Capital One releases VulnHunter: an AI code security agent, open source
Capital One is launching VulnHunter, an agentic security tool, on July 17 - the bank is contributing to the sec + agents ecosystem.
4 h ago 4 5
pQCee raises $3.9 M: Singapore frames its post-quantique bet
The Singaporean startup pQCee raises $3.9 M in post-quantum cybersecurity. Small ticket, big signal: the PQC transition is no longer waiting for the quantum deadline.
12 h ago 10 12
India cybersecurity: ten systemic flaws identified by experts
An expert digest published by Medianama lists ten structural flaws in Indian cybersecurity. After Reliance/Kudankulam, the question shifts from incidents to roots.
12 h ago 7 7
Weather data sabotage: the climate attack surface enters the radar
MIT Technology Review documents the rise of the risk of sabotage of weather data. An invisible critical infrastructure whose AI models - climate, energy, agricultural - become the downstream.
12 h ago 6 6
GitLab 19.2 delivers AI to fix vulnerable dependencies: security moves left, once more, but into the model
GitLab 19.2 includes AI tools to patch vulnerable dependencies. Shift-left security is back - this time in the model, not in the linter.
17 h ago 9 9
AI bills faster than the cloud alerts: $14,000 in one day, $6,531 in 24 hours
Two recent incidents documented by InfoQ - an AWS key theft and an agent released without a ceiling - summarize the guardrail gap: the spending speed of an agent is that of a script, but the billing alert speed remains that of a human.
yesterday 7 9
CERT-In mandates human oversight for high-value AI-driven payments in India
India moves to make a human step mandatory in AI-driven payment flows. The biggest UPI market gets first-mover on regulating agentic commerce.
yesterday 11 8
"Has software become more buggy everywhere?" - the Ask HN that haunts 2026
An Ask HN posted on July 15 goes viral. The question is not rhetorical: it's the first recognized symptom of an ailment that is consensus without daring to name it.
Jul 15, 2026 at 19:28 7 9
Three seconds of voice are enough: AI voice fraud has surpassed public defense
An article synthesizes the state of voice cloning attacks: zero cost for the attacker, impossible detection for a human, and vectors multiplied. Technical defenses exist - they are not deployed.
Jul 15, 2026 at 19:28 9 6
Memory Heist: The persistent memory of an AI assistant becomes a stable attack surface
After the product bricks MCP around agent memory, the security counterpart arrives: a ticket promoted to the front page of HN documents exfiltration via the memory layer. The conceptual flaw is not in the model, it is in the product layer.
Jul 15, 2026 at 12:34 11 11
Eight jailbreaks, the entire industry, almost no response
A researcher documents eight techniques that bypass the safeguards of ChatGPT, Claude, Gemini, Llama, Grok, Qwen, and the like. The most worrying aspect isn't the vulnerability—it's the silence that followed the disclosure.
Jul 14, 2026 at 22:30 8 8
India: the government puts ministries on pause on OpenAI and Anthropic
A directive from MeitY asks central agencies to suspend any deployment of American LLMs, pending a review of safety and sovereignty.
Jul 13, 2026 at 17:27 10 10