Your Browser Should Not Be an Authentication Boundary for AI Infrastructure
Ray CVE-2025-62593 turns a malicious browser visit into AI infrastructure code execution. Patch Ray and replace browser trust with authentication.
AI Security
The AI Platform Was the Door. The Cloud Identity Was the Prize.
Attackers are exploiting MLflow CVE-2026-64849 to turn exposed AI engineering services into a route to cloud metadata, internal systems and workload identity.
An Agentic Attack Framework Was Managing 23,800 Stolen Secrets
Google found an agentic attack framework managing more than 23,800 harvested secrets. In a separate operation, another framework built and launched a credential campaign in under six hours.
AI Agents Don’t Need More Intelligence. They Need Better Boundaries.
As artificial intelligence moves from answering questions to taking actions, organisations need to rethink where capability ends and authority begins. For the last few years, most people have interacted with artificial intelligence in a fairly contained way. You ask a…
Apple Moved Private Cloud Compute Onto Google’s Hardware. The Trust Model Had to Move With It.
Apple extended Private Cloud Compute onto Google Cloud and NVIDIA hardware, turning attestation, independent roots of trust and public verification into the privacy boundary.