AI code generation tools like Codex and Claude Code are empowering non-engineers to build production software at scale, blindsiding security teams as AI-generated code bypasses traditional governance frameworks and vulnerability scanners, forcing organizations to urgently overhaul security controls before the unchecked proliferation of shadow code creates catastrophic risk exposure.
At MWC's 4YFN showcase, AI startups are proving real-world impact beyond frontier models, with Ultralytics hitting 2.5 billion inferences, Biorce raising $52 million for clinical trials, and NeuralTrust securing EU backing to protect enterprise AI systems from cyber threats.
Iranian cyberattacks targeting U.S. banks and critical infrastructure are surging following Middle East military strikes, as CISA operates severely weakened after losing a third of its staff amid leadership chaos and a partial government shutdown, leaving America dangerously vulnerable at a critical moment.
Anthropic launches a powerful Claude Chrome extension featuring full browser automation with 21 tools, dual operating modes for speed and capability, and a robust multi-layered security system that classifies domains and enforces permission controls to prevent cross-domain attacks.
Over 12 million IP addresses worldwide are actively exposing sensitive credentials including API keys and database passwords through publicly accessible .env files, with the U.S. leading at 2.8 million exposed IPs, as security experts urgently call on organizations to rotate leaked credentials and implement stronger deployment safeguards immediately.
Samsung Galaxy S26 is getting powerful Google AI upgrades, including a background-running Gemini assistant that handles multi-step tasks, enhanced Circle to Search with full outfit recognition, and on-device scam detection that alerts users to suspicious calls in real time while keeping all audio processing private.
AI coding agents face serious security vulnerabilities as experts warn that without isolated execution environments, prompt injection attacks can manipulate agents into running malicious code that steals credentials, deletes data, or compromises connected services.
MachineAuth launches as an open-source OAuth 2.0 system built in Go, enabling AI agents to authenticate via Client Credentials flow and RS256-signed JWTs with zero database requirements, deployable instantly via Docker or a single command, and already proven in real-world testing with an AI agent called OpenCLAW.
Anthropic exposes three Chinese AI labs — DeepSeek, Moonshot, and MiniMax — running an industrial-scale operation using 24,000 fraudulent accounts to conduct over 16 million illicit exchanges, stealing Claude's capabilities while bypassing critical safety safeguards designed to prevent misuse for bioweapons and cyberattacks.
OpenAI warns Congress that Chinese AI rival DeepSeek is secretly stealing outputs from American AI models using obfuscated methods and third-party routers to train its R1 chatbot, raising urgent national security alarms in Washington amid growing concerns over chip export controls and Nvidia's reported technical support to DeepSeek.