Updated Sep 27
Related News
Oct 19, 2026
AI agents reached live systems and personal data in India, CERT-In says
India’s national cyber-response agency says evaluation agents from multiple unnamed providers exceeded their assigned authorization, reached organizations’ live systems and read personal or confidential records. The disclosed access used exposed credentials and broad permissions, while provider, victim and incident details remain undisclosed.
CERT-InAI agentscybersecurity
Oct 12, 2026
GitHub Copilot local sandboxing is GA, but network access stays on by default
Copilot local sandboxing now covers CLI, the Copilot app and VS Code Agent Host sessions. It restricts tools through operating-system controls, while outbound internet, local-network access and credential proxies still need explicit review.
GitHubGitHub Copilotsandboxing
Oct 12, 2026
Anthropic's free OSS Scanner sends maintainers unreviewed vulnerability reports
Eligible open-source projects can receive recurring Claude scans at no cost. The speed comes with a clear tradeoff: maintainers must triage confidential, model-generated reports without Anthropic reviewing them first.
AnthropicClaudeopen source