Our New Threat Landscape – AI Security, Shadow AI and Governance Editorial

Sep 9, 2026 | Publications

I contributed to an editorial on AI Security, Shadow AI and Governance which got released today. The report is available for download at https://www.coriniumintelligence.com/content/our-new-threat-landscape-ai-security-shadow-ai-and-governance How Australian and New...

Zero-Click WeChat Worm Could Hijack Accounts Through Incoming Calls Without User Interaction

Sep 8, 2026 | Podcast

https://calif.io/research/weworm Security researchers have demonstrated a self-spreading worm capable of taking over WeChat accounts on both iPhone and Android devices through nothing more than an incoming phone call, with the target not needing to answer, decline or...

AI Moves Up the Risk Register as Security Awareness Programs Struggle to Keep Pace

Sep 3, 2026 | Podcast

https://www.sans.org/mlp/ssa-security-awareness-report The 11th annual SANS Security Awareness and Culture Report, drawing on responses from more than 1,700 security awareness practitioners across the globe, has revealed that AI has rocketed from the fourth to the...

Security Teams Struggling to Keep Pace as AI Adoption Surges Across Industry

Sep 2, 2026 | Podcast

https://www.sans.org/white-papers/2026-sans-ai-survey-insights A major new survey from the SANS Institute has revealed that while AI adoption has surged dramatically over the past year, the governance frameworks and workforce capabilities needed to support that growth...

Iranian Hackers Pose as Recruiters to Deploy Malware Through Fake Coding Tests

Sep 1, 2026 | Podcast

https://thehackernews.com/2026/09/iranian-hackers-pose-as-recruiters-to.html An Iranian state-linked hacking group known as Nimbus Manticore has been caught running a recruitment scam designed to trick software engineers into infecting their own machines with newly...

AI Agents Exploited via Official Company Files in Major Supply Chain Security Breach

Aug 31, 2026 | Podcast

https://medium.com/@alonhertz1/data-became-code-we-ran-code-inside-fortune-500s-using-files-they-published-for-ai-agents-0cd67ffbbffc Security researchers have uncovered a new class of cyberattack that required no hacking, no phishing, and no exploitation of known...

Over 9,300 Exposed AWS Keys Remain Active, Hundreds Granting Full Corporate Account Control

Aug 27, 2026 | Podcast

https://trufflesecurity.com/blog/leaked-corporate-aws-keys-held-full-admin-rights Truffle Security has published findings from four years of tracking publicly exposed Amazon Web Services access keys, revealing that more than 9,300 keys exposed between August 2022 and...

Two Alleged TeamPCP Members Arrested in Australia Following Longest Running Software Supply Chain Attack Spree on Record

Aug 26, 2026 | Podcast

https://krebsonsecurity.com/2026/08/two-alleged-teampcp-hackers-arrested-in-australia Australian Federal Police have arrested two men from Western Australia, aged 21 and 23, in connection with TeamPCP, a cybercrime and data extortion group described as responsible for...

Nearly 700 Rogue AI Agents Coordinated Attack on Hugging Face After Escaping Evaluation Environment

Aug 25, 2026 | Podcast

https://metr.org/blog/2026-08-26-openai-hugging-face-incident-investigation/#core-takeaways-about-this-incidenthttps://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf New details have emerged about a July...

CISA Red Team Assessment Reveals Stark Contrast Between Two Organisations’ Cyber Defence Capabilities

Aug 24, 2026 | Podcast

https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-237a The Cybersecurity and Infrastructure Security Agency has published a cybersecurity advisory detailing the findings from two simultaneous red team assessments conducted at critical infrastructure...