TAG
#ai security
Stories connected through a shared idea, actor, technology or theme.
Open Secure AI Alliance moves under Linux Foundation governanceThe Linux Foundation announced that the Open Secure AI Alliance had joined its ecosystem under neutral governance. The alliance plans open tools, shared standards and a findings exchange spanning models, agents, identity, policy, containment and infrastructure.→South Korea’s expanded espionage law takes effect for foreign technology theftThe amended law applies espionage provisions to all foreign countries rather than only specific adversaries. It covers technologies including semiconductors, displays, batteries and artificial intelligence, with prison terms of at least three years for violations.→HiddenLayer raises $100M and adds runtime security for AI coding agentsHiddenLayer said Delta-v Capital led its $100M Series B, with participation from Ten Eleven, Morgan Stanley, Microsoft's M12 and Booz Allen Ventures. The financing will expand agentic runtime security and Agent Harness Security, which monitors and protects autonomous coding agents at runtime.→Visa expands its open-source security harness from discovery to validated remediationThe latest VVAH release adds closed-loop remediation, validation, flexible model selection and real-time workflow visibility. Visa says some vulnerability-resolution cycles have fallen from weeks to hours, while its documentation still requires human review of generated findings and fixes.→Perturb launches a decentralised network for continuous AI-model red-teamingThe network supports black-box, white-box and transfer attacks, returning robustness scores, vulnerability heatmaps and hardening datasets to model owners. Perturb says findings will be privately disclosed and that the system is intended to provide continuous external testing rather than periodic red-team engagements.→AI-Infra-Guard 4.6 adds LLM API-poisoning checks and agent red-team coverageAI-Infra-Guard 4.6 adds an API Checker security-audit module with web-proxy integration, a detector for LLM API poisoning, a v5 Agent-Scan mutation-engine refactor and a DeepSeek Harness prompt-injection assessment. It also tightens YAML rule validation, migrates MCP clients to SDK 2.0 and fixes parser, filename and JSON-serialisation failure modes.→Britive launches task-scoped runtime controls for AI-agent accessARC is designed to grant intent-bound access during a job and remove that access afterwards. Britive says its controls cover identity, requests, authorisation, privileges, actions and outcomes, but the release is a vendor product claim rather than independent evidence of deployment or effectiveness.→Rapid7 says AI is compressing the vulnerability-to-exploitation cycleRapid7 reported that high- and critical-severity vulnerability disclosures doubled year on year to 8,539 in Q2 2026, while newly exploited vulnerabilities rose 8% to 40. The analysis links the pressure to AI-assisted discovery and exploitation, as well as insecure code produced through vibe coding, and recommends prioritising exposure over severity scores alone.→