read • Last week
Vercel launches public bounty to test sandbox escape
Virtualisation

Vercel launches public bounty to test sandbox escape

Researchers can claim up to USD $1 million for breaking Vercel Sandbox's isolation, as the cloud provider opens its boundary to public scrutiny.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Google Cloud unveils AI harness that finds flaws fast
Cloud Security

Google Cloud unveils AI harness that finds flaws fast

In two days, the system uncovered more than 100 critical bugs in stolen code repositories, outpacing manual review and aiding incident response.

By Mark Tarre • 5 min read • Last week
NASA lab console flaw allows unauthorised commands
Space

NASA lab console flaw allows unauthorised commands

Unauthorised access could let attackers send arbitrary commands to spacecraft and instruments via NASA's AIT-GUI console, now fixed in version 2.5.2.

By Sean Mitchell • 4 min read • Last week
ArmorCode gets verified Claude access for cyber defence
Cloud Security

ArmorCode gets verified Claude access for cyber defence

Verified access to Anthropic's Claude models should sharpen ArmorCode's exploitability scoring as security teams race to cut alert noise.

By Joseph Gabriel Lagonsin • 4 min read • This month
Anthropic says Claude models accessed real systems in tests
Network Security

Anthropic says Claude models accessed real systems in tests

Misconfigured test setups let three Claude models touch live systems, exposing production data and credentials during security exercises.

By Mark Tarre • 4 min read • This month
Island flags security concerns in nearly half of MCP servers
Cloud Security

Island flags security concerns in nearly half of MCP servers

Nearly half of scanned MCP server builds carried at least one security concern, underscoring fresh supply chain risks as AI agents rely on them.

By Sean Mitchell • 5 min read • This month
AI security experts call for stronger deployment controls
Cloud Security

AI security experts call for stronger deployment controls

The move could reshape enterprise AI security as vendors and regulators demand stronger controls around access, logging and containment.

By Mark Tarre • 3 min read • Last month
BreachLock report flags AI, cloud & web logic risks
Cloud Security

BreachLock report flags AI, cloud & web logic risks

Cloud audits produced the highest critical finding rate, while every AI system tested showed vulnerabilities and web logic flaws rose sharply.

By Joseph Gabriel Lagonsin • 3 min read • Last month
PRC model aims to reshape software security compliance
Application Security

PRC model aims to reshape software security compliance

New EU cyber rules are pushing software vendors to prove security is built into products, not bolted on after release.

By Sean Mitchell • 4 min read • Last month
OpenAI model breaches Hugging Face in unprecedented incident
Cloud Security

OpenAI model breaches Hugging Face in unprecedented incident

Security experts warn the breach shows autonomous AI can exploit old misconfigurations at machine speed, widening enterprise identity and containment risks.

By Sofiah Nichole Salivio • 4 min read • Last month

Stories from Other Regions

Threat modelling stories

UK AI tests find Claude & GPT-5.6-Sol rogue actions
Phishing

UK AI tests find Claude & GPT-5.6-Sol rogue actions

The findings heighten concern that frontier AI agents can breach boundaries, pressure real people and target software supply chains under loose controls.

By Joseph Gabriel Lagonsin • 5 min read • This month
The shadow identity crisis: Who let the agents in?
Digital Transformation

The shadow identity crisis: Who let the agents in?

Security chiefs face a widening breach risk as most firms plan to use AI agents, yet barely a third feel ready to secure them properly.

By Evgeny Zaretskov • 5 min read • Last month