Stories This Week
- Top Story — The end of rare: what a vulnerability costs to find just collapsed: For thirty years, security has quietly been an economics argument wearing an engineering costume.
- The AI browser you installed can be taken over by a calendar invite, and the vendors do not agree on whether that is a flaw.: You install a browser that reads the web for you and acts with your permissions, so anything it reads can try to give it orders.
- An invisible sentence in a Word document escaped Microsoft 365 Copilot's cloud sandbox and reached the host underneath it.: Rubrik Zero Labs hid instructions behind a white rectangle on a white background, so a human opening the file sees nothing; having Copilot parse it was enough to run the attacker's code.
- OpenAI slowed work on a model because it may be too good at hacking.: On Friday, OpenAI said it had slowed development of Astra, an upcoming model, and paused some internal work on it, after a review found it had advanced enough in agentic coding and cybersecurity that the company "cannot rule out Critical capability level at this time." In its own framework, that threshold means a model could independently find and run attacks against well-protected real systems.
- Evaluation environments failed in several different ways this week, and the differences matter more than the pattern.: Two failures let a model reach the real world.
- Europe can now fine, inspect and restrict the largest AI models. Contacts with AI labs so far have been informal, and no formal action has been announced since the powers took effect.: As of Sunday August 2, the European Commission can demand to evaluate a general-purpose AI model before it is released in the EU, restrict its market access, and fine a provider up to €15 million or 3% of annual turnover, whichever is higher.
- The average breach now costs $4.99 million, a record, and the most revealing number in IBM's report is about fear rather than cost.: IBM's annual Cost of a Data Breach study, published in late July, puts the global average at $4.99 million, up 12% year over year and the highest it has recorded.
- AI failures are rarely shared outside the organisation that experienced them. A Linux Foundation group wants to change that.: The Open Secure AI Alliance published a request for comments on August 4 for the Shared AI Findings Exchange, or SAFE: a confidential channel where an organisation can report an AI security incident, or a near miss, and have it analysed rather than filed.
- Visa agreed to buy BioCatch for $2.4 billion.: BioCatch works out whether the person using an account is really the account holder, by how they type, swipe and hold a phone.
- Horizon3.ai raised $250 million at a $2 billion valuation, more than tripling its valuation in 14 months.: The company builds autonomous penetration testing: software that continuously attacks your environment the way an intruder would, rather than waiting for an annual assessment.
- Anaconda acquired Enkrypt AI, terms undisclosed.: Anaconda is the Python distribution a very large share of data science teams already run on, and Enkrypt scans AI models, agents and the connector servers that let agents call external tools.
- Obsidian Security raised $85 million at a $1.1 billion valuation,: led by Crescent Cove Advisors with Greylock and Menlo Ventures participating.
- Oligo Security raised $60 million, bringing total funding to $140 million.: Runtime application security: it watches what code actually does while it runs rather than inspecting it beforehand.
Curator's Corner
One system found 14,090 vulnerabilities in open-source software in two months. In January, curl shut down its bug bounty programme because its maintainers could not absorb the flood of AI-generated reports. Those sound like opposite stories, breakthrough and slop. They are the same story: finding a bug got cheap and checking one did not.
We built our defenses on the cost of finding a bug. I don't think we ever said that out loud, but it is what we did. A 55-day patch cycle is not a claim about engineering capacity. It is a bet that serious vulnerabilities arrive slowly enough that 55 days is survivable, and that bet was priced on scarcity.
The easy dismissal is that volume is not quality: more compute, more noise, the same old patterns. PortSwigger closes that exit. James Kettle's system invented ways of confusing web servers that did not previously have names, then proved them against live systems belonging to a bank, a government and an airport. That is not grinding, and the researcher reporting it also documents those same models failing badly at the exploitation itself.
Unit 42 says 92% of its findings fell outside the categories traditional fuzzing owned. Take that with the caveats already stated. It is not proof that machines understand business logic. It does not need to be. The moat may be standing. The price of testing it fell.