Security
Drupal Security Bought Six Weeks of Paid Engineers. What Did It Buy?
On July 24, 2026, a progress report on the Drupal AI Security Initiative appeared on the Drupal Association blog under the byline…
Security
Information security is the practice of protecting systems, data, and users from compromise and loss. Articles in this category cover threat models, social engineering, authentication, compliance considerations, and the operational habits that keep an organization defensible at scale.
Latest in Security
Security
Agentic Browser Security: A Boundary Became a Judgment Call
Agentic browser security comes down to one substitution, and most coverage misses it. The web has a single boundary everything else is…
Security
GPT-5.6-Cyber: OpenAI Moved the Safety Control Off the Model
GPT-5.6-Cyber is a frontier model with its safety refusals deliberately turned down, released by OpenAI on August 10, 2026 to an approved…
Security
WordPress 7.0.3: A Pre-Auth Login Flaw, and Who Actually Needs to Move
WordPress 7.0.3 landed on August 6, 2026 carrying a fix for something that sounds worse than almost anything WordPress has shipped a…
Security
AI Evaluation Containment: One Vendor, Three Labs, Four Failures
AI evaluation containment has now failed publicly at three frontier labs, and the same testing vendor is named in three of the…
Security
The Evaluation Sandbox Problem: Two Labs, Four Breached Companies
The evaluation sandbox used to test frontier AI models for cyber capability has now failed publicly at two different labs nine days…
Security
Security-Specialized AI Models: Three Launches in Ten Days
Security-specialized AI became a shipping product category in the last two weeks of July. Sakana AI released Fugu-Cyber on July 21. Google…
Security
The Open Secure AI Alliance: 52 Companies, and Four Conspicuous Absences
The Open Secure AI Alliance launched on July 27 with NVIDIA convening a coalition to build and share open tooling for securing…
Security
When Safety Guardrails Block the Defenders: The Detail Buried in Hugging Face’s Breach Disclosure
Buried in Hugging Face’s disclosure of the July 2026 breach of its infrastructure is a detail that most follow-up coverage has skipped,…
Security
wp2shell: The WordPress Core Flaw That Lets Anyone Run Code on Your Site
wp2shell is the name given to a pair of chained vulnerabilities in WordPress core that together let an unauthenticated attacker run code…