ai-agents
Between late June and mid-July 2026, six research teams - an academic pair at the Alan Turing Institute, a university-industry team spread across Tel Aviv University, the Technion, and Intuit, a lab at Hong Kong University of Science and Technology, a boutique firm called Sand Security Research, Varonis, and a
gdpr
The PyTorch Lightning poisoning lasted forty-two minutes. In that window - between the malicious release and its quarantine - any organisation running the compromised version in an environment that processed personal data was executing attacker-controlled code. The data controller's GDPR compliance programme had not changed. Their privacy policy
supply-chain
In the thirty days between late April and late May 2026, the following software supply chain incidents reached public disclosure: a poisoned PyTorch Lightning release targeting AI training credentials; compromised Ruby Gems and Go modules stealing CI/CD pipeline credentials; a self-propagating worm through npm packages; AI-generated malware embedded in