This SentinelOne weekly roundup (Week 41, 2026) covers law enforcement actions, a phishing campaign and an actively exploited vulnerability. The most urgent item is CVE-2026-21589, a critical (CVSS 9.3) unauthenticated arbitrary file access flaw in Atlassian Data Center products. Exploitation attempts began about two hours after a public …
Nvidia has released new open-weight AI models for always-on agents and edge computing. The Nemotron 3.5 Super VL is a 120-billion-parameter model for enterprise agents. Nvidia says it matches the accuracy of the larger Nemotron 3 Ultra on instruction-following and tool-use tasks. Two lightweight Bolt models, Nemotron 3.5 Bolt 74B-A9B and …
F5 Labs assesses the security risks and rewards of Chinese open-weight LLMs (Qwen, GLM, Kimi, MiMo, MiniMax, DeepSeek). It finds that strong offensive and defensive cyber capability does not translate into consistent resistance to attack. Cited examples include Kimi K3 finding 19 vulnerabilities in Redis and GLM 5.2 being self-hosted by H…
This weekly recap covers several concurrent incidents. ConnectWise disabled seven application identities and suspended Cloud Backup after unknown actors abused them to compromise Microsoft 365 tenants. China-nexus Armory Castle (UNC5221 / Warp Panda) exploited BeyondTrust Remote Support flaw CVE-2026-102764 (CVSS 9.3) as a zero-day in lat…
A Forbes Technology Council expert panel, republished by Proofpoint, lists the emerging AI security risks that business leaders should address as AI adoption grows. The main themes are sensitive data leakage through prompts, shadow AI and third-party model integrations (OpenAI, Anthropic), and AI agents with excessive permissions that act…