Capital One releases VulnHunter: an AI code security agent, open source
Capital One is launching VulnHunter, an agentic security tool, on July 17 - the bank is contributing to the sec + agents ecosystem.
3 h ago 4 5
pQCee raises $3.9 M: Singapore frames its post-quantique bet
The Singaporean startup pQCee raises $3.9 M in post-quantum cybersecurity. Small ticket, big signal: the PQC transition is no longer waiting for the quantum deadline.
11 h ago 10 12
India cybersecurity: ten systemic flaws identified by experts
An expert digest published by Medianama lists ten structural flaws in Indian cybersecurity. After Reliance/Kudankulam, the question shifts from incidents to roots.
11 h ago 7 7
Weather data sabotage: the climate attack surface enters the radar
MIT Technology Review documents the rise of the risk of sabotage of weather data. An invisible critical infrastructure whose AI models - climate, energy, agricultural - become the downstream.
11 h ago 6 6
GitLab 19.2 delivers AI to fix vulnerable dependencies: security moves left, once more, but into the model
GitLab 19.2 includes AI tools to patch vulnerable dependencies. Shift-left security is back - this time in the model, not in the linter.
16 h ago 9 9
Grok's CLI caught uploading local files to the cloud: the agent tool trust problem gets a concrete case
The Pragmatic Engineer documents that the Grok CLI uploads files from the development machine to the xAI cloud - beyond the prompted context. An agent CLI is not a local binary, it's a client-server that exfiltrates by default.
yesterday 8 8
AI bills faster than the cloud alerts: $14,000 in one day, $6,531 in 24 hours
Two recent incidents documented by InfoQ - an AWS key theft and an agent released without a ceiling - summarize the guardrail gap: the spending speed of an agent is that of a script, but the billing alert speed remains that of a human.
yesterday 7 9
CERT-In mandates human oversight for high-value AI-driven payments in India
India moves to make a human step mandatory in AI-driven payment flows. The biggest UPI market gets first-mover on regulating agentic commerce.
yesterday 11 8
Reliance and Kudankulam files surface on the dark web: India's critical-infra breach story enters its supply-chain phase
The 2019 Kudankulam intrusion went through a contractor. Seven years later, the entry point may still be the same.
yesterday 7 8
OpenAI a créé GPT-Red pour tester l'injection de prompts : le modèle de red-team devient une catégorie de produits
OpenAI has built GPT-Red, a purpose-built model to probe prompt injection vulnerabilities, per Tech in Asia. Two things happen when you name your red-team model: you signal a discipline, and you create a market.
yesterday 9 9
"Has software become more buggy everywhere?" - the Ask HN that haunts 2026
An Ask HN posted on July 15 goes viral. The question is not rhetorical: it's the first recognized symptom of an ailment that is consensus without daring to name it.
Jul 15, 2026 at 19:28 7 9
Three seconds of voice are enough: AI voice fraud has surpassed public defense
An article synthesizes the state of voice cloning attacks: zero cost for the attacker, impossible detection for a human, and vectors multiplied. Technical defenses exist - they are not deployed.
Jul 15, 2026 at 19:28 9 6