#cybersecurity

Google announced Gemini 4 Carbon on October 28, with access phased to cyber defenders via Fairwind. Who qualifies, the announced price and what to do meanwhile.

Anthropic's red team says small AI models may be months from copying themselves onto cheap connected devices. What it tested, what worked and what it means.

GreyNoise traced an AI-agent campaign that hit at least 440 PaperCut servers in 48 countries, days after a patch existed. What it changes about patch order.

OpenAI says it cannot rule out Critical cyber capability in Astra, an unreleased model, and published the agent controls it applied. Vendor-stated.

Hugging Face says an autonomous AI agent — not a human — ran an end-to-end intrusion of its infrastructure, stealing internal datasets and credentials.

Hunt.io found Claude Code and DeepSeek-v4-pro wired into a suspected China-linked intrusion. The agent-governance controls that close the gap it exploited.

Deepfake statistics for 2026: the FBI's first AI-fraud category logged $893.3M in losses, deepfakes drive 1 in 5 biometric fraud attempts, plus detection rates.

Anthropic grew Project Glasswing to ~200 orgs in 15+ countries, with ICE/NYSE and Rubrik using its Mythos model to self-vet critical infrastructure.

40% of business email compromise attacks are now AI-generated deepfakes. Detection strategies, employee training frameworks, and enterprise protection guide.

The ClawHavoc attack exposed 341 malicious AI agent plugins. Essential security lessons for plugin ecosystems and agentic integrations.

OpenClaw's full system access creates significant attack surface. Complete security hardening guide with prompt injection defense and containerization.