Latest

Cyberwarfare / Nation-State Attacks

North Korea’s APT Capabilities Are No Longer State-Exclusive

Tiffany Wang  •  July 31, 2026

Shared malware, infrastructure and access methods link Lazarus Group to Gunra ransomware activity, while former North Korean military hackers allegedly used state-trained skills to steal bank funds, exposing cyber capability diffusion and blowback inside the regime.

Cyberwarfare / Nation-State Attacks

US CISA Urged to Order OT Security Improvements

Shaun Waterman  •  July 31, 2026

The U.S. Cybersecurity and Infrastructure Security Agency should order federal agencies to secure operational technology to head off hacks like those blamed on Iran, which targeted water utilities in Minnesota this week, a trade association representing OT manufacturers and security companies said.

Agentic AI

Okta Buys Permiso to Extend ITDR Beyond Native Identity Logs

Michael Novinson  •  July 31, 2026

Okta said its planned acquisition of Permiso will expand identity threat detection beyond native Okta telemetry by adding thousands of risk signals, AI agent security capabilities and graph-based correlation that combines identity exposures with active threats to improve detection and response.

Agentic AI

AI Is Forcing CIOs to Rethink the Data Platform

Jennifer Lawinski  •  July 31, 2026

Enterprise AI is exposing the limits of data platforms built for reporting. CIOs must decide when to extend a warehouse, adopt a lakehouse and invest in the semantic layers, governance and business ownership that help AI systems interpret data and act reliably.

►

Agentic AI

ISMG Editors: A New Front in the Naming War

Anna Delaney  •  July 31, 2026

In this week's panel, four ISMG editors discussed Google's controversial new threat actor naming system and the need for standardization, whether the artificial intelligence boom is built on solid economic foundations, and the growing battle between open and closed AI models.

Artificial Intelligence & Machine Learning

Anthropic AI Models Hacked 3 Real Companies

Rashmi Ramesh  •  July 31, 2026

Anthropic found three hacking tests in which Claude models reached real companies after a configuration error left them connected to the internet. One accessed customer data, another released malware that ran on 15 computers and a third scanned 9,000 systems.

Agentic AI

Amazon: Custom Frontier Model Can Cut Costs, Target Niches

Michael Novinson , Tiffany Wang  •  July 31, 2026

Amazon is redirecting engineering and computing resources from its Nova portfolio to a new frontier model, betting that specialization, customer-specific training and lower operating costs will matter more as leading AI systems approach comparable capability.

Artificial Intelligence & Machine Learning

Anthropic, Pentagon Clash Over First Amendment Claims

Emilia David  •  July 30, 2026

A San Francisco federal judge showed skepticism Thursday over whether the Department of Defense acted lawfully when it blacklisted artificial intelligence firm Anthropic, telling federal attorneys at the onset of a roughly 90 minute hearing that the Pentagon is "at odds with the First Amendment."

Artificial Intelligence & Machine Learning

Breach Roundup: OpenAI Models on a Hacking Tear

Anviksha More  •  July 30, 2026

This week: Sam Altman on hacking, Russia exploited an Outlook web access flaw, Coca-Cola restarted Fairlife production, U.K. education department and Angola teleco breached, SonicWall credential stuffing, Telegram founder charged in Russia, hidden prompt turns Microsoft Copilot into an AI worm.

Agentic AI

ThreatLocker Raises $190M to Counter Malicious AI Agents

Michael Novinson  •  July 30, 2026

ThreatLocker raised $190 million in Series F funding to expand zero trust protections against autonomous AI agents while using AI to simplify security administration, policy management and prevention-first defenses across increasingly complex enterprise environments.

Artificial Intelligence & Machine Learning

Hugging Face Incident Spurs Calls for European AI Autonomy

David Meyer  •  July 30, 2026

OpenAI's inadvertent agentic hacking of Hugging Face's systems has startled some politicians in Europe, with Germany's top tech minister saying it demonstrated the need for the rapid development of the European AI sector. The European Commission said it will build up to seven "AI gigafactories."

3rd Party Risk Management

JFrog Patches Flaws Behind OpenAI Models' Escape

Rashmi Ramesh  •  July 30, 2026

JFrog patched previously unknown flaws in self-hosted Artifactory after OpenAI models used them to escape a cyber test environment and reach Hugging Face production. The repository software is run by more than 7,500 DevOps teams, including most Fortune 100 companies.