As confidential AI systems bring together more components, suppliers and stakeholders, attestation is becoming an ecosystem-wide challenge. Open standards and open-source collaboration can help make trust scalable. The post Scaling trust in confidential AI requires a common langu…
Anaconda rotated credentials, reviewed connected systems, and ended its use of Canny.io after a vendor incident. Early findings show no sensitive data at risk. The post What We Know About a Recent Third-Party Security Incident appeared first on Anaconda.
Enkrypt AI is named a Specialist in the first Gartner Emerging Market Quadrant for AI Application Security. The post Enkrypt AI Named a Specialist in the First Gartner® Emerging Market Quadrant for AI Application Security — Startup Vendors, September 2026 appeared first on Anacon…
CVE-2026-105445: Docker Hub account conversion could re-assign personal access tokens to a new owner. Read what happened, who was affected, and the fix.
Discover why traditional security tools leave gaps in enterprise AI use and how AI Usage Control (AIUC) provides crucial identity, data, and prompt-level risk governance.
Security
Google Cloud release notes7:00 AM UTCdocs.cloud.google.com
Agent Platform Workbench Change 20261011.00_p0 Release Change Installed latest packages from upstream dependencies. Fixed Fixed an issue where gcloud and gsutil failed to load with an AttributeError in OpenSSL.crypto due to a version mismatch between pyOpenSSL and cryptography. C…
Here's what the Infrastructure Team delivered in Q3 2026 and what we're focusing on in Q4. You can find the previous blog post of this series here. Q3 2026 Accomplishments Audit logs in Datadog Cloud SIEM We enabled audit logs for the following services and sent them to Datadog,…
This release adds OIDC authentication to pnpm dist-tag and the tool: protocol. pnpm publish now checks which registry an NPM_ID_TOKEN was issued for before using it.
Most dangerous docs aren't attacks. They're honest pages telling your agent to fetch something unpinned and run it. We measured how often six search tools pass them on.
We are no longer accepting new security reports for the Django project through HackerOne. Existing reports submitted through HackerOne will remain open and continue to be handled by the Django Security Team. If you discover a security issue in Django, please follow the reporting…
In a press release we present the concept of real-time revocation that is being developed in the W3C Verifiable Credentials Barcodes specification to protect physical documents.
OVHcloud's SNC Cloud Platform has obtained SecNumCloud qualification from ANSSI, its third. Sensitive and regulated workloads can now run with public-cloud agility inside a sovereign framework.
Starting today, PyPI package maintainers can adopt a new, more secure publishing method that does not require long-lived passwords or API tokens to be shared with external systems. About trusted publishing "Trusted publishing" is our term for using the OpenID Connect (OIDC) stand…
We are pleased to announce Amazon Web Services (AWS) as the inaugural Security Sponsor for PyPI, investing $144,000 over one year to fund key enhancements to PyPI infrastructure and operations, including the creation of a new “PyPI Safety & Security Engineer” role. This role…
If you are someone who is currently uploading signatures, your package uploads will continue to succeed, but any PGP signatures will be silently ignored. If you are someone who is currently downloading PGP signatures, existing signatures SHOULD continue to be available 1, but no…
Beginning today, all uploads from user accounts with 2FA enabled will be required to use an API Token or Trusted Publisher configuration in place of their password. This change has been planned since 2FA was rolled out in 2019. In February of 2022 we began notifying users on uplo…
We are pleased to announce that the PSF has received funding from the Center for Security and Emerging Technology (CSET) to develop and improve the infrastructure for malware reporting and response on PyPI. This project will be executed over the coming year. Currently, malware re…
What's changing? Starting today, newly registered users must enable 2FA before they can perform any management actions on PyPI. This change comes after we've also added a rule for accounts to have a verified, primary email address for the same set of management actions. As a remi…
Back in 2019 we kicked off efforts to integrate with GitHub secret scanning. Due to the complexity in nature, the completed integration launched in 2021, with the volunteer-led effort by Joachim Jablon ( @ewjoachim ) and the GitHub team. PyPI didn't have a blog back then, but Git…
Background The current PyPI security reporting procedure directs reporters to send an email to security@pypi.org with details. security@ was previously an email alias for admin@, a Google Group that…
This is part one in a three-part series. See part two here, and part three here We are proud to announce that PyPI has completed its first ever external security audit. This work was funded in partnership with the Open Technology Fund (OTF), a previous supporter of security-relat…
Incident Report: User Account Takeover What happened? A PyPI user's account was taken over and used to remove the user's ownership of 4 projects. This was not a malfunction of PyPI or using any vulnerability, rather the user's account was not sufficiently protected against accoun…
In accordance with our security release policy, the Django team is issuing releases for Django 6.1.2, Django 6.0.9, and Django 5.2.18. These releases address the security issues detailed below. We encourage all users of Django to upgrade as soon as possible. CVE-2026-77050: Poten…
Recent AI misalignment incidents have shown AI systems capably pursuing goals their human supervisors would not approve of, like hacking other companies. Fortunately, current AIs still seem relatively bad at concealing their misbehavior from human reviewers: these recent misalign…
Team Authorizations let you create and manage API tokens and OAuth authorizations at the team and team’s resources level instead of tying them to one person’s account. Until now, every API token belonged to an individual. When that person left the team, changed roles, or lost acc…
On September 30, 2026, METR President Chris Painter testified before the U.S. Senate Committee on Homeland Security & Governmental Affairs’ Subcommittee on Disaster Management, District of Columbia, and Census, at a hearing titled “Rogue AI: Securing the Homeland Against AI A…
A kill switch on the model doesn't protect your systems. See why enterprises need to own the boundary agents operate inside, not just the model behind them.
In light of recent incidents (e.g. those from OpenAI, Anthropic, and UK AISI ), we developed and deployed a basic live per-action monitor to reduce the likelihood of incidents involving harmful actions from agents during our own evaluations. The monitor is intended to reliably de…
Starting today, Test Replay replaces the values of sensitive form fields (passwords and payment details) with asterisks before it captures the DOM before any Test Replay data is uploaded to Cypress Cloud. It's on by default for every Cypress Cloud project. This follows the same p…
