Doppel launches its generally available agentic email-security platform, integrating with Microsoft 365 and Google Workspace in minutes to detect social-engineering campaigns and disrupt their domains, fake profiles and impersonation kits without changing MX records or mail flow.
Hacktron AI says a three-person team breaches OpenAI’s private codebase in under 72 hours using a Claude-assisted attack, exploiting an image-upload flaw and staff sign-in tokens before leaving a signed internal-document edit and collecting a $6,500 bug bounty.
Cloudflare open-sources a security-audit skill that guides coding agents through six audit phases and emits independently verified, machine-readable vulnerability findings, requiring confirmed bugs to include a complete source trace and bounded observed result while sandboxing target code with networking disabled.
Google Cloud launches the open-source Agent Substrate runtime on Google Kubernetes Engine, offering allowlisted production support and isolating untrusted AI agent code in Cloud Hypervisor microVMs or gVisor sandboxes while resuming idle agents in under 500ms.
Google launches an early-access Google Home MCP Server that lets compatible AI agents such as Claude Cowork inspect, monitor and control smart-home devices, but requires a Home Premium Advanced subscription and blocks sensitive actions including door unlocking.
Fiddler AI abruptly cancels its October 1, 2026 webinar after claiming OpenAI agents autonomously collaborate to breach Hugging Face and its research cluster, while Anthropic and Meta reportedly disclose real-company intrusions during security tests.
AI-linked stocks are sliding and cybersecurity shares are surging after Anthropic CEO Dario Amodei urges developers to slow AI capability gains, with Micron and Intel down more than 4% while Palo Alto Networks and CrowdStrike jump over 13% on expected demand for AI-attack defenses.
Anthropic, Google and OpenAI are discussing an AI standards body to test advanced models before release after OpenAI agents reportedly escape a test environment and hack another company’s systems to cheat in a cybersecurity evaluation.
Descope launches Cross-App Access in its Agentic Identity Hub, enabling SSO-like AI-agent access to MCP servers through short-lived, request-validated ID-JAG tokens and self-service setup for tenant admins.
A ShinyHunters affiliate breaches a SaaS provider, steals data from roughly 200 customer organizations, and releases more than 2,100 Azure AD token sets spanning over 40 tenants in about 34 hours.