ServiceNow’s AI Passport aims to govern what enterprise AI agents can do, using signed credentials and runtime checks. With NVIDIA supporting enforcement, the test is whether permissions can be upheld and revoked across third-party systems as businesses move agents into production safely at scale.
Nine years late, Tesla’s Roadster flipped, hovered and leapt over its siblings at a SpaceX rocket test site. Shares jumped, then fell. Social feeds caught fire. What Musk really unveiled was one engineering stack wearing two corporate badges. Success is not guaranteed. Excitement, as ever, is.
Hot inflation, record AI credit stress and a seven-day chip slide showed that the boom’s limit is no longer demand but the price of money. Investors are rotating rather than fleeing, and the bill is landing far from Silicon Valley.
Cyber Update: AI acceleration compresses the vulnerability window
As artificial intelligence automates both attack and defence, the window to patch critical vulnerabilities is vanishing. Black Hat 2026 research confirms autonomous systems are discovering thousands of previously unreported flaws.
The integration of artificial intelligence into offensive cyber operations has fundamentally compressed the timeline for enterprise defence.
Research presented at the Black Hat 2026 conference in Las Vegas demonstrates that AI is accelerating familiar cyberattacks rather than inventing entirely new methodologies. An autonomous vulnerability research system recently analysed nearly four thousand open source projects in two months, confirming over fourteen thousand flaws, with the vast majority previously unreported.
This automation allows threat actors to move with unprecedented speed. Security researchers have observed state linked groups exploiting vulnerabilities within 24 hours of an effective proof of concept becoming available. Simultaneously, median patching times have increased, leaving exposed systems vulnerable for longer periods.
The operational reality is that defenders are losing the race against automated exploitation. As Michael Duffy, the acting US federal chief information security officer, noted, "Things will go down," stressing that organisations must prioritise continuity of services in a contested environment. The shift from prevention to resilience is no longer optional; it is a structural necessity for modern enterprise survival.
Why Does It Matter?
The speed gap between attackers and defenders is widening. When threat actors can use AI to automate reconnaissance and payload generation, the traditional 30 day patching cycle becomes a profound liability. Enterprise leaders must assume compromise and focus on resilience.
CNC has consistently tracked the weaponisation of AI in cyber operations. This is no longer a theoretical risk confined to research laboratories.
It is an active threat vector accelerating the exploitation of identity, cloud infrastructure, and software supply chains. Security teams must pivot from a purely preventative mindset to one that assumes rapid, automated intrusion and prioritises rapid containment and service continuity.
If your organisation relies on manual patch management and reactive incident response, you are already operating behind the adversary's decision cycle. The future of defence requires fighting automation with automation.
Get the stories that matter to you. Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
Sign up for Cyber News Centre
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead.
OpenAI’s Medicare breach has shifted Australia’s AI debate from investment to accountability. As Canberra examines legal options and calls grow for stronger sovereign capability, the question is global: who controls autonomous systems, and who answers when they cross national boundaries?
OpenAI's Astra can develop zero-day exploits, while a US$1 billion defence push seeks to give critical infrastructure teams the same machine-speed advantage.
US authorities have dismantled QTFY’s QScan and QTRouter platforms, exposing a China-linked service model that blended exploit trading, automated scanning and hijacked IoT devices to reach critical infrastructure while concealing where attacks began.
Australia’s cyber agency is warning that attackers are exploiting two N-able N-central authentication bypass flaws locally. For MSPs and enterprise IT teams, a trusted management console can become a route across hundreds of customer endpoints.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!