
October 9, 2026
PCI SSC calls for human approval of AI agent actions involving cardholder data
The PCI Security Standards Council has released AI security guidance for payment environments, recommending human approval for AI actions on cardholder data and

October 9, 2026
Anthropic Offers Free AI Security Scans to Open-Source Maintainers
Anthropic's OSS Scanner gives open-source maintainers free AI security scans, and early results show most high and critical findings are real.

October 9, 2026
Anthropic 2026 Usage Policy Update: What Changed and When It Applies
Anthropic's 2026 Usage Policy update takes effect November 12, consolidating deceptive campaign rules and clarifying elections, weapons, and surveillance

October 9, 2026
Chinese Open-Source AI Agent Artex Linked to Breach of 68,000 South Korean Bank Customers
Investigators say hackers used the open-source AI agent Artex to breach at least seven South Korean financial firms, exposing data on 68,000 customers.

October 8, 2026
Half of threat hunters say bad data is their biggest problem
Half of threat hunters name data quality or quantity as their biggest barrier, SANS found. What a small-business IT team should check and fix first.

October 8, 2026
RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail
RemoteThreat raised $7 million to help security teams simulate attacks after EDR has been bypassed and test whether internal controls work.

October 8, 2026
Federal OT Cybersecurity: Experts Urge Mandatory Baseline Rules for Federal Agencies
Experts want CISA to require a uniform OT security baseline, but a new critique says the proposal omits the field devices and equipment that operate critical

October 8, 2026
How AI Is Moving Cybersecurity Compliance From Dashboards to Continuous Execution
AI-native compliance platforms replace manual control tracking with continuous enforcement. Here's how the shift from dashboards to execution changes the cost

October 8, 2026
FBI Warns FortiBleed Campaign Still Active After 86,644 Fortinet Credentials Harvested
The FBI and USSS say the FortiBleed campaign targeting Fortinet FortiGate firewalls remains active, with 86,644 device credentials already harvested worldwide.
