30
30
30
30
30
30
AdamX: Cosine similarity meets gradient descent
Researchers propose AdamX, a cosine-similarity-based first-order optimizer with variance rectification that matches Adam-class convergence across benchmark datasets and architectures.
The paper introduces AdamX, a first-order optimizer that uses cosine similarity as an adaptive mechanism for controlling update magnitudes, plus a variance rectification scheme for smoother optimization early in training. The method is described as scalable, model-agnostic, and straightforward to integrate into existing pipelines. Empirically, AdamX shows competitive convergence rates measured by epochs to reach performance thresholds under a fixed hyperparameter budget, with code and experiments released on GitHub.
22
Gemini Omni 1.1 Flash lets you build with more control
Google DeepMind released Gemini Omni 1.1 Flash, an updated model giving developers more control when building applications.
Google DeepMind announced Gemini Omni 1.1 Flash in a blog post titled 'Gemini Omni 1.1 Flash lets you build with more control.' The update targets developers building on Gemini, emphasizing greater control over model behavior. No article text was available, so technical details such as benchmarks, context window, or pricing are unknown.
45
GeForce NOW Gives Gamers More Ways to Play at Gamescom 2026
NVIDIA announced Gamescom 2026 GeForce NOW updates: DLSS 4.5 controls, new Steam device support, GOG single sign-on, Firefox access, and more cloud games.
At Gamescom 2026, NVIDIA announced expanded support for its GeForce NOW cloud gaming service, including new Steam devices, GOG single sign-on, Firefox browser access, and more big PC games coming to the cloud. The company also introduced new NVIDIA DLSS 4.5 technology controls that let members fine-tune gameplay. The announcements are consumer gaming product news rather than security or research developments.
22
GitLab 19.3 helps enterprises scale agentic development securely
GitLab 19.3 runs its Duo Agent Platform AI Gateway inside Dedicated single-tenant environments and adds Secrets Manager plus agentic SAST remediation.
GitLab 19.3 lets GitLab Dedicated customers run the Duo Agent Platform AI Gateway within the same single-tenant environment and region, with support for bring-your-own inference models. The release adds Secrets Manager in limited availability scoping secrets to environment and branch across Kubernetes, Terraform, and OpenTofu, plus bulk SAST false positive detection and agentic vulnerability resolution generating ready-to-merge fixes. Flow Creator Agent creates automation flows from plain-language descriptions, and GitLab Credits usage caps are now generally available.
32
Why Patch Automation Needs Brakes, Not Just an Accelerator
Action1's field CTO argues patch automation needs staged deployments and stop conditions, not just speed.
Gene Moody, Field CTO at Action1, writes on BleepingComputer that patch automation must pair acceleration with safeguards. He recommends staged deployment rings with predefined go/no-go criteria, keeping human judgment for domain controllers, databases, and ERP systems. The piece warns that automation without brakes can push a bad update to 10,000 endpoints as fast as a good one.
12
Top 10 Best Application Control & Allowlisting Tools in 2026
Roundup ranks 2026 application allowlisting tools, scoring ThreatLocker 8.8/10, Airlock Digital 8.5/10 and free Microsoft WDAC among top default-deny options.
This is a scored buyer's guide to ten application control and allowlisting tools for 2026, with ThreatLocker ranked first (8.8/10), Airlock Digital second (8.5/10) and Microsoft's built-in WDAC/AppLocker third (7.2/10). It notes ransomware has renewed interest in default-deny execution controls and that CISA and other agencies list application control among the most effective yet under-deployed mitigations. The evaluation is research-based with no lab testing, weighting policy automation at 30% and operability at 25%.
18
30
Privacy-Aligned Personalized Federated Learning with Compact Adaptation and Variable-Length Gaussian Communication
Paper releases a private client context once and confines adaptation to coefficients, matching full-model differential privacy with 2.67x less uplink on CIFAR-10.
The paper addresses the dimensionality misalignment between record-level differential privacy and low-dimensional client variation in personalized federated learning by releasing a private client context once and restricting repeated adaptation to a fixed coefficient space. A variable-length quantized Gaussian mechanism lets quantization error itself serve as the required privacy perturbation. On MNIST and CIFAR-10, the design matches or outperforms full-model private adaptation across privacy budgets and client heterogeneity while cutting protected uplink 2.67x at epsilon=16 on CIFAR-10.
25
The 12 Best Endpoint Detection & Response (EDR) Solutions, Compared and Priced
An editorial scorecard ranks 12 EDR platforms, with CrowdStrike and SentinelOne tied at 8.6/10 and telemetry retention identified as the hidden cost driver.
An editorial comparison scores twelve EDR platforms on detection, response, analyst burden, pricing transparency, and coverage. CrowdStrike and SentinelOne tie at 8.6/10, with Microsoft Defender for Endpoint close behind at 8.5 and described as effectively free in Microsoft 365 E5 estates. The guide argues that telemetry retention, not per-endpoint price, drives real cost, with fully-priced quotes frequently diverging 2-3x from headline rates. Managed detection offerings, including Cynet's bundled 24/7 SOC, factor into the buyer-fit rankings.
15
Tactical Threat Intelligence Explained: Benefits & Use Cases
Recorded Future explains tactical threat intelligence, covering attacker TTPs, IOC collection, and use in SOC detection, response, and control hardening.
Recorded Future published an explainer on tactical cyber threat intelligence, describing how it differs from strategic and operational intelligence by focusing on attacker tactics, techniques, and procedures. The piece outlines sources such as OSINT, dark web monitoring, malware analysis, and internal telemetry, and describes the intelligence lifecycle from collection through dissemination. It argues tactical CTI improves detection tuning, incident response, preventive controls, and resource allocation for SOC teams.
18
Top 10 Best Ransomware Protection Solutions in 2026
A 2026 buyer's guide ranks ten ransomware protection tools by kill-chain role as extortion shifts from encryption to data theft.
The roundup organizes defenses across the ransomware kill chain: prevention-grade EPP/EDR platforms, containment layers, rollback specialists, and immutable recovery. Recommended products include CrowdStrike, Microsoft Defender, Sophos, SentinelOne, Bitdefender, Trend Micro, Halcyon, Huntress, and Malwarebytes. It stresses that many crews now extort on stolen data without encrypting, making exfiltration detection and response speed as important as rollback.
15
AI workflows may be creating a dangerous new authorization blind spot
Noma Labs researchers describe 'workflow identity hijacking,' letting unauthenticated users trigger privileged AI workflows that execute actions with high-privilege service accounts.
Noma Labs lead researcher Sasi Levi detailed 'workflow identity hijacking,' where benign unauthenticated inputs via support inboxes, GitHub issues, or web forms trigger enterprise AI pipelines that execute privileged actions. The workflow runs using high-privilege service accounts or developer API keys, decoupled from the requester's identity, effectively creating a confused-deputy condition. Unlike prompt injection, the model behaves correctly; the failure lies in authorization enforcement at the workflow layer, and activity blends into routine automation. Mitigations include identity-aware access at execution points and user-context propagation between AI outputs and downstream operations.
45
Coupled Calibration and Learning: Mitigating Teacher Bias in LLM Distillation without Target-Domain Reward Feedback
CCL couples teacher calibration with student updates via token-level branching, provably removing teacher bias in LLM distillation.
The paper proposes Coupled Calibration and Learning (CCL), an LLM distillation algorithm that alternates teacher calibration using source-question reward feedback with student training on target questions under covariate shift. Each iteration calibrates the teacher on source feedback, trains the student on target questions, and lets the updated student inform subsequent calibration. The authors prove the student's expected KL divergence to the oracle student converges to zero at a polynomial rate, and show regularized direct matching error can remain bounded away from zero.
20
30
What 90 days and a small budget can buy in AI agent security
Versa Field CISO details hidden costs of self-hosting open-weight models and a 90-day AI agent security plan of inventory, blast-radius reduction and testing.
In a Help Net Security interview, Prasad Tharippala, Field CISO at Versa, argues running open-weight models in-house improves control but shifts hardening, patching, access control, monitoring and incident response onto the buyer, with underestimated costs in GPU infrastructure, licensing review, EU AI Act compliance and scarce AI/ML security skills. On red-teaming AI agents, he recommends testing prompt injection, indirect injection, excessive permissions, data leakage, memory and RAG poisoning, malicious tool outputs, cross-agent trust abuse and infrastructure attack paths, mapped to OWASP agentic guidance and MITRE ATLAS. He highlights the handoff between chained agents as a major risk zone and stresses exercising human approval, shutdown and rollback controls under test conditions. For teams with 90 days and small budgets, he ranks inventory, blast radius reduction and ongoing testing as the priority order.
30
50
WordPress Blocks High-Risk Plugin Releases With New AI-Powered Automated Security Review
WordPress.org now runs AI-powered automated security reviews on every plugin release, automatically blocking high-risk updates before distribution to millions of sites.
WordPress launched an automated security review that combines multiple AI models and Jetpack Scan during a six-hour cooldown to score each plugin release; updates above the blocking threshold are automatically held back from the WordPress.org update API. The change follows a July 28 incident where a backdoor added to a plugin with roughly 20,000 active installations was detected during cooldown and never delivered; the Plugins Team removed it 26 minutes after a Wordfence notification. Blocked developers receive an email with findings and are advised to publish a corrected version rather than await manual appeal.
58
AI deployments are stretching enterprise security to its limits
NetFoundry survey finds AI deployments will expand enterprise attack surfaces by 14%, with 90% of leaders worried about unapproved employee AI use.
NetFoundry's 2026 State of Secure AI Access survey found CISOs and CTOs expect AI deployments to grow attack surfaces by an average 14% within a year, with 90% concerned about employees using unapproved AI tools. Only 15% expressed high confidence that existing tools protect AI deployments, while non-human identities, static credentials and internet-facing APIs drive risk, and vulnerability exploitation now accounts for about 31% of breaches. Security reviews and network changes add an average eight days to AI deployments, and the median time to patch known exploited vulnerabilities has risen to 43 days.
35
AI will not fix a governance problem in your camera estate
Hikvision EMEA security director argues camera estates need governance, recovery controls, and secure-by-default settings rather than AI fixes.
Rob Janssens, EMEA Cyber Security Director at Hikvision Europe, discusses securing surveillance camera estates whose lifecycles outlive their installers, leaving lost documentation and admin credentials. He advocates secure-by-default settings such as mandatory password activation, login-failure monitoring, IP filtering, and controlled SSH access, and argues customers should be able to recover control without the original integrator. He distinguishes secure-by-design from secure-by-default, recommends VPNs and network segmentation over disabling controls, and weighs European requirements like source code escrow and country-of-origin rules.
18
30
The 12 Best Antivirus (Endpoint Protection) Software for Business, Compared and Priced
GBHackers compares 12 business antivirus products on detection, EDR depth, pricing, and platform coverage, ranking CrowdStrike and Bitdefender joint top at 8.8.
The roundup scores 12 enterprise endpoint protection vendors across detection, EDR depth, management, pricing transparency, and platform coverage. CrowdStrike and Bitdefender tie at 8.8, with Microsoft Defender for Endpoint scoring 8.5 and noted as effectively free for Microsoft 365 E5 licensees. The piece also flags that Kaspersky cannot legally be sold in the US and that Panda and Webroot now sit under WatchGuard and OpenText respectively.
15
50
Entropy-Regularized Rank-Masked Policy Optimization for Test-Time Reinforcement Learning in Code Generation
Researchers propose ERPO, enabling test-time reinforcement learning for code generation via probe-executed consensus rewards, rank masking, and entropy regularization.
The paper introduces probe-driven test-time reinforcement learning (TTRL) for code generation, where output-free probe inputs are constructed from problem statements and candidate programs are executed on them to compute a Probe Consensus Reward (PCR). Because PCR can be gamed through spurious consensus, the authors propose Entropy-Regularized Rank-Masked Policy Optimization (ERPO), which turns low-PCR outcomes into conservative negative updates via rank masking and constrains policy drift with an entropy ceiling. On coding benchmarks, ERPO substantially improves pass@1 and pass@k in both in-domain adaptation and zero-shot transfer.
38
30
30
30
30
30
30
30
30
Cybersecurity jobs available right now: July 28, 2026
July 28, 2026 cybersecurity job listings spanning cloud security, offensive security, AI safety, and application security roles across multiple organizations.
This Help Net Security post lists open cybersecurity positions at Toyota Automated Logistics, VELUX, Maryville University, BlackSea Technologies, AZ Group, Sedha Consulting, Gentex, cyforce, Postman, NVIDIA AI, Matillion, and RBC. Roles include cloud security engineering, offensive security leadership, AI safety research, and vulnerability triage management, spanning USA, Denmark, UAE, Israel, UK, and Canada. Positions are on-site, hybrid, or remote; many noted as no longer accepting applications.
8
The AI graveyard: a running list of projects and startups that didn’t make it
TechCrunch compiles a running list of failed AI products and startups, including Relay, OpenAI's Sora, Humane AI Pin, Notion Mail, and Microsoft's Recall.
TechCrunch's 'AI graveyard' tracks notable AI products and startups that shut down or underperformed, citing S&P Global data that about 42% of AI initiatives are abandoned. Examples include the Relay automation startup, OpenAI's Sora video platform (shut March 2026), ChatGPT Atlas browser (discontinued August 9), Notion Mail (shutting September 22), and Apple's delayed Siri AI that contributed to a $250 million settlement. Hardware failures include the Humane AI Pin ($230 million raised, assets sold to HP for $116 million) and the Rabbit R1, which sold 100,000 units but received poor reviews. Microsoft's Recall feature remains controversial after a researcher demonstrated a tool extracting its captured data.
18
[AINews] OpenAI shuts off Cursor
OpenAI cut off API access to coding tool Cursor after its SpaceX acquisition, citing contract violations by Elon Musk's companies.
OpenAI disabled Cursor's access following the closing of Cursor's acquisition by SpaceX, citing its experience with Elon Musk's companies violating contracts; Cursor responded that OpenAI accounts for only 5% of its traffic. The weekly digest also covers major open-weight releases: Z.ai's GLM-5.3 (744B total/40B active, 1M context) and Tencent's Hy4-preview (770B/49B, ~#5 on Code Arena WebDev), plus Alibaba's Qwen3.8-Flash (125B/6B). vLLM published benchmarks showing no universal winner among speculative decoding methods across model families.
55