Asymptote Labs has raised $5.5 million in an oversubscribed seed round led by Tower Research Ventures, with Lytical Ventures, 1984 Ventures and South Park Commons also participating. The company is building runtime control and visibility infrastructure for enterprise AI agents. It was founded by Justin D'Souza (CEO) and Shukan Shah (CTO),…
The Cyber Security Agency of Singapore (CSA) and Google convened policymakers, critical infrastructure leaders and AI safety experts on Oct. 14 at Singapore International Cyber Week 2026. The tabletop exercise examined security risks from increasingly autonomous AI agents that act at machine speed. Participants concluded that perimeter de…
The U.S. Government Accountability Office (GAO) published its Strategic Plan 2027-2032, which sets out how it will support congressional oversight of federal cybersecurity, critical infrastructure protection and emerging technology risks. The plan cites persistent cyber threats, evolving national security risks and advances in artificial …
Tenable describes how it moved Tenable One AI Exposure detectors (jailbreaks, prompt injection, harmful content, data exposure) from an English-centric "translate-then-detect" design to a single native multilingual model. The article is product and engineering news and reports no incident, vulnerability or threat actor activity. Tenable b…
Nvidia introduced the OpenShell Reference Architecture at GTC Berlin. It is a blueprint for building, running, observing and policing AI agents on the OpenShell secure runtime, and it extends sandboxing to gateway-brokered credentials, identity and policy boundaries, and eventually routing and workflows (theregister.com). The design calls…
A reader comment on a Schneier on Security post about the Workshop on Economics and Information Security (WEIS) archive was posted by David Mohring on 21 October 2026. It links older material from 2002 and 2004, including a Usenet archive and a 2004 piece titled "Twelve Step TrustABLE IT". The commenter argues that businesses can historic…
ServiceNow and Nvidia announced general availability of Arc, a long-running personal AI agent for enterprise productivity tasks such as email and Microsoft Teams. Arc was first announced in May and is available now on Mac, with Windows support still pending. It is designed for Nvidia's new RTX Spark devices and can run locally or inside N…
Mach9 (formerly Mach9 Robotics) announced a $34 million Series A co-led by First Round Capital and Bessemer Venture Partners, with participation from Prudence and Quiet Capital. The startup pivoted from inspection hardware to AI-driven CAD software that converts laser-scan and imagery survey data into a first-draft plan that engineers ref…
Microsoft has released PowerToys 0.102, an open-source Windows utility pack, adding two mouse tools, new command-line tools and Command Palette improvements. This is product news with no vulnerability, exploitation or threat activity described. Mouse Button Lock keeps a mouse button treated as held until the next click, which helps with d…
A vendor-contributed article by Pentera argues that the hard engineering in AI-driven pentesting lies in the "harness" around the model, not in the model that writes the attacks. It cites the Hugging Face intrusion that OpenAI disclosed in July, which occurred inside an OpenAI evaluation meant to contain the agents, as an example of a har…
A WIRED long-read profiles Lili Infante, a Russian-born DEA special agent who became a pioneer of cryptocurrency and digital money-laundering investigations. This opening installment is biographical. It covers her childhood in post-Soviet Moscow, her early work translating wiretaps in a RICO case against the Boris Nayfeld Bratva gang in B…
Sekoia announced an integration between Zimperium Mobile Threat Defense (MTD) and the Sekoia autonomous SOC platform. It brings mobile threat telemetry into a single environment for detection, investigation and threat hunting. The post is vendor product content, not a new incident or vulnerability. It argues that mobile devices are now a …
Dispel announced an integration between Tenable One OT Exposure and the Dispel Zero Trust Engine, its OT secure remote access platform. The integration feeds Tenable's real-time OT/IoT asset and vulnerability intelligence into every remote access decision. It is a product announcement with no vulnerability, incident or threat actor involv…
Tenable Holdings announced Tenable OPEN for AI, an expansion of its Tenable Open Partner Exchange Network (OPEN) that provides validated AI workflows combining Tenable exposure intelligence with customers' preferred AI models, agents and tools. Launch partners include BeyondTrust, Cohesity, Command Zero, Corelight, Infoblox, Recorded Futu…
Nozomi Networks and Schweitzer Engineering Laboratories (SEL) announced an expanded global partnership aimed at helping critical infrastructure operators, particularly utilities, improve OT visibility, cyber resilience and regulatory readiness. The expansion adds a direct integration between the Nozomi platform and SEL OT Software-Defined…
Microsoft Security Response Center (MSRC) announced on October 20, 2026 that it is replacing the multiple report quality levels in its bug bounty programs with two assessments: "Complete" and "Not Complete". The rules apply to reports submitted on or after October 20, 2026, 8 AM Pacific Time. Earlier submissions remain under the previous …
Accenture, Dragos and the SANS Institute announced the Community Cyber Resilience Foundation, a roughly $10 million mix of funding and services to help under-resourced US water, wastewater, electric and natural gas utilities secure their operational technology (OT) environments. The first phase covers up to 500 utilities, which receive fr…
Anthropic has been shopping a draft federal AI safety bill to Congress, according to Politico and reported by TechCrunch. An Anthropic spokesperson confirmed it reflects the company's Advanced AI Framework, which it has promoted to federal and state lawmakers since June. The bill would allow a model's release to be blocked when it poses a…
This Aikido Security blog post ranks eight alternatives to Mimecast and puts its own workforce security platform, Noon Security, first. It is vendor marketing, not incident reporting. The article argues that gateway-centric email security struggles with hijacked but legitimate vendor accounts, internal mail that never crosses the gateway,…
This vendor blog from Aikido Security compares nine phishing simulation tools for 2026 and ranks its own early-access platform Noon first. The others are KnowBe4, Hoxhunt, Adaptive Security, Keepnet, Cofense, IRONSCALES, Microsoft Defender for Office 365 Attack Simulation Training and Gophish. It argues that email-only programs miss multi…