Google announced on 20 October 2026 that it is upgrading the Gemini assistant in vehicles with a Personal Intelligence feature. The feature draws on data from Gmail, Google Calendar, YouTube, Maps, Google Search history and other connected Google services. It launches today in Android Auto and will reach cars with Google Built-in in the c…
A contributed piece by Matias Madou (CTO and co-founder of Secure Code Warrior) argues that governance alone is not enough to control the security risks of agentic AI in software development. Organizations also need to know where they sit on an eight-stage AI Adoption Model. The article cites Gartner's prediction that costs of incidents d…
The NSA, CISA and FBI issued joint advisory AA26-251A warning that China-based AI companies are running industrial-scale knowledge distillation campaigns against U.S. frontier AI models. The named companies are DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun and Z.AI. According to the agencies, they have extracted billions of tokens acro…
F5 Labs published its November 2025 AI Security Insights, drawn from the Comprehensive AI Security Index (CASI) and Agentic Resistance Scoring (ARS). Anthropic models took the whole top tier of the CASI leaderboard (Claude Haiku 4.5 at 95.89, Claude Sonnet 4.5 at 95.86, Claude Sonnet 4 at 95.33), while the GPT-5 family slipped, with GPT-5…
Google announced Universal Cart and the When to Buy Guide, two consumer shopping features ahead of the holiday season. Universal Cart saves products from multiple retailers via AI Mode in Search or the Gemini app. It tracks price drops and restocks using the Shopping Graph (60+ billion product listings). It is built on Google Wallet, inte…
Symantec's Threat Hunter Team reports that new versions of the Aoki infostealer now target credential and session files used by AI coding assistants. Earlier versions focused on browser, cryptocurrency wallet and password manager data. Aoki is a relatively new and sparsely documented stealer, first observed earlier in 2026, and its AI-rel…
Qilin and Settra ransomware groups are actively exploiting CVE-2026-0257, an authentication bypass in PAN-OS GlobalProtect and Prisma Access disclosed in May 2026, according to ReliaQuest. Because access arrives through the victim's own VPN, it can resemble legitimate remote work and go unnoticed until credential theft, lateral movement, …