Arizona's Court of Appeals vacated Gabriel Horcasitas's 10.5-year sentence because the judge weighed an AI-generated video of his victim. The manslaughter conviction stands, so the new risk falls on whoever builds or plays synthetic media at sentencing.
Perspective Coverage
3 publishers
- Builder
- Builder 20%
- Operator
- Operator 58%
- Investor
- Investor 22%
Reality
- Evidence70
- Adoption
- Insufficient
- Hype gap+35
- Incentives40
- Confidence65
Meta confirmed it is letting go of the Virtue AI safety team it hired in June, ending the arrangement after four months. The exit leaves Meta's frontier-risk work without the specialists it bought for that job, at a time of new calls in Washington to regulate AI.
Publishers:cryptobriefing.com · semafor.com · stocktwits.com Perspective Coverage
3 publishers
- Builder
- Builder 23%
- Operator
- Operator 39%
- Investor
- Investor 38%
Reality
- Evidence62
- Adoption
- Insufficient
- Hype gap+15
- Incentives60
- Confidence60
Git 3.0 will give new repositories 64-character SHA-256 object IDs in place of 40-character SHA-1, while existing repositories keep their format. Scott Chacon disputes the security payoff, and his own breakage list shows which scripts need changes.
Reality
- Evidence42
- Adoption8
- Hype gap+30
- Incentives
- Insufficient
- Confidence38
Murray Barrett's group at Singapore's Centre for Quantum Technologies spent more than a decade on an element no other timekeeping lab uses, and now reports one part in 10^19 for a single lutetium ion clock. A redefinition of the second is expected in or after 2030.
Perspective Coverage
3 publishers
- Builder
- Builder 56%
- Operator
- Operator 27%
- Investor
- Investor 17%
Reality
- Evidence65
- Adoption5
- Hype gap+25
- Incentives
- Insufficient
- Confidence60
Hybrid ML-KEM is live on google.com and googleapis.com, and Cloud KMS post-quantum algorithms are generally available. The rest of the roadmap is a dated dependency schedule.
Reality
- Evidence60
- Adoption40
- Hype gap+10
- Incentives55
- Confidence65
A Federal Register RFI calls periodic scanning, static prioritization and manual remediation increasingly inadequate. Comments on redesigning the feed close October 13.
Perspective Coverage
3 publishers
- Builder
- Builder 35%
- Operator
- Operator 55%
- Investor
- Investor 10%
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap+10
- Incentives
- Insufficient
- Confidence70
The Responsible Fintech Institute has put NIST-standardized signing in front of supervisors from Abu Dhabi, Bhutan and Malta. The code that would let anyone check the work comes later.
Reality
- Evidence45
- Adoption12
- Hype gap+30
- Incentives55
- Confidence62
The G7 Cyber Security Working Group's June call to action says the quantum threat is off the radar and under-resourced at most organizations, and it hands CISOs the wording to fund a cryptographic inventory this cycle.
Perspective Coverage
5 publishers
- Builder
- Builder 22%
- Operator
- Operator 55%
- Investor
- Investor 23%
Reality
- Evidence72
- Adoption30
- Hype gap+10
- Incentives60
- Confidence68
Dev.to author dharani2d argues agent security depends on who picks the next tool call, citing Excessive Agency's rise from sixth to third at OWASP. The proposed control plane keeps identity, authorization, argument checks and approvals in deterministic code outside the model.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+10
- Incentives
- Insufficient
- Confidence40
AWS and Microsoft are already shipping ML-KEM hybrid groups, so the question for platform teams is whether the old proxy, SDK and appliance in the path still complete a handshake that got bigger.
Reality
- Evidence40
- Adoption55
- Hype gap+10
- Incentives20
- Confidence45
NIST and CISA have finalized IR 8587, guidance that spells out how signing keys, token verification and revocation are supposed to be handled in cloud identity systems.
Perspective Coverage
4 publishers
- Builder
- Builder 40%
- Operator
- Operator 55%
- Investor
- Investor 5%
Reality
- Evidence80
- Adoption
- Insufficient
- Hype gap+5
- Incentives30
- Confidence75
CVE-2026-86218 lets an unauthenticated attacker run code on an N-central server with no user interaction. N-able fixed it in build 2026.3.1.14 and has already patched its own hosted instances.
Publishers:horizon3.ai · n-able.com Reality
- Evidence68
- Adoption
- Insufficient
- Hype gap+5
- Incentives70
- Confidence70
Rice-led physicists simulated autferroic switches flipping over 400,000 times a second, up from under 100, to generate true random bits. The gain exists only in modeling, against slow magnetic switches, so the case for security chips waits on a material someone can make.
Reality
- Evidence40
- Adoption2
- Hype gap+40
- Incentives
- Insufficient
- Confidence55
Between March and April 2025 intruders searched an industrial automation firm for "customers" and "SCADA", then bundled about 800 files. FBI and CISA now want least privilege applied to integrator access.
Reality
- Evidence68
- Adoption
- Insufficient
- Hype gap+12
- Incentives38
- Confidence66
More than 270 companies signed the Open Weights and American AI Leadership letter. Anthropic stayed out, and both sides of the case rest on the same property of published weights: once released, they are permanent.
Reality
- Evidence34
- Adoption22
- Hype gap+24
- Incentives72
- Confidence42
A McCrary Institute op-ed carries the disclosure, and it makes Google the fourth frontier lab to describe a model acting outside its intended authority. The authors want independent evaluators embedded at the labs.
Reality
- Evidence28
- Adoption15
- Hype gap+35
- Incentives65
- Confidence42
A Forbes Tech Council column argues that an institution's control over what its agents may do decides sovereignty, and the European rules it cites were written for cloud vendors.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+22
- Incentives45
- Confidence50
The co-leads of July's Geneva dialogue want models tested independently before release and incidents reported after it. Their list of things due by May is an evidence assessment, an agenda item and one cross-border sandbox pilot.
Reality
- Evidence44
- Adoption
- Insufficient
- Hype gap+22
- Incentives68
- Confidence52
Stephan Schlamminger's team spent ten years measuring big G with part of the data scrambled so that nobody could tune the answer to an expectation. The unblinded value differs unexpectedly from another leading result.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+25
- Incentives55
- Confidence45
Onapsis found CVE-2026-44756 in SAP's Extended Passport code, Pathlock and nullFaktor reproduced remote code execution in a lab, and technical write-ups went public within 48 hours of the patch. Mandiant's AI report is the week's other substance.
Reality
- Evidence58
- Adoption45
- Hype gap+10
- Incentives68
- Confidence50
Earlier coverage
- A spreadsheet on Hugging Face tested whether its processor could reach Azure metadata
Product · September 18, 2026 · 1 publisher
- NIST and CISA finalise token-protection guidance citing a single stolen signing key
Science · September 18, 2026 · 1 publisher
- Mixing unattended capture with a live video session triggers IAL1's documentation SHALL
Build · September 18, 2026 · 1 publisher
- LGT put hybrid post-quantum key exchange in front of live online banking customers
Product · September 17, 2026 · 1 publisher
- The case for continuous control testing: CISOs can't prove controls work right now
Security · September 16, 2026 · 1 publisher
- A retired inventor charred homemade scrolls to find which Herculaneum rolls X-rays can read
Science · September 16, 2026 · 3 publishers
- One extension commanded the AI in five Chromium browsers by seizing the page each one trusts
Security · September 16, 2026 · 1 publisher
- NCCoE's notional DevSecOps model gates every promotion between its seven phases
Build · September 16, 2026 · 1 publisher
- NIST is revising its AI risk management framework
Leadership · September 15, 2026 · 1 publisher
- Fortaegis seats its contract manufacturer and Tokyo Electron's venture arm inside a $50M round
Build · September 14, 2026 · 1 publisher
- Google's own post-quantum deadline runs two years ahead of the NSA's target
Product · September 13, 2026 · 1 publisher
- One add_header in an nginx location block discards the other four set above it
Build · September 12, 2026 · 1 publisher
- NIST cuts X-ray energy uncertainty up to eightfold for uranium, plutonium and neptunium
Product · September 11, 2026 · 1 publisher
- NIST sets 2030 and 2035 retirement dates for quantum-vulnerable algorithms, raising stakes for banks
Leadership · September 11, 2026 · 1 publisher
- FINMA gives Swiss banks about a year to put a post-quantum plan before the board
Invest · September 11, 2026 · 1 publisher
- NIST retires SP 800-63-3 in a four-volume rewrite of its digital identity requirements
Build · September 11, 2026 · 1 publisher
- Three U.S. agencies name six China-based AI companies as distilling frontier models
Science · September 10, 2026 · 1 publisher
- NIST's cryogenic sensors resolve the X-ray lines that blur plutonium and uranium assay
Science · September 10, 2026 · 1 publisher
- Orchid ships drift detection and a kill switch for agents that inherit unmanaged identity
Security · September 10, 2026 · 2 publishers
- NIST's revised SP 800-63A defines six expected outcomes of identity proofing
Build · September 10, 2026 · 1 publisher
- NIST traces the agent accountability gap to users handing over their own credentials
Science · September 10, 2026 · 1 publisher
- Cushman & Wakefield's CIO and CISO put board access ahead of the reporting line
Security · September 10, 2026 · 1 publisher
- A 2,420-byte DNSSEC signature overruns the UDP buffer DNS software commonly advertises
Build · September 10, 2026 · 1 publisher
- Google and Ethereum set 2029 dates one year ahead of NIST's ECDSA deprecation
Invest · September 9, 2026 · 1 publisher
- Two absorbed titles offer a historical warning for the new chief AI officer role
Leadership · September 5, 2026 · 1 publisher
- The post-quantum signature NIST finalised runs 72 times the bytes of today's ECDSA
Invest · September 4, 2026 · 2 publishers
- Prompt injection recruits a fully credentialed agent
Security · September 3, 2026 · 1 publisher
- Delta-v leads a $100m round into runtime security for the coding agents enterprises already ship
Invest · September 2, 2026 · 2 publishers
- NIST puts two different error bars on the same AI benchmark score
Science · August 31, 2026 · 1 publisher
- ICIT's Eftekhari tells CISOs to plan for a working CISA and a state-by-state AI patchwork
Security · August 28, 2026 · 1 publisher
- ClawHavoc's 12 accounts outshipped the malicious-skill census by 7.5 times
Invest · August 28, 2026 · 1 publisher
- NVD stops scheduling enrichment for roughly 30,000 pre-March-2026 CVEs
Security · August 28, 2026 · 1 publisher
- Dropping Item 407(j) left boards learning cyber risk from the people they supervise
Leadership · August 28, 2026 · 1 publisher
- Self-hosted ServiceNow operators inherit three unauthenticated CVSS 10.0 flaws to patch themselves
Security · August 28, 2026 · 2 publishers
- JDK 24 relocates the post-quantum blocker to your key custody plumbing
Build · August 28, 2026 · 1 publisher
- The self-driving lab's binding constraint is a century of footnotes, not the model
Science · August 27, 2026 · 1 publisher
- Bitcoin's first post-quantum signature BIP arrives with its tradeoffs already conceded
Invest · August 26, 2026 · 1 publisher
- Ethereum's quantum plan gets a one-way switch: draft EIP would retire BLS for good
Invest · August 25, 2026 · 1 publisher
- The single-photon bottleneck is not efficiency any more, it is wire width
Science · August 24, 2026 · 1 publisher
- NIST's multi-cloud tally: one resilience win against 23 new problems
Security · August 24, 2026 · 1 publisher