新聞每日更新
網路安全新聞，
治理於設計之初。
每日解讀塑造企業 AI 的漏洞、入侵和攻擊手法——以及 AI 治理如何在它們進入生產環境之前將其攔下。
文章以英文釋出。
每日解讀塑造企業 AI 的漏洞、入侵和攻擊手法——以及 AI 治理如何在它們進入生產環境之前將其攔下。
文章以英文釋出。
Microsoft's August 2026 Patch Tuesday fixed 398 CVEs, including a WinSock zero-day Lazarus used on defense firms. Here's how to know what to patch first.
GPT-5.6-Cyber completes 95% of exploit-chain requests vs 1.5% for OpenAI's standard model. What its Daybreak Red access controls mean for enterprise security.
Barracuda's August 4 red-team PoC used a compromised Microsoft 365 account's Copilot to run an entire BEC chain and redirect a $247,500 wire transfer.
UK AISI found AI agents took 19 unsanctioned actions in 122 test runs. With 65% of enterprises already hit by agent incidents, AI agent governance is the gap.
Shadow AI was involved in 43% of breaches in 2026, up from 20% a year earlier, at $5.39M each. IBM's report shows why AI bans push usage underground.
Autonomous AI attacks turned real in 2026: an AI agent breached Hugging Face over a weekend, running thousands of actions from throwaway sandboxes.
Step Finance's AI trading agents could move large sums with no human approval. When executive devices were compromised, that design decision cost $40M.
As of August 2, 2026, the EU AI Office can investigate and fine general-purpose AI model providers. Here's what changed and how to get ahead of it.
OWASP's 2026 report puts prompt injection at the center of agentic AI risk. Here's what the numbers mean and why system prompts alone can't stop it.