Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why the Hugging Face Incident Is Cybersecurity's COVID Moment

Sep 15, 2026 By GitGuardian In GitGuardian
An AI agent gained user admin rights on Hugging Face, and the agents organized on message boards, rebuilt them after takedowns, and escalated privileges on their own. Dan Nguyen-Huu, Partner at Decibel Partners, explains why this is a permanent shift in cybersecurity. "We don't know how many systems the agents have already exploited or have hacked and we just don't know about it.".
View Video

Decibel Partners' Dan Nguyen-Huu on AI agents gaining user admin rights

Sep 15, 2026 By GitGuardian In GitGuardian
When AI agents during OpenAI's model training autonomously gained user admin rights on Hugging Face, organized on message boards, and escalated privileges, it signaled a permanent shift in cybersecurity. Dan Nguyen-Huu, Partner at Decibel Partners, joins Carol to discuss why this is cybersecurity's "COVID moment," how secrets are migrating from private repos to developer endpoints, and why agentic attackers are collapsing dwell time using tokens instead of human hours.
View Video
nucleus

How AI Changes Exposure Management: From Static Findings to Continuous Risk Decisions

Sep 15, 2026 By Rob Gibson In Nucleus
Every security team knows the feeling. The quarterly vulnerability scan completes. The report lands, with thousands of findings, color-coded by CVSS severity, neatly timestamped. And the moment it’s printed, it’s already out of date. That is the fundamental flaw at the heart of traditional exposure management: it is built around a point in time.
Read Post
Arctic Wolf

We Need to Pace AI Development. We Can't Pace AI Defense

Sep 15, 2026 By Dan Schiappa In Arctic Wolf
Anthropic CEO Dario Amodei published an essay this month called “We Must Pace the Frontier.” His argument is straightforward, calling out the reality that AI capabilities are advancing faster than the industry’s ability to align and safeguard them, and frontier labs need to slow the rate of capability growth long enough for safety work, alignment, and interpretability to catch up. He points to two developments behind his concern.
Read Post
Red Teaming Agentic AI: Why Testing the Model Is No Longer Enough

Red Teaming Agentic AI: Why Testing the Model Is No Longer Enough

Sep 15, 2026 By SecuritySenses In SecuritySenses
In January 2025, NIST's Center for AI Standards and Innovation published red team results that should have changed how enterprises test autonomous systems. Against an AI agent operating in simulated workspace, travel, Slack and banking environments, the strongest previously known hijacking attack succeeded 11% of the time. The strongest new attack developed by the red team succeeded 81% of the time. The model had not changed. The evaluation had.
Read Post
Ranked: The 10 Best AI SEO Agencies for 2026

Ranked: The 10 Best AI SEO Agencies for 2026

Sep 15, 2026 By SecuritySenses In SecuritySenses
SEO is having a bit of a moment. Getting onto page one of Google still matters, of course, but that is no longer the whole picture. Brands now also need to think about whether they are being mentioned in AI-generated answers, summaries, recommendations, and conversational search results. That is where AI SEO comes in. The strongest agencies in 2026 are not throwing traditional SEO out the window. They are combining the fundamentals that still work with newer strategies built around AI search visibility, authority, brand mentions, and genuinely useful content.
Read Post
sophos

Devil's advocate? Uncensored Luciferus AI service advertised underground

Sep 14, 2026 By Sophos Counter Threat Unit Research Team In Sophos
On August 24, 2026, Counter Threat Unit (CTU) researchers observed an Exploit underground forum persona named “Optimus_Prime” advertising an uncensored AI subscription service named Luciferus. The persona joined Exploit on April 18, and their profile displays a “coding / coder” activity label. As of September 4, the persona has published 21 posts on the forum.
Read Post

Does an agent have more access than you do?

Sep 14, 2026 By Teleport In Teleport
70% of organizations give AI more access than a human in the same role would get. Not surprising when it is common for a team to click “always” when an agent asks to be allowed once or always allowed. That means the agent holds that access in perpetuity and turns into agent over-provisioning. Makes you wonder: Does an agent have more access to your organization's stack than it should and more access than the people who deploy them?
View Video
Zenity

Introducing Guardian Agents: Meet Blue Agent, Your AI Security Analyst

Sep 14, 2026 By Tomer Teller In Zenity
AI agents are moving into production faster than security teams can govern them. And unlike traditional applications, agents continuously make decisions, invoke tools, access data, and take actions. Every one of those interactions creates security context that needs to be understood. At enterprise scale, asking analysts to manually evaluate every finding becomes impossible.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.