Security

ENISA has published a technical advisory on software bills of materials, with a lifecycle architecture, a threat model and security measures aimed at SMEs.

Teradata has added anonymisation, format-preserving encryption, post-quantum protection and immutable backups to protect the sensitive data behind AI.

IANS and Artico Search find 65% of $10bn+ firms have a head of AI security, but only 21% have a board committee on AI ethics fully in place.

Palo Alto Networks says CVE-2026-0322, an authenticated root code execution flaw in the PAN-OS management interface, has seen very limited exploitation.

NIST, the NSA and CISA have set out ten voluntary practices for preparing for, containing and reporting control incidents involving advanced AI agents.

Anthropic has given six METR staff employee-like access to assess its models and safety practices, with METR free to publish and Anthropic unable to veto.

The UK and Canada have renewed their AI security partnership, prioritising interoperable standards, Five Eyes information sharing and coordinated evaluations.

IonQ has agreed to buy Zero Trust security company Elisity in an all-stock deal valued at up to $1.3bn, pairing it with IonQ's post-quantum cryptography.

MPs on the business and trade committee have questioned AI labs, former researchers and the AI Security Institute on who can stop a frontier model release.

The UK AI minister says the Cyber Security and Resilience Bill could be strengthened to cover reporting of serious AI incidents and loss-of-control risks.

U.S. Bank has launched Protect 360, a credit, identity and privacy monitoring service with a free tier and a $9.99-a-month tier that removes exposed data.

Anthropic has split its Cyber Verification Program into Defense, Red Team and Specialized tiers that loosen cyber safeguards for vetted security teams.

Microsoft says Patch Tuesday volumes hit a record near 1,000 in September 2026 as AI scanning grows, and urges CISOs to patch critical systems within 24 hours.

Microsoft's 2026 Digital Defense Report names identity as the primary control plane for defence and says 63% of intrusions involved data theft.

The Bank of England's FPC says fast-growing AI debt issuance widens market exposure to AI and frontier AI incidents sharpen cyber and operational risks.