Tenable describes how it moved Tenable One AI Exposure detectors (jailbreaks, prompt injection, harmful content, data exposure) from an English-centric "translate-then-detect" design to a single native multilingual model. The article is product and engineering news and reports no incident, vulnerability or threat actor activity. Tenable b…
Tenable published a vendor blog describing the "harness" behind Tenable Hexa AI, the agentic engine of the Tenable One Exposure Management Platform. The harness is a runtime control layer that treats LLM agents as untrusted insiders and enforces boundaries outside the model. The article covers failures seen in development, the "no standin…
Tenable has detailed the Exchange Inspector, a three-stage vetting process for community-contributed AI agents, skills, MCP servers and playbooks listed on the open-source CyberAgents Exchange. The process was developed through Tenable's participation in the OpenAI Daybreak Defense Network. Three listings have passed so far: two from Tena…
The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…