Wiz’s AI bug-hunter helped find a master key to every database in Azure Cosmos DB
Wiz’s AI bug-hunter helped find a master key to every database in Azure Cosmos DB

Wiz researchers found a single credential that could unlock every database running on Microsoft’s Azure Cosmos DB. They named it the Cosmos Master Key. And the vulnerability hunter that helped find it was not entirely human. Microsoft has patched the f…

The AI that hacked Hugging Face keeps looking less like a mastermind and more like a bear
The AI that hacked Hugging Face keeps looking less like a mastermind and more like a bear

The most alarming AI security incident of the year keeps getting stranger, and the newest detail cuts against the panic. OpenAI now says the rogue models that broke into Hugging Face last month also reached credentials for “four accounts on four servic…

A hidden line in a Word doc can rewrite your numbers, and infect the next file too
A hidden line in a Word doc can rewrite your numbers, and infect the next file too

A hidden line of text in a Word document can quietly halve the numbers in your financial report. Then it can smuggle a copy of itself into the clean file you send on. And 144 days after a researcher warned Microsoft, it still works. Håkon Måløy, a Norw…

The AI cloud is heading into the vault. CoreWeave is taking it to the spies.
The AI cloud is heading into the vault. CoreWeave is taking it to the spies.

The AI cloud is heading into the vault. CoreWeave rents high-end GPUs to the biggest AI labs. Now it wants to run that same cloud inside the sealed facilities where America keeps its secrets, with the contractor Leidos as its guide. The two companies a…

Bloom Security lands $20 million seed as AI rewrites what runs on the enterprise endpoint
Bloom Security lands $20 million seed as AI rewrites what runs on the enterprise endpoint

Work does not look like it did three years ago. Employees now assemble their own toolkits daily: AI agents that act on their behalf, browser extensions that reshape how they read and write, code packages pulled from public registries, MCP servers conne…

Your next privacy breach might not leak any data at all
Your next privacy breach might not leak any data at all

For decades, protecting privacy has meant one thing: stop personal data from leaking out. Gartner thinks that idea is about to break. By 2029, most privacy incidents will come not from leaked personal data but from what AI infers about people, the rese…

AI agents are about to run the enterprise. Onyx raised $113M to keep a human in the loop.
AI agents are about to run the enterprise. Onyx raised $113M to keep a human in the loop.

Enterprises are handing more of their work to AI agents. Onyx Security just raised $113m to make sure a human can still say no. The Israeli startup’s Series B, led by Bessemer Venture Partners, values it at about $640m, Calcalist reported. That is a se…

The FTC is suing Hims & Hers for sharing patients’ health data with Meta and Snap
The FTC is suing Hims & Hers for sharing patients’ health data with Meta and Snap

The Federal Trade Commission is suing Hims & Hers, accusing the telehealth company of sharing customers’ sensitive health information with advertising platforms including Meta and Snap. The complaint, filed on 29 July and joined by Utah and Califor…

The Growing Challenge of Digital Identity Is Shaping IntegraTRACE’s Vision for Enterprise Visibility
The Growing Challenge of Digital Identity Is Shaping IntegraTRACE’s Vision for Enterprise Visibility

Enterprise technology has become significantly more interconnected over the past decade. Cloud platforms, automation, artificial intelligence, and software integrations have allowed organizations to operate with greater speed and flexibility, but they …

OpenAI ‘open-sourced’ its AI security scanner. The scanner is still locked up.
OpenAI ‘open-sourced’ its AI security scanner. The scanner is still locked up.

OpenAI has open-sourced an AI tool that hunts for security holes in your code. There is a catch: the part that does the hunting is still locked behind its approval. The company quietly released the Codex Security CLI this week, before it had even annou…