Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The EU AI Act: Compliance for Companies Serving the EU Market

Jul 28, 2026 By Salt Security In Salt Security
The EU AI Act is a global business issue. Just like GDPR before it, it reaches beyond EU borders. If your organization does business in the EU, you are in scope. Full enforcement begins August 2, 2026, with fines of up to 35 million euros or 7% of global turnover for non-compliance.
View Video

Cyberhaven: Data Security for the Agentic Enterprise

Jul 28, 2026 By Cyberhaven In Cyberhaven
AI changed work, Cyberhaven protects it. Cyberhaven exists to protect the way enterprises actually work today: with AI agents accessing, moving, and acting on data across every workflow. In this video, we share Cyberhaven's mission and our stance on data security for the agentic enterprise.Traditional data security, built for files at rest, wasn't built for AI agents acting at machine speed. Cyberhaven traces data through its full lifecycle and adapts protection as context changes, so security keeps pace with how work actually happens.
View Video
Snyk

The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Security

Jul 28, 2026 By Daniel Berman In Snyk
Every so often, an industry gets a moment that quietly redraws where the line is — not because anything was said, but because something was proven. AI security had one of those moments last week, and it's worth being direct about that before getting into the details: this wasn't an incremental data point. It was the moment a risk that security and safety researchers had described in theory for years showed up, fully formed, in a disclosed incident report.
Read Post
Snyk

What Is AI Pentesting and How Does It Works?

Jul 27, 2026 By Snyk Team In Snyk
AI pentesting (AI penetration testing) is the use of reasoning-capable AI models to autonomously find, exploit, and validate security vulnerabilities in running applications — especially the context-dependent flaws, such as broken authorization and business-logic abuse, that traditional scanners cannot detect.
Read Post
wallarm

Lessons from the OpenAI and Hugging Face Incident: When Safety Filters Disarm the Defender

Jul 27, 2026 By Wallarm In Wallarm
In July 2026, an OpenAI model escaped its evaluation sandbox and broke into Hugging Face's production infrastructure. It is the first documented end-to-end intrusion carried out by an autonomous AI agent. The most repeated takeaway, "the AI went rogue," is also the least useful one. The real lessons are about containment engineering, about who is allowed to use powerful models, and about why the coming wave of regulation could easily leave defenders weaker than attackers.
Read Post
jfrog

Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings

Jul 27, 2026 By Yoav Landman In JFrog
Just last week, OpenAI and Hugging Face jointly disclosed what may be the first incident of its kind: during an internal evaluation of frontier cyber capabilities, OpenAI’s models, running deliberately without production safeguards in an isolated research environment, autonomously discovered and employed chained vulnerabilities to escape its sandbox, reach the open internet, and extract evaluation answers from Hugging Face’s infrastructure.
Read Post

OpenAI's Models Go Rogue - The 443 Podcast - Episode 380

Jul 27, 2026 By WatchGuard Technologies In WatchGuard
This week on the podcast, we cover the crazy saga that unfolded between the popular open-source AI platform Hugging Face and the frontier AI lab OpenAI. After that, we discuss a recent WordPress remote code execution vulnerability WP2Shell and the research process that Searchlight Cyber followed to uncover it sing artificial intelligence. Finally, we end with a quick analysis of Palo Alto Global Protec's authentication bypass vulnerability CVE-2026-0257.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.