A month after the Hugging Face breach, new details reveal AI agents coordinated, rebuilt deleted infrastructure and escalated access in hours. The fallout is now reaching Congress, regulators and frontier labs, raising urgent questions about AI security and control.
A Zhuhai operator used DeepSeek, a Hermes agent and a godmode jailbreak to hunt 460-plus targets. Open-weight models made the offensive kit a shopping list.
A Zhuhai operator used DeepSeek, a Hermes agent and a bundled godmode jailbreak to hunt more than 460 targets, then stole data from three organisations. Open-weight models this week made that offensive kit a public shopping list for any lone operator who can still point one at his scanner tonight.
Apple is accelerating its security updates to outpace AI driven exploit development, releasing early patches for iOS and macOS, while a critical WinRAR vulnerability shows why legacy software remains a prime target for attackers.
Apple has released early security updates for iOS, macOS and Safari, addressing over thirty vulnerabilities. This includes four WebKit flaws discovered using artificial intelligence tools. The updates fix memory corruption issues that could cause unexpected crashes or code execution.
Apple told Reuters it is adapting to the reality that artificial intelligence can speed the development of malicious hacking tools. By reducing the time between public disclosure and patch deployment, Apple aims to shrink the window for weaponisation. The Canadian Centre for Cyber Security has issued an advisory urging immediate application of the updates.
Meanwhile, a high severity vulnerability in WinRAR shows that legacy software remains attractive to threat actors. CVE-2026-14191 causes a heap overflow in the RAR5 recovery volume parser. While no active exploitation is confirmed, WinRAR is installed on hundreds of millions of computers globally. The issue is patched in version 7.23.
These vulnerabilities align with broader industry trends. The Open Web Application Security Project has just added Software Supply Chain Failures to its 2026 Top 10 list, reflecting the systemic risk of outdated components.
For Australian organisations, the contrast between Apple and WinRAR highlights a dual challenge. Vendors are using AI to find flaws and accelerate patching before attackers can build exploits. However, attackers continue to target ubiquitous desktop utilities where patch cycles are slow.
Boards must ensure their security teams are auditing the legacy tools their staff use daily. As AI compresses the time between discovery and exploitation, relying on delayed patching for any software is a business risk operations can't afford.
Get the stories that matter to you.
Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
AMD's proposed Taalas acquisition targets the fast-growing AI inference market, adding specialised silicon technology designed around model-specific workloads to its Instinct, EPYC, Helios and ROCm platform.
A record close on Wall Street and the AI names that were meant to lead it taken apart in the same session. Beijing is now drafting export controls on its own models. The labs keep finding their systems outside the box. Read one at a time, it is a normal week. Read together, something else entirely.
NVIDIA is asking Wall Street to underwrite AI compute as productive infrastructure. Its new financing platforms aim to mobilise more than US$500 billion, but the announced memoranda are not yet completed funding commitments.
As artificial intelligence automates both attack and defence, the window to patch critical vulnerabilities is vanishing. Black Hat 2026 research confirms autonomous systems are discovering thousands of previously unreported flaws.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!
