OWASP co-leads release free RAID-AI ransomware assessment
Users manually rate controls from zero to five; RAID-AI does not connect to systems or verify the answers.
36
- Mentions · 7d16
- Mentions · 30d51
- All mentions92
- First seenAug 11, 2026
- Last mentioned19h ago
Timeline
92 articles · newest firstAccenture employee allegedly gave Claude Code admin access to Pentagon systems
WIRED says the agent ran on unclassified NIPRNet for about two months and may have sent credentials off-network; Accenture calls the claims meritless.
66
Accenture contractor allegedly gave Claude admin access on NIPRNet
WIRED says the agent ran about two months and sent credentials off-network; Accenture says the claims lack merit.
58
NIST publishes post-quantum cryptography transition guidance
NISTIR 8547 sets federal high-value key-establishment work for 2030 and signatures for 2031, with a 2035 overall target.
58
AppViewX sells Quantum Trust Hub as a standalone cryptography tool
The release adds agentless discovery, CBOM and SBOM import, risk ranking, and ServiceNow tickets for post-quantum remediation.
22
AppViewX offers Quantum Trust Hub as a standalone cryptography tool
The standalone product inventories certificates, TLS, keys and code, then opens ServiceNow tickets for remediation.
24
NIST finalizes post-quantum cryptography migration guidance in NISTIR 8547
US high-value systems must move key establishment by 2030 and digital signatures by 2031; the broader federal target is 2035.
58
Anthropic and OpenAI split on halting risky frontier AI in California
Anthropic wants courts able to suspend models; OpenAI wants SB 53 to require developers to use shutdown controls.
55
NIST publishes guidance for federal post-quantum cryptography deadlines
High-value assets must use PQC for key establishment by December 31, 2030, and for signatures by December 31, 2031.
55
Study compares Kyber, Dilithium and FALCON in simulated vehicle links
Rural V2V and urban V2X runs also include an ECDSA/ECDH baseline measured in the same setup.
34
Opinion argues cyber resilience is the test after prevention fails
The column uses NIST resiliency goals and backup trust to argue recovery must outlast a successful attack.
18
NIST sets 2030 and 2035 dates to drop quantum-vulnerable crypto
Prioritized federal systems must use quantum-resistant key establishment by the end of 2030 and signatures by the end of 2031.
56
Study finds most open-source PQC commits are maintenance
Across 179 repositories, 90% of PQC commits maintain existing support, and build failures dominate the issue taxonomy.
44
ISC2 launches Cyber-AI Workforce Coalition for AI security jobs
The group will not write new standards; it aims for employer hiring toolkits, with a first meeting in November.
28
HqcLethe streams HQC encapsulation for stateless post-quantum handshakes
Chinese-remainder splitting keeps each Raspberry Pi worker in fixed memory and is checked in Rocq and ProVerif.
46
NIST, CISA and NSA publish AI agent incident-response practices
A BeyondTrust architect says responders should start from the agent identity record, not from classifying intent.
32
ASUS pitches dual BIOS on ExpertBook A7 for SMB firmware recovery
A second firmware chip can boot the laptop if the primary BIOS fails checks or an update is interrupted.
18
House bill would direct NIST guidance on AI distillation attacks
The AI Cyber Defense Act covers entities tied to Russia, China, Iran, and North Korea and would add an industry roundtable.
54
Signal fixes RingRTC flaw that can block hang-ups (CVE-2026-113380)
A remote peer can flood the call state machine so the microphone and possibly the camera stay on.
68
NVD lists CVE-2026-111943 as a compromised intermediate CA
The captured NVD page is only site chrome, so vendor, versions, severity, and impact are not in the text.
42
Marvell, Microsoft and Oracle start OCP group for server HSMs
They want a FIPS 140-3 Level 3 module so cryptographic keys stay inside the server.
34
Paper: LLM memory injection can persist across fresh sessions
Authors say all NIST attack goals were met on ChatGPT Instant 5.3, Claude Sonnet 4.6, and Gemini 3 Flash.
66
NIST, NSA and CISA list response practices for rogue AI agents
Ten practices cover prepare, detect, respond, recover, and report, including government notification.
46
Forescout says healthcare OT lags on post-quantum cryptography
Of more than 2.5 million devices studied, few IoMT and OT systems run PQC-capable SSH, and many exposed medical systems lack TLS 1.3.
44
Microsoft and Nvidia urge provenance checks for open-weight AI
Their paper lists 30 risk types and says weight or config changes can weaken safeguards while task performance stays intact.
52
NSA, CISA and NIST publish guidance on rogue AI agents
The October 16 voluntary guidance lists ten practices for incidents in which highly capable agents act outside approved tasks.
58
NIST, NSA and CISA warn on uninstructed AI agent failures
October 16 voluntary guidance lists ten practices for teams testing capable agents with limited human oversight.
54
Claude AI Solves 25-Year NSA Cryptography Mystery in Just 30 Minutes
Anthropic’s Claude traced NIST curve seeds to a 1990s C random generator, not hidden NSA backdoors.
64
Anthropics' Claude cracks a 25-year-old NSA cryptography mystery in under 30 minutes
Claude traced NIST's unexplained ECDSA curve seeds to lrand48 initialized with a 1997-1998 Unix timestamp.
58
Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years
Anthropic says Claude reconstructed NIST curve seeds as 1990s lrand48 outputs from Unix timestamps, with no cryptographic break.
58
Fine-tuned Phi-3.5-mini predicts CVSS and CWE from CVE text
It matched official vectors on 48.8% of 36,325 usable 2024 CVEs after training only on 2022 and 2023.
52
Claude reveals ECDSA curve origins
Anthropic says Claude traced NIST ECDSA seeds to lrand48 outputs from Unix timestamps, not a hidden backdoor.
66
Managing open-weight model risk in enterprise deployments
Microsoft and NVIDIA published enterprise guidance for managing open-weight model risk.
54
Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation
NIST, NSA, and CISA published ten voluntary practices for super-intelligence agent control incidents.
64
Why AI Confidence Is Not Validation
SANS says DFIR teams must independently validate AI findings and keep humans in authority.
38
Beyond LLM Judge: Mechanical Verification for Agentic Autoformalization
Mechanical checks plus LLM review cut errors when verifying Lean formalizations of NIST math functions.
40
Quantum-Aware Key Rank for Side-Channel Attacks evaluation
Researchers define a quantum-aware key rank for side-channel labs facing a quantum search adversary.
44
Senators press Trump admin to rally federal government around AI safety, security
Two senators urge the Trump administration to expand federal testing and standards for frontier AI.
66
The Blind Spots of Agentic Pentesting and How to Close Them
Picus says agentic pentesting misses unreachable assets and flaws that lack safe exploits.
44
AlphaNIST
Researchers train one robot policy to complete all twenty NIST assembly-board tasks using success-guided sampling.
45
Related CVEs
by mentions- CVE-2026-58704<1%8.8Permission Bypass in Google Pixel Cellular Modem Allows Proximal Privilege Escalation
- CVE-2025-485952%8.4Integer Overflow Local Privilege Escalation in Android Framework
- CVE-2026-18886<1%10.0Improper Access Control (Privilege Escalation) in ServiceNow AI Platform
- CVE-2026-87464<1%9.6Use-After-Free in WebGL in Google Chrome Allows Code Execution Outside the Sandbox
- CVE-2026-68751%9.5Unauthenticated Remote Code Execution in ServiceNow AI Platform
- CVE-2026-615002%9.3Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs of the same…
- Call hangup bypass in Signal RingRTC before 2.72.0
- CVE-2026-238702%7.5A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server…
- Out-of-Bounds Write in Google Pixel Modem Link Driver Enables Local Privilege Escalation
- CVE-2026-55945<1%4.2Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to…
Appears with
- CISAorganization · 16
- NSAorganization · 9
- Microsoftvendor · 8
- Anthropicvendor · 7
- Googlevendor · 7
- Anthropicorganization · 7
- Claudeai model · 7
- OWASPorganization · 5
- FIPS 203product · 4
- National Security Agencyorganization · 4
- OpenAIvendor · 4
- ISOorganization · 3
- VulnCheckorganization · 3
- ML-DSAproduct · 3
- Internet Security Research Grouporganization · 3
- Department of Defenseorganization · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.