AI & software security
-
Harmonic Security raises $50m to expand workforce AI controls in Britain and US
London and San Francisco-based Harmonic Security has raised $50 million in Series B financing, bringing total funding to $76 million and supporting engineering and commercial expansion.
-
Censys finds exposed AI services growing while industrial systems remain reachable
A new internet-wide survey from Censys records a 63% increase in exposed AI infrastructure over nine months and around 134,000 reachable industrial control hosts.
-
French cyber authority flags Citrix vulnerabilities across three product lines
CERT-FR has warned of newly documented vulnerabilities affecting Citrix XenServer, Workspace for Windows and UniconOS, covering code execution, privilege escalation and other risks.
-
Siemens warns of critical flaws in S7-1500 multifunctional module subsystem
Siemens has disclosed vulnerabilities in the GNU/Linux environment of a SIMATIC S7-1500 multifunctional module, with some fixes still in preparation and compensating controls advised.
-
Salt survey finds many enterprises cannot trace or stop unexpected AI-agent actions
Nearly half of respondents to a Salt Security study reported confirmed or suspected unauthorised AI-agent actions, while only a minority said they could trace complete agent activity or contain problems automatically.
-
LiteLLM gateway flaws exposed administrators, server files and AI provider keys
Check Point Research has detailed two patched LiteLLM weaknesses that could permit administrative takeover, code execution or theft of provider API credentials through an enterprise AI gateway.
-
Anthropic tests whether small AI models could replicate across connected devices
Anthropic researchers found that small models can perform elements of autonomous replication using constrained hardware, but they did not demonstrate a self-sustaining uncontrolled AI worm.
-
Microsoft releases October Windows security updates as patch assessment begins
Microsoft has issued its October cumulative Windows updates. Organisations must match applicable releases to their installations, distinguish security fixes from quality changes and verify the current advisory details.
-
NHS warns exploited Ivanti Connect Secure flaw permits remote code execution
NHS England has issued a cyber alert for CVE-2026-104935, warning of remote code execution risk in Ivanti Connect Secure and citing the vendor’s acknowledgement of exploitation in the wild.
-
MI5 launches AI Threat Assessment Centre to examine emerging security risks
MI5 says a new AI Threat Assessment Centre is bringing together expertise from British security and law-enforcement organisations to distinguish credible threats from speculative claims.