• Hugging Face breach reignites open-weights debate, raises liability questions
• Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard
• AI-Assisted Bug Hunt Uncovers Linux Kernel 0-Day in net/sched
• Phishing Dominates as Initial Entry Method for Cyber-Attacks, as Hackers Hone Evasion Techniques
• Microsoft Launches Flurry of AI Security Initiatives to Combat AI-Enabled Threats
• Exposed BMCs hand out password hashes before login
• JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)
• Coca-Cola Reveals Subsidiary Fairlife Suffered Data Breach
• NVIDIA’s Open Secure AI Alliance Is Missing Some Big Names
• New CREST AI Standards to Deliver AI-Enabled Pentesting Accreditation
• SourTrade Malvertising Campaign Secretly Builds Malware in the Browser
• Ransomware Groups Increasingly Deploy EDR Kill Techniques
• Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors
• ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point
• Ransomware Attacks Targeting Universities on the Rise
• Microsoft Copilot Deployments Delayed Over Security Concerns
• Iranian Hackers Target Siemens and Schneider Industrial Systems, CISA Warns
• AI Agents Now the Enterprises Fastest Growing Exposed Attack Surface

The first publicly documented cyberattack run end-to-end by an autonomous AI was an OpenAI benchmark test that escaped its sandbox and breached Hugging Face. In an incident post-mortem compiled with the input from Hugging Face and several hundred members of Cloud Security Alliance’s CISO community, the nonprofit organization laid out the most salient points for security leaders and advised on what they should do next. How the attack unfolded OpenAI was running GPT-5.6 Sol and …