A diffuse landscape, fruitful targets, companies not stepping up, AI’s influence and flagging U.S. government efforts all figure into a shifting threat.
Cisco Systems, Inc. logo and lettering can be seen on the Cisco Systems GmbH headquarters building in Garching near Munich (Bavaria). Cisco is a US company from the telecommunications industry and is primarily known for its routers and switches. (Photo by Matthias Balk/picture alliance via Getty Images)
The threat group’s remarkable success targeting open-source software was inevitable and fueled by the industry’s decision to prioritize code shipping over security.
Kevin Mandia, Morgan Adamski, and Alex Stamos tell CyberScoop that AI is finding bugs faster than anyone can fix them, exploit development is accelerating, and most organizations…
(L-R) Sen. Mike Rounds, R-S.D., and Sen. Mark Warner, D-Va., accept the Bipartisan Leadership in AI Award onstage during the Second Annual AI Honors hosted by the Washington AI Network at Waldorf Astoria Washington D.C. on June 3, 2026. (Photo by Paul Morigi/Getty Images for Washington AI Network)
Researchers at Backslash Security pored through update logs for Claude Code, Anthropic’s flagship coding model, finding the company was patching dozens of newly discovered security vulnerabilities in the program between April and early June 2026. (Source: Getty Images)
The SBOM, commonly described as an inventory of software ingredients, emerged in the 2010s and has expanded beyond software to include hardware and AI. (Getty Images)
Anthropic announced the release of two new Mythos-class artificial intelligence models designed for cybersecurity and biomedical research, targeting both consumers and businesses. (Photo by Samuel Boivin/NurPhoto via Getty Images)
A screenshot of a website seized by the U.S. Departments of Justice and Homeland Security for publishing nonconsensual deepfake porn of real individuals, including celebrities and public figures. (Image Source: Department of Justice)