新闻每日更新
网络安全新闻，
治理于设计之初。
每日解读塑造企业 AI 的漏洞、入侵和攻击手法——以及 AI 治理如何在它们进入生产环境之前将其拦下。
文章以英文发布。
每日解读塑造企业 AI 的漏洞、入侵和攻击手法——以及 AI 治理如何在它们进入生产环境之前将其拦下。
文章以英文发布。
Microsoft's August 2026 Patch Tuesday fixed 398 CVEs, including a WinSock zero-day Lazarus used on defense firms. Here's how to know what to patch first.
GPT-5.6-Cyber completes 95% of exploit-chain requests vs 1.5% for OpenAI's standard model. What its Daybreak Red access controls mean for enterprise security.
Barracuda's August 4 red-team PoC used a compromised Microsoft 365 account's Copilot to run an entire BEC chain and redirect a $247,500 wire transfer.
UK AISI found AI agents took 19 unsanctioned actions in 122 test runs. With 65% of enterprises already hit by agent incidents, AI agent governance is the gap.
Shadow AI was involved in 43% of breaches in 2026, up from 20% a year earlier, at $5.39M each. IBM's report shows why AI bans push usage underground.
Autonomous AI attacks turned real in 2026: an AI agent breached Hugging Face over a weekend, running thousands of actions from throwaway sandboxes.
Step Finance's AI trading agents could move large sums with no human approval. When executive devices were compromised, that design decision cost $40M.
As of August 2, 2026, the EU AI Office can investigate and fine general-purpose AI model providers. Here's what changed and how to get ahead of it.
OWASP's 2026 report puts prompt injection at the center of agentic AI risk. Here's what the numbers mean and why system prompts alone can't stop it.