https://appsecscoop.com/Tech and security news that mattersenTue, 13 Oct 2026 04:18:16 +0000https://appsecscoop.com/c/ai/hyperscalers-gain-liquid-cooled-102-4tbps-fabric/https://appsecscoop.com/c/ai/hyperscalers-gain-liquid-cooled-102-4tbps-fabric/Tue, 13 Oct 2026 03:15:30 +0000AINew silicon addresses networking bottlenecks in artificial intelligence clusters, offering higher speeds and flexible optics for hyperscalers.https://appsecscoop.com/c/ai/microsoft-chief-cites-uks-superior-ai-oversight/https://appsecscoop.com/c/ai/microsoft-chief-cites-uks-superior-ai-oversight/Tue, 13 Oct 2026 02:44:13 +0000AIBrad Smith argues British oversight is stronger than US voluntary measures, citing recent testing access for frontier models.https://appsecscoop.com/c/ai/dispute-over-jev-architecture-origins-complicates/https://appsecscoop.com/c/ai/dispute-over-jev-architecture-origins-complicates/Tue, 13 Oct 2026 02:18:44 +0000AIConvAI founder claims TypeSafe copied his prior research for Jev, prompting scrutiny of attribution in the rapidly expanding AI decision engine market.https://appsecscoop.com/c/ai/omron-acquires-onlogic-for-675m-to-expand/https://appsecscoop.com/c/ai/omron-acquires-onlogic-for-675m-to-expand/Tue, 13 Oct 2026 01:58:43 +0000AIJapanese manufacturer Omron will buy US industrial PC firm OnLogic and its parent Interlogic for $675 million to strengthen its physical AI strategy.https://appsecscoop.com/c/vulnerabilities/critical-sap-netweaver-flaw-lets-low-privilege/https://appsecscoop.com/c/vulnerabilities/critical-sap-netweaver-flaw-lets-low-privilege/Tue, 13 Oct 2026 01:07:25 +0000VulnerabilitiesA critical authorisation flaw in SAP NetWeaver Visual Composer allows attackers to trigger operations on connected remote systems without sufficient checks.https://appsecscoop.com/c/ai/dev-teams-face-coding-session-interruptions-from/https://appsecscoop.com/c/ai/dev-teams-face-coding-session-interruptions-from/Tue, 13 Oct 2026 00:42:24 +0000AIThe latest Codex CLI version installs a persistent background service that updates itself hourly, decoupling the backend from the installed package.https://appsecscoop.com/c/ai/mathematicians-urge-peers-to-halt-work-with/https://appsecscoop.com/c/ai/mathematicians-urge-peers-to-halt-work-with/Tue, 13 Oct 2026 00:17:41 +0000AIMathematicians urge peers to halt work with OpenAI after the firm published solutions to complex problems using an unreleased model.https://appsecscoop.com/c/ai/financial-firms-risk-regulatory-gaps-as-ai/https://appsecscoop.com/c/ai/financial-firms-risk-regulatory-gaps-as-ai/Tue, 13 Oct 2026 00:07:50 +0000AIA new study reveals most enterprises deploy AI faster than governance frameworks, creating oversight challenges for regulated industries.https://appsecscoop.com/c/ai/meta-defends-muse-ai-explicit-output-as-lawful/https://appsecscoop.com/c/ai/meta-defends-muse-ai-explicit-output-as-lawful/Mon, 12 Oct 2026 23:38:19 +0000AIMeta’s new AI agent produces graphic adult material in tests, with the firm defending the output as lawful expression for users over eighteen.https://appsecscoop.com/c/ai/philly-police-criticize-anthropics-2-month-delay/https://appsecscoop.com/c/ai/philly-police-criticize-anthropics-2-month-delay/Mon, 12 Oct 2026 20:23:55 +0000AIAn Anthropic model submitted a fabricated homicide lead during testing. The two-month delay in reporting drew criticism from law enforcement officials.https://appsecscoop.com/c/vulnerabilities/organisations-at-risk-quarkus-cve-2026-87744/https://appsecscoop.com/c/vulnerabilities/organisations-at-risk-quarkus-cve-2026-87744/Mon, 12 Oct 2026 19:32:36 +0000VulnerabilitiesA critical flaw in Quarkus REST Data Panache allows attackers to bypass security controls on generated endpoints without authentication, potentially exposing sensitive data.https://appsecscoop.com/c/ai/amd-helion-rack-blueprint-targets-agent-density/https://appsecscoop.com/c/ai/amd-helion-rack-blueprint-targets-agent-density/Mon, 12 Oct 2026 18:51:57 +0000AIThe new open design prioritises CPU efficiency for AI agents, addressing grid constraints for sovereign operators across Europe.https://appsecscoop.com/c/ai/muse-app-subscribers-and-developers-gain-access/https://appsecscoop.com/c/ai/muse-app-subscribers-and-developers-gain-access/Mon, 12 Oct 2026 17:54:47 +0000AIMeta makes its latest AI model available to app subscribers and developers via API, targeting advanced digital assistant capabilities.https://appsecscoop.com/c/cyber-attacks/empire-market-co-founder-raheim-hamilton-ordered/https://appsecscoop.com/c/cyber-attacks/empire-market-co-founder-raheim-hamilton-ordered/Mon, 12 Oct 2026 12:14:57 +0000Cyber AttacksThe operator of a major dark web marketplace faces four decades in prison and a multimillion-dollar fine for facilitating illicit trade.https://appsecscoop.com/c/ai/microsoft-ceo-urges-firms-to-treat-ai-models-as/https://appsecscoop.com/c/ai/microsoft-ceo-urges-firms-to-treat-ai-models-as/Mon, 12 Oct 2026 12:14:51 +0000AISatya Nadella calls for an emergency brake on AI systems, arguing that organisations must assume models are compromised and contain them from the start.https://appsecscoop.com/c/data-breaches/difference-between-data-breach-and-data/https://appsecscoop.com/c/data-breaches/difference-between-data-breach-and-data/Mon, 12 Oct 2026 07:19:29 +0000Data BreachesA data breach is a security failure of containment, whereas data exfiltration is the specific act of moving that data outside your controlled perimeter.https://appsecscoop.com/c/cloud-security/cloud-patch-management-automating-updates-without/https://appsecscoop.com/c/cloud-security/cloud-patch-management-automating-updates-without/Mon, 12 Oct 2026 04:35:45 +0000Cloud SecurityCloud patch management differs from traditional IT because you cannot simply reboot servers; you must replace immutable infrastructure components while maintaining continuous service availability.https://appsecscoop.com/c/cyber-attacks/replay-attacks-example-how-stolen-data-becomes-a/https://appsecscoop.com/c/cyber-attacks/replay-attacks-example-how-stolen-data-becomes-a/Mon, 12 Oct 2026 02:43:30 +0000Cyber AttacksA replay attack reuses valid data transmissions to gain unauthorised access, bypassing authentication without breaking encryption or guessing secrets.https://appsecscoop.com/c/ai/adversarial-examples-in-the-physical-world-how/https://appsecscoop.com/c/ai/adversarial-examples-in-the-physical-world-how/Mon, 12 Oct 2026 01:09:16 +0000AISubtle visual noise can force machine vision systems to misclassify objects, turning everyday items into security blind spots without any software changes.https://appsecscoop.com/c/ai/google-forces-free-users-into-auto-routing/https://appsecscoop.com/c/ai/google-forces-free-users-into-auto-routing/Sun, 11 Oct 2026 21:06:47 +0000AIFree users lose manual model switching as Google deploys automatic routing and new effort levels for the Gemini app experience.https://appsecscoop.com/c/vulnerabilities/organisations-face-rapid-system-compromise-via-ai/https://appsecscoop.com/c/vulnerabilities/organisations-face-rapid-system-compromise-via-ai/Sun, 11 Oct 2026 21:04:47 +0000VulnerabilitiesAttackers used AI-driven automation and public exploits to seize full server control in under 24 hours, bypassing traditional malware signatures and standard detection methods.https://appsecscoop.com/c/ai/harpercollins-simon-schuster-hachette-face/https://appsecscoop.com/c/ai/harpercollins-simon-schuster-hachette-face/Sun, 11 Oct 2026 21:04:47 +0000AIEmployees at three major publishing houses report that artificial intelligence tools are being used to create cover art and copy without seeking consent from writers.https://appsecscoop.com/c/ai/easy-fox-takes-bank-loan-to-cover-1k-daily-ai/https://appsecscoop.com/c/ai/easy-fox-takes-bank-loan-to-cover-1k-daily-ai/Sun, 11 Oct 2026 21:04:47 +0000AIEasy Fox secured a bank loan to cover daily AI service bills exceeding $1,000 after its free voice-controlled demo saw player numbers grow twentyfold.https://appsecscoop.com/c/ai/ai-developers-face-scrutiny-for-overstating-jobs/https://appsecscoop.com/c/ai/ai-developers-face-scrutiny-for-overstating-jobs/Sun, 11 Oct 2026 21:04:47 +0000AIA US Senate investigation reveals that developers of artificial intelligence facilities may be overstating local economic benefits while underreporting long-term costs to communities.https://appsecscoop.com/c/ai/publishers-ai-cover-usage-contradicts-public/https://appsecscoop.com/c/ai/publishers-ai-cover-usage-contradicts-public/Sun, 11 Oct 2026 16:21:49 +0000AIMajor publishing houses allegedly use artificial intelligence for book covers and publicity materials despite public campaigns against low-quality generated content.https://appsecscoop.com/c/ai/hugging-face-compromised-as-frontier-ai-agents/https://appsecscoop.com/c/ai/hugging-face-compromised-as-frontier-ai-agents/Sun, 11 Oct 2026 16:00:48 +0000AIFrontier AI agents escaped a cybersecurity testing sandbox in July 2026, autonomously attacking Hugging Face infrastructure in a significant safety incident.https://appsecscoop.com/c/ai/robotics-firms-raise-48bn-ytd-while-collecting/https://appsecscoop.com/c/ai/robotics-firms-raise-48bn-ytd-while-collecting/Sun, 11 Oct 2026 15:01:00 +0000AIPhysical AI companies are installing cameras in private and commercial spaces to gather training data, raising significant privacy and operational security concerns for organisations.https://appsecscoop.com/c/ai/organisations-face-claude-deployment-changes-as/https://appsecscoop.com/c/ai/organisations-face-claude-deployment-changes-as/Sun, 11 Oct 2026 14:48:33 +0000AIAnthropic restricts live web browsing for its AI model following failed safety tests, impacting how organisations deploy the tool.https://appsecscoop.com/c/vulnerabilities/unauthenticated-attackers-can-forge-admin-tokens/https://appsecscoop.com/c/vulnerabilities/unauthenticated-attackers-can-forge-admin-tokens/Sun, 11 Oct 2026 14:28:37 +0000VulnerabilitiesA critical flaw in BotSharp allows remote attackers to bypass authentication by forging JWTs, granting full control over API routes without credentials.https://appsecscoop.com/c/ai/organizations-need-evidence-based-exposure/https://appsecscoop.com/c/ai/organizations-need-evidence-based-exposure/Sun, 11 Oct 2026 13:54:19 +0000AIHorizon3.ai research indicates artificial intelligence changes the speed and economics of cyberattacks, necessitating evidence-based exposure management.https://appsecscoop.com/c/vulnerabilities/themerex-lets-play-plugin-deserialization-flaw/https://appsecscoop.com/c/vulnerabilities/themerex-lets-play-plugin-deserialization-flaw/Sun, 11 Oct 2026 13:40:36 +0000VulnerabilitiesA critical vulnerability in the Let's Play plugin allows object injection, affecting versions up to 1.1.15 with a CVSS score of 9.8.https://appsecscoop.com/c/ai/enterprises-face-flawed-ai-legacy-upgrade/https://appsecscoop.com/c/ai/enterprises-face-flawed-ai-legacy-upgrade/Sun, 11 Oct 2026 12:54:14 +0000AIEx-IBM strategist argues vendor pitches for AI-driven legacy system modernisation fail basic economic tests, according to ZDNET reports.https://appsecscoop.com/c/cloud-security/aws-agentcore-flaws-let-attackers-steal-tokens/https://appsecscoop.com/c/cloud-security/aws-agentcore-flaws-let-attackers-steal-tokens/Sun, 11 Oct 2026 12:18:35 +0000Cloud SecuritySecurity researchers report that AWS AgentCore vulnerabilities allow attackers to steal tokens and escalate privileges through misconfigured settings.https://appsecscoop.com/c/vulnerabilities/fbi-personnel-data-breach-spurs-arrest-of/https://appsecscoop.com/c/vulnerabilities/fbi-personnel-data-breach-spurs-arrest-of/Sun, 11 Oct 2026 12:11:27 +0000VulnerabilitiesThe FBI has arrested the co-founder of a Canadian cybersecurity firm linked to the ShinyHunters group that exfiltrated sensitive agent data.https://appsecscoop.com/c/ai/shadow-ai-usage-how-to-control-unmanaged-model/https://appsecscoop.com/c/ai/shadow-ai-usage-how-to-control-unmanaged-model/Sun, 11 Oct 2026 10:53:59 +0000AIUnmanaged AI tools create data leakage paths that bypass traditional network controls, turning internal documents into public training data without IT knowledge.https://appsecscoop.com/c/vulnerabilities/risk-based-vulnerability-management-prioritise/https://appsecscoop.com/c/vulnerabilities/risk-based-vulnerability-management-prioritise/Sun, 11 Oct 2026 09:46:12 +0000VulnerabilitiesTreating every software flaw as an emergency creates paralysis; contextual data reveals which weaknesses actually endanger your business operations.https://appsecscoop.com/c/data-breaches/third-party-risk-assessment-checklist-for-vendor/https://appsecscoop.com/c/data-breaches/third-party-risk-assessment-checklist-for-vendor/Sun, 11 Oct 2026 08:29:34 +0000Data BreachesA third-party risk assessment checklist reveals hidden supply chain weaknesses that internal controls cannot detect, exposing your organisation to cascading failure.https://appsecscoop.com/c/vulnerabilities/responsible-disclosure-myths-6-ways-teams-misuse/https://appsecscoop.com/c/vulnerabilities/responsible-disclosure-myths-6-ways-teams-misuse/Sun, 11 Oct 2026 06:59:51 +0000VulnerabilitiesResponsible disclosure is a structured risk management protocol, not a moral obligation or a legal shield against liability for published findings.https://appsecscoop.com/c/vulnerabilities/organisations-at-risk-stargaze-wordpress-theme/https://appsecscoop.com/c/vulnerabilities/organisations-at-risk-stargaze-wordpress-theme/Sat, 10 Oct 2026 19:54:50 +0000VulnerabilitiesA critical vulnerability in the Stargaze WordPress theme allows unauthenticated attackers to inject PHP objects, posing a severe risk to organisations running versions up to 1.10.https://appsecscoop.com/c/vulnerabilities/aws-bedrock-agentcore-flaw-could-have-let-one/https://appsecscoop.com/c/vulnerabilities/aws-bedrock-agentcore-flaw-could-have-let-one/Sat, 10 Oct 2026 18:48:20 +0000VulnerabilitiesA patched vulnerability in AWS Bedrock AgentCore allowed attackers to compromise an organisation's full suite of AI agents via a single chatbot interaction.