Govern360 AI Exposure Brief

Agentic AI Risks, CVE Program Concerns Permeate Black Hat USA 2026

Thu, 27 Aug 2026 17:25:09 GMT

This installment of the Reporters' Notebook video series discusses the topics that dominated the cybersecurity conference, such as AI's effects on vulnerability reporting and security research.

FURUNO FA-50 Class B AIS Transponder

Tue, 25 Aug 2026 12:00:00 GMT

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to alter device settings.

The following versions of FURUNO FA-50 Class B AIS Transponder are affected:

FURUNO FA-50 Class B AIS Tran

Enterprise AI's real risk isn't autonomous agents. It's the complexity between them.

Thu, 27 Aug 2026 14:01:00 GMT

Presented by Gravitee Agent complexity is the insidious shadow lurking inside enterprises right now that needs a light shone on it. That’s because enterprises don't deploy a single agent and watch it run, they deploy fleets, each one calling APIs, calling other agents, reaching into applications that were never built with a machine decision-maker in mind. That's the failure mode that should keep y

When agents act on their own, governance has to live in the data layer

Thu, 27 Aug 2026 12:01:00 GMT

Presented by EDB As enterprises give AI agents more autonomy — the ability to plan, decide, and act across systems without a human approving each step — a hard question moves to the center of every architecture review: When an agent tries to complete an action that it was never authorized to do, what actually stops it? These are your agents, running on your models, touching your data in your infra

Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw

Tue, 25 Aug 2026 19:50:16 GMT

Attackers can exploit a security bug in Nvidia's tool to gain unauthenticated access to the local model server through the Ollama API, paving the way for persistent AI agent corruption.

OpenAI: Agent behavior that led to Hugging Face intrusion formed in May

Wed, 26 Aug 2026 19:00:00 GMT

The company says the breach stemmed from a systemic failure of alignment and security, and has taken measures to prevent agents from independently orchestrating complex cyberattacks. The post OpenAI: Agent behavior that led to Hugging Face intrusion formed in May appeared first on CyberScoop .

100-plus companies call for ‘global surge’ in AI-powered cyber defense

Thu, 27 Aug 2026 18:29:55 GMT

OpenAI, Anthropic, Google, Microsoft, and others say there’s a narrow “defenders’ window” to strengthen security before AI-powered attacks become more sophisticated. The post 100-plus companies call for ‘global surge’ in AI-powered cyber defense appeared first on CyberScoop .

Extend Amazon Bedrock Guardrails to Tool Interactions Using the Strands Agents SDK

Thu, 27 Aug 2026 16:20:05 GMT

If you’re running AI agents in production, Amazon Bedrock Guardrails protects the model boundary. But your agents also invoke tools, fetch external data, and communicate with other systems. That data flows outside the model boundary, where model-level guardrails can’t reach. You can extend guardrail coverage to those interactions using three validation checkpoints built with the […]

Nearly 700 rogue AI agents coordinated in the Hugging Face attack

Thu, 27 Aug 2026 21:38:53 GMT

New details about the July attack on Hugging Face reveal that hundreds of AI agents driven by OpenAI's internal IM1 model coordinated the compromise through an unauthorized message board. [...]

Unit 42 warns AI has shifted balance of power from defenders to attackers

Thu, 27 Aug 2026 18:31:23 GMT

Palo Alto Networks’ threat intelligence team said the early waves of threats riding on agentic AI models have broken in the wild, and organizations are unprepared for what’s coming next. The post Unit 42 warns AI has shifted balance of power from defenders to attackers appeared first on CyberScoop .

OpenAI Agents Coordinated via Makeshift Message Board Ahead of Hugging Face Hack

Thu, 27 Aug 2026 11:58:01 GMT

New training environments will teach AI models to distrust instructions arriving from other agents outside sanctioned channels. The post OpenAI Agents Coordinated via Makeshift Message Board Ahead of Hugging Face Hack appeared first on SecurityWeek .

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

Thu, 27 Aug 2026 11:04:15 GMT

Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police (AFP) said two unnamed suspects from Western Australia, aged 21 and 23, were arrested in connection with a "sophisticated

The inside story on why OpenAI agents hacked Hugging Face

Wed, 26 Aug 2026 19:00:00 GMT

The models responsible for last month’s agent hack of Hugging Face had been inadvertently trained to cheat and to communicate with each other, according to an OpenAI technical report released today. The hack, which a group of agents undertook to find solutions for a cybersecurity test that they were stuck on, has confirmed some experts’…

Okta Shares Surge on Strong Earnings, Growing Demand for AI Identity Security

Thu, 27 Aug 2026 11:53:10 GMT

The identity security company beat quarterly expectations and raised its outlook as enterprises face growing pressure to secure AI agents and other non-human identities. The post Okta Shares Surge on Strong Earnings, Growing Demand for AI Identity Security appeared first on SecurityWeek .

Black Hat State of Security Vendors

Tue, 25 Aug 2026 10:54:50 GMT

Andy Ellis has a roundup of the security vendors at Black Hat this year. Key Takeaways: We have entered into an AI world. While nearly half of booths didn’t directly mention AI or agents in their taglines, the effects of AI are everywhere. Multiple spaces (Identity, SaaS, AppSec, Data) have almost every vendor leading with AI; existing unsolved problem areas just got worse. At the same time, there

Here’s all the times AI has gone rogue and hacked other companies

Thu, 27 Aug 2026 14:01:42 GMT

A recap of all the incidents involving LLMs made by Anthropic, Meta, and OpenAI, which went rogue and attacked real companies and individuals on the internet.

How OpenAI let a mob of LLM agents game a test and ransack Hugging Face

Thu, 27 Aug 2026 12:58:59 GMT

Without authorization, 1,200 OpenAI agents conspired among themselves to game a test.

CISA orders feds to patch Citrix NetScaler RCE flaw by Saturday

Thu, 27 Aug 2026 09:16:50 GMT

CISA has ordered U.S. government agencies to patch their Citrix NetScaler appliances against an actively exploited remote code execution vulnerability by Saturday. [...]

OpenAI: Hugging Face Incident a “Warning Shot” to the World

Thu, 27 Aug 2026 09:15:00 GMT

OpenAI reveals that unauthorized message boards were at the heart of the recent Hugging Face breach

Critical Avada WordPress theme flaw enables zero-click RCE

Wed, 26 Aug 2026 21:33:20 GMT

A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the server. [...]

ICYMI: July 2026 @AWS Security

Wed, 26 Aug 2026 19:32:55 GMT

If you found time for a bit of vacation this summer, you might be in catch-up mode. Here’s a list to help: all the expert blog posts, new service capabilities, code samples, and workshops, in case you missed it, from July 2026. AWS Security Blog post This month’s AWS Security Blog posts covered AI agent […]

Linux Foundation Introduces TRACE Standard for AI Runtime Evidence

Wed, 26 Aug 2026 09:10:00 GMT

This new open standard offers hardware-attested runtime and compliance evidence for AI agents

Fast Track ISM-ready cloud environments and IRAP Assessments with Landing Zone Accelerator on AWS

Tue, 25 Aug 2026 21:53:49 GMT

This post announces the availability of a new independent assessment report available on AWS Artifact analyzing how Landing Zone Accelerator on AWS (LZA) can automatically deploy multi-account environments in Amazon Web Services (AWS) with Australian Government Information Security Manual (ISM) security controls coverage at scale. The report includes findings from an independent third-party analys

Is Cyber Facing an Affordability Crisis?

Tue, 25 Aug 2026 14:53:13 GMT

As breach costs reach record highs and defense spending nears $240 billion, small businesses are dangerously exposed, threatening supply chain security.

How Threat Research and MDR Help SMBs Build a Defensive Edge

Thu, 27 Aug 2026 14:00:10 GMT

Threat research gives security teams insight into how attackers operate, while MDR turns that intelligence into faster detection and response. ESET explains how combining threat intelligence, continuous monitoring, and human expertise can help SMBs strengthen their defenses. [...]

Australia arrests alleged TeamPCP hackers behind supply-chain attacks

Thu, 27 Aug 2026 13:31:13 GMT

Australian authorities have arrested and charged two young men accused of being part of the TeamPCP hacking group linked to a string of far-reaching developer supply chain attacks. [...]

Pro-Russian Hackers Claim Responsibility for Major Cyberattack on Norway’s Public Digital Services

Thu, 27 Aug 2026 08:00:00 GMT

The pro-Russian hacker group Server Killers claimed responsibility for the attack. The post Pro-Russian Hackers Claim Responsibility for Major Cyberattack on Norway’s Public Digital Services appeared first on SecurityWeek .

Four in Five AI Tools Run with No IT Oversight, New Research Finds

Wed, 26 Aug 2026 13:00:00 GMT

Reco report reveals growing shadow AI problem and surge in vulnerability disclosures

'NovaCookies' Kit Steals Microsoft 365 Sessions for $320 a Month

Wed, 26 Aug 2026 11:33:40 GMT

The adversary-in-the-middle (AitM) phishing service lowers the barrier to entry for actors to create attacks and steal more than just user credentials.

Hidden Prompts Trick AI Into False Email Summaries

Tue, 25 Aug 2026 21:08:55 GMT

With some simple HTML that's invisible to users, attackers can manipulate AI-powered email summarizers into producing malicious information.

The GTA VI leaks are breaking the internet. Security researchers have seen this before.

Tue, 25 Aug 2026 20:51:39 GMT

A memecoin, a manifesto, and a week of daily leaks — but to researchers, it's a familiar extortion playbook with an unusually large audience. The post The GTA VI leaks are breaking the internet. Security researchers have seen this before. appeared first on CyberScoop .

White House bans foreign-made equipment for power generation over cyber backdoor concerns

Thu, 27 Aug 2026 19:45:00 GMT

The Trump administration is banning the acquisition of foreign-made components used to manage electricity and power, alleging that “certain foreign actors are increasingly creating and exploiting vulnerabilities” in the technology.

OpenAI, Anthropic, Google, and 100 other companies call for action to defend against rogue AI

Thu, 27 Aug 2026 17:43:24 GMT

Some of the world's largest tech companies and AI startups have come together to decry the current state of cybersecurity and to advertise a new solution that they say can ward off a new generation of cyber threats.

Manchester Airports Group says hackers stole travelers' data

Thu, 27 Aug 2026 16:12:26 GMT

The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi sign-ups from Manchester, Stansted, and East Midlands airports. [...]

Two alleged TeamPCP members arrested and charged after months of software supply-chain chaos

Thu, 27 Aug 2026 14:31:59 GMT

The two men face 14 charges combined. Private researchers traced one suspect through leaked passwords and a decade-old gaming profile. The post Two alleged TeamPCP members arrested and charged after months of software supply-chain chaos appeared first on CyberScoop .

Trump Order Aims to Block Foreign Backdoors in US Power Grid Gear

Thu, 27 Aug 2026 14:17:26 GMT

The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns. The post Trump Order Aims to Block Foreign Backdoors in US Power Grid Gear appeared first on SecurityWeek .

Cyberattack on Manchester Airports Group exposes data of 8.7 million customers

Thu, 27 Aug 2026 13:15:00 GMT

A spokesperson told The Yorkshire Post that roughly 8.7 million people were impacted, although they did not provide a date range. They added that in the “vast majority” of cases, the only information accessed was an email address.

Carhartt data breach exposes information of 12.9 million accounts

Thu, 27 Aug 2026 11:10:04 GMT

The ShinyHunters extortion group has published sensitive data from nearly 13 million accounts stolen from clothing retailer giant Carhartt earlier this month, according to data breach notification service Have I Been Pwned. [...]

The Future of AI-Driven Security Depends on Complete Data

Thu, 27 Aug 2026 10:00:00 GMT

For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality. The post The Future of AI-Driven Security Depends on Complete Data appeared first on SecurityWeek .

ATF confirms “major incident” after recent Qilin breach claims

Thu, 27 Aug 2026 08:13:50 GMT

ATF, the regulatory agency that enforces federal laws governing firearms and explosives in the United States, has confirmed that one of its systems was compromised after breach claims made by the Qilin ransomware gang. [...]

'HTTP Terminator' Hunts for Novel Desync Attacks

Wed, 26 Aug 2026 19:54:34 GMT

James Kettle of PortSwigger talks with the Dark Reading News Desk about his AI-powered open source tool, which found new HTTP request-smuggling techniques.

Orchestration is the new challenge for CX in the age of AI agents

Wed, 26 Aug 2026 14:30:00 GMT

Presented by Tata Communications Enterprises are deploying AI agents, voice AI, and automation across messaging, voice, and digital channels faster than the architecture meant to support it. Most of that deployment has involved attaching conversational AI to legacy systems never built for it, says Gaurav Anand, global head of the Customer Interaction Suite at Tata Communications. "In the rush to d

DDoS Attack Hits Norwegian Government Services

Wed, 26 Aug 2026 09:00:00 GMT

A coordinated DDoS campaign has caused disruption among Norwegian government services

Fake Recruiter Scams Target Corporate Credentials on Mobile

Tue, 25 Aug 2026 13:00:00 GMT

RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials

The County Prosecutors Who Became ICE Informants

Tue, 25 Aug 2026 11:00:00 GMT

Illinois prosecutors shared defendants’ personal data with federal immigration agents without criminal warrants, public disclosure, or legislative oversight.

ReliaQuest Rejects Compromise Claims After ShinyHunters Incident

Tue, 25 Aug 2026 09:30:00 GMT

ReliaQuest has detailed a social engineering attack linked to ShinyHunters, denying reports that the threat actor successfully compromised its systems

Anthropic and OpenAI are joining the AI stage at TechCrunch Disrupt 2026

Thu, 27 Aug 2026 23:16:45 GMT

At TechCrunch Disrupt 2026, the AI Stage is back to dig into the single hottest topic in the community for the past few years, presented by Google for Startups.

OpenAI to start showing ads on ChatGPT’s free and Go tiers in India

Thu, 27 Aug 2026 11:35:59 GMT

OpenAI has more than 100 million weekly active ChatGPT users in India, a huge chunk of whom are on the free or the lower-priced Go tiers.

OpenAI’s rogue AI model incident was worse than we thought

Wed, 26 Aug 2026 21:36:06 GMT

In July, an unreleased OpenAI model broke out of a restricted environment, figured out how to get access to the internet, allowed AI agents to talk to each other using a secret "message board," and hacked into the internal systems of a different AI lab, Hugging Face. It took nearly two weeks for OpenAI to […]

OpenAI releases its official report on the Hugging Face breach

Wed, 26 Aug 2026 19:05:22 GMT

The report, which spans several discrete cybersecurity compromises, is the most complete accounting of the incident to date.