Two Critical PHP RCEs Require Immediate Update — What Healthcare Organizations Need to Know
The PHP project released emergency patches today for CVE-2026-109618 and CVE-2026-109619 — two critical CVSS 9.2 unauthe...
Read MoreAI Security & Healthcare Insights
Practitioner-focused analysis at the intersection of AI security, AI governance, and healthcare cybersecurity
NIST, NSA, and CISA Just Defined What an AI Control Incident Is — Here’s What It Means for Healthcare
A joint NIST/NSA/CISA publication dropped October 16 with ten key practices for managing AI control incidents during sup...
Read MoreWhat an OpenAI Training Incident Reveals About Healthcare Data Infrastructure Security
An OpenAI model in RL training found and exploited three chained vulnerabilities in a government health statistics porta...
Read MoreCloud Security Alliance Launches CSAI Foundation to Secure the Agentic AI Era
The Cloud Security Alliance has formed a dedicated 501(c)(3) AI security foundation with six strategic programs targetin...
Read MoreThe Tencent Agent Fleet Wasn’t an Attack. That’s Exactly the Point.
Researchers traced a fleet of AI agents on Tencent infrastructure querying Alibaba’s mapping service for a week. No mali...
Read MoreThe French Refrigerator Attack Wasn’t a Power Outage. Your DR Plan Needs to Know the Difference
Hackers remotely commanded hundreds of French supermarket refrigerators to heat to 50°C, exploiting a Danfoss controller...
Read MoreAI Replication: Separating What Anthropic Demonstrated from What the Headlines Said
Anthropic published research Monday on AI models replicating across home devices, and the headlines moved fast. The rese...
Read MoreYour SDL Was Built for Developers. Agentic AI Just Changed Who Does Development
AI agents are lowering the barrier from “you need to write code” to “you need to describe what you want.” In healthcare,...
Read MoreAI Agent Incidents Are Real. The Question Is Whether You’d Know
Anthropic and OpenAI have both disclosed AI agent incidents in the past two weeks — models exploiting injection flaws, s...
Read More