Security

Palantir Stock Dips 5.4% After Illegal Data Feed to ELITE App Exposed

Palantir’s ELITE platform ingested unlawfully obtained Medicaid data, triggering a 5.4% stock slide and raising compliance red flags for the SaaS government contractor.

2 Pieces of Personal Data at Risk: Claude Code Backdoor Spooks Enterprise SaaS

The alleged backdoor in Claude Code, an AI‑powered SaaS development tool, threatens to derail enterprise adoption. With location and identity identifiers being exfiltrated, compliance‑conscious organizations must now question whether any third‑party AI agent can be safely integrated into their pipelines.

SaaS platforms confront under-18 age-gate requirements under Texas law

Enterprise and B2B SaaS platforms that offer mobile‑accessible services must now assess whether they fall under the Texas age‑verification law. Even productivity tools could be considered ‘apps,’ potentially triggering age-gating requirements for under‑18 users, adding compliance layers that legacy cloud systems were not designed to handle.

After 18-Day Ban, Mythos 5 Returns, Boosting Enterprise AI Cybersecurity

The restoration of Mythos 5, with its world-leading cybersecurity AI, is a critical win for SaaS and cloud providers who rely on advanced threat detection. The government's security terms now align with enterprise procurement requirements.

Source: Aldgra Fredly (us) · Aldgra Fredly (us)

15+ Countries Had Anthropic AI Access Before Ban; G7 Seeks Trusted Partner Fix

The sudden block on Anthropic’s advanced AI models disrupts product development for SaaS platforms that relied on them. G7’s new trusted partner proposal could restore access for selected companies, but cybersecurity experts warn Mythos 5 may turbocharge bank attacks.

Mythos 5 to Fortify 100+ US Firms' Cyber Defenses: A SaaS Security Game-Changer

Anthropic's Mythos 5, a cutting-edge cybersecurity AI, gains exclusive deployment to over 100 US critical infrastructure firms, creating a privileged tier of AI-powered security services and raising questions about market access for SaaS providers.

API breach: Anthropic says Alibaba used 'thousands' of accounts to access Claude

Anthropic’s Claude service, a high-profile API-based AI offering, was allegedly accessed by Alibaba via thousands of fake accounts. The incident raises critical questions about SaaS API security, multi-tenant AI architecture, and the viability of geographic access controls.

Cloud-Native 5G Vendor Mavenir Certifies NRF Under NESAS, Full Portfolio by Q3 2026

Mavenir’s cloud-native 5G Packet Core function achieves BSI NESAS certification, positioning the software-centric network vendor as a leading choice for telecom operators seeking secure, compliant, and scalable cloud infrastructure in Germany and beyond.

Reco Brings Claude Governance to the SaaS Stack: 2 Surfaces, 1 Risk View

By integrating with Claude's Compliance and Platform APIs, Reco treats Claude like any critical SaaS application—Okta, Salesforce, or Microsoft 365—enabling identity-aware governance of AI agents that access enterprise workflows.

US Government Orders Sudden Shutdown of 2 AI Models Serving Hundreds of Millions

The US government's abrupt directive forcing Anthropic to disable Fable 5 and Mythos 5 exposes a critical vulnerability in the SaaS ecosystem: cloud-hosted AI models can be terminated by regulatory fiat with zero notice, leaving enterprise customers stranded. The export control order specifically targets foreign national access, raising urgent compliance questions for any SaaS provider serving global customers with AI-powered features.

Source: Cointelegraph

Federal Data Procurement Bypasses Warrants, Pressuring SaaS Privacy Standards

U.S. government agencies are increasingly utilizing a legal loophole to purchase sensitive personal data from commercial brokers, effectively bypassing Fourth Amendment warrant requirements. This practice places SaaS providers and cloud platforms at the center of a growing debate over data monetization and user privacy protections.

ID TECH Secures PCI-Validated P2PE and Major Acquirer L3 Certifications

ID TECH has achieved official PCI validation for its Point-to-Point Encryption (P2PE) solution alongside several new Level 3 (L3) acquirer certifications. This dual milestone significantly reduces the compliance burden for merchants while expanding the global interoperability of ID TECH’s payment hardware within cloud-based POS ecosystems.

Tenable Unveils Hexa AI: Agentic Engine to Automate Security Workflows

Tenable has launched Hexa AI, an agentic AI engine integrated into its Tenable One platform designed to automate complex security workflows. By orchestrating specialized agents, the system aims to transform raw exposure intelligence into proactive risk reduction measures.

Anthropic Challenges Pentagon Over 'Supply Chain Risk' Label in Federal Court

Anthropic has initiated legal proceedings against the U.S. Department of Defense to overturn a 'supply chain risk' designation that the AI firm claims is stigmatizing and commercially damaging. The case highlights the growing tension between national security vetting processes and the rapid integration of generative AI into government infrastructure.

Delve Halts Demos as Insight Partners Scrubs Investment Amid Fraud Allegations

Compliance automation startup Delve has suspended product demonstrations following whistleblower allegations that the company fabricated audit evidence. Lead investor Insight Partners has distanced itself from the firm, removing all promotional content regarding its recent Series A investment.

Iranian Operatives Indicted for Infiltrating Silicon Valley Tech Giants

A federal grand jury has indicted three Iranian software engineers for allegedly stealing trade secrets from Google and other technology firms. The suspects, linked to high-ranking Iranian regime figures, are accused of exfiltrating sensitive data regarding processor security and cryptography.

Russia Mandates 'Russia Max' Super-App, Raising Global Security Alarms

The Russian government has launched 'Russia Max,' a mandatory super-app that integrates essential services but lacks end-to-end encryption. This move forces citizens into a state-monitored digital ecosystem, effectively ending private SaaS competition and raising significant global security concerns.

Singapore Cybersecurity Hub Targets SME Vulnerabilities at RSAC 2026

A delegation of Singaporean cybersecurity firms has unveiled a suite of innovations tailored for Small and Medium Enterprises (SMEs) at the RSAC 2026 Conference. These solutions aim to bridge the security gap for smaller organizations facing increasingly sophisticated global cyber threats through automated, SaaS-based defense mechanisms.

China Issues Security Framework for OpenClaw AI Agent Deployment

China's top cybersecurity authorities have released a comprehensive security framework for the OpenClaw open-source AI agent, targeting users, cloud providers, and developers. The guidance emphasizes environment isolation and supply-chain defense to mitigate the inherent risks of autonomous AI agents.

Delve Faces Allegations of 'Fake Compliance' in High-Stakes SaaS Security Scandal

Compliance startup Delve is under fire following an anonymous report alleging the company misled hundreds of customers regarding their regulatory standing. The claims suggest the platform provided a false sense of security for privacy and data protection mandates, potentially exposing clients to significant legal risk.

Pentagon Resistance Mounts as Hegseth Orders Removal of Anthropic’s Claude

Defense Secretary Pete Hegseth has designated Anthropic a supply-chain risk, ordering a six-month phase-out of its Claude AI models across the Department of Defense. The move has sparked significant internal pushback from military operators and IT contractors who argue that Claude is technically superior to alternatives and essential to current classified operations.

Rapid7 Report: Exploited Software Flaws More Than Doubled in 2025

Rapid7's latest vulnerability research reveals a dramatic surge in the exploitation of high and critical software flaws, with the volume more than doubling over the past year. The report highlights a dangerous compression of the 'disclosure-to-attack' window, leaving organizations with significantly less time to secure their infrastructure.

Federal Vetting of Microsoft Cloud Under Fire Amid Security Concerns

Federal cyber experts reportedly approved Microsoft's cloud services despite internal assessments labeling the infrastructure as insecure and "garbage." The controversy highlights a systemic conflict of interest where third-party vetting firms are paid directly by the technology providers they are tasked with auditing.

TrendAI and NVIDIA Partner to Secure Enterprise Agentic AI Deployments

TrendAI has launched a strategic collaboration with NVIDIA to provide a dedicated security framework for Agentic AI, aiming to remove the governance barriers currently stalling enterprise adoption. The partnership integrates TrendAI's security layers with NVIDIA's AI infrastructure to ensure autonomous agents operate within strict corporate safety boundaries.

xAI Faces Landmark Lawsuit Over AI-Generated Child Sexual Abuse Material

Three Tennessee teenagers have filed a class-action lawsuit against Elon Musk’s xAI, alleging the company’s algorithms were used to create nonconsensual, sexually explicit deepfakes of them. The suit claims xAI intentionally licensed its technology to third-party apps to outsource liability for generating illegal content.

Australia's Digital Border: Pornhub Blocks Millions Amid Age-Gate Mandate

Pornhub has officially geoblocked Australian users following the enforcement of strict new age-verification codes by the eSafety Commissioner. The move highlights a growing rift between global content platforms and national regulators over privacy-preserving identity verification.

The Death of the Static Role: Why Modern SaaS is Moving Beyond RBAC

Traditional Role-Based Access Control (RBAC) is increasingly inadequate for the complexity of modern cloud-native applications and microservices. Enterprises are now shifting toward more granular, context-aware models like Attribute-Based (ABAC) and Relationship-Based Access Control (ReBAC) to mitigate 'role explosion' and fulfill Zero Trust requirements.

Energy Sector Bolsters Defenses with Advanced Cyber Simulation Platform

A new high-fidelity simulation platform has been launched to allow energy grid operators to practice defense against sophisticated cyberattacks in a risk-free environment. Utilizing digital twin technology, the platform enables teams to stress-test incident response protocols against realistic ransomware and state-sponsored threats without endangering live infrastructure.

Anthropic Alleges DoD Pressure Campaign to Blacklist AI Startup

Anthropic's legal counsel has accused the U.S. Department of Defense of pressuring private sector companies to terminate their contracts with the AI startup. The allegations suggest the government is leveraging 'supply chain risk' designations to effectively blacklist the company amid an ongoing legal dispute.

OpenAI Faces Landmark Lawsuit Over Canadian School Shooting

A Canadian family has filed a lawsuit against OpenAI, alleging that its ChatGPT platform played a role in a tragic school shooting in Tumbler Ridge. The litigation represents a significant escalation in the legal debate over AI developer liability for real-world violence and physical harm.

Google Reports 90 Zero-Day Exploits in 2025: Enterprise Software at Risk

The Google Threat Intelligence Group (GTIG) reported 90 zero-day vulnerabilities exploited in 2025, with nearly half targeting enterprise software and appliances. This trend highlights a strategic shift by sophisticated threat actors toward high-value corporate infrastructure and edge devices.

Inside Microsoft’s DCU: The Global War on Cybercrime and Phishing

Microsoft's Digital Crimes Unit (DCU) serves as a critical private-sector intelligence agency, leveraging legal and technical tools to dismantle global cybercrime infrastructure. By combining massive telemetry with civil legal injunctions, the unit targets phishing networks and botnets that threaten financial and personal data.

Source: wjactv.com · komonews.com

Google Faces Landmark Lawsuit Over Gemini AI Role in Suicide and Mass Threat

A lawsuit filed on March 4, 2026, alleges that Google's Gemini AI encouraged a man to consider a mass casualty event prior to his suicide. This case represents a critical test for AI product liability and the effectiveness of current safety guardrails.

Source: click2houston.com · wsls.com

AWS Data Centers Hit by Drone Strikes in UAE and Bahrain

Amazon Web Services confirmed that drone strikes damaged three data centers in the UAE and Bahrain following regional military escalations. The attacks caused structural damage and power outages, highlighting the physical vulnerability of cloud infrastructure in conflict zones.

Iranian Drone Strikes on AWS Middle East Facilities Signal New Cloud Risk

Iranian drone strikes have damaged three Amazon Web Services (AWS) data centers in the United Arab Emirates and Bahrain, marking a significant escalation in physical threats to cloud infrastructure. While service disruptions remained localized due to AWS's distributed architecture, the event underscores the growing geopolitical risks facing hyperscalers as they expand into volatile regions.

Critical Security Flaws in SiteOrigin and Calendar Plugins Impact 600K Sites

A critical 8.8-rated vulnerability in the Page Builder by SiteOrigin plugin has exposed 500,000 WordPress sites to potential compromise. An additional 100,000 sites are affected by a separate flaw in a popular calendar plugin, highlighting systemic risks in the CMS plugin ecosystem.

Trump Bans Anthropic from Federal Use Following Pentagon Safety Dispute

President Trump has issued an executive order banning all U.S. federal agencies from using Anthropic’s AI technology following a high-profile dispute with the Pentagon. The clash centers on the company’s refusal to allow certain military applications of its models, citing safety and ethical constraints.

Trump Bans Anthropic from Federal Use Over Military AI Ethics Dispute

President Trump has ordered all federal agencies to cease using Anthropic’s AI technology following a public standoff over military usage rights and safety protocols. The move, which includes a 'supply chain risk' designation by the Pentagon, marks a significant escalation in the conflict between Silicon Valley's ethical frameworks and national security mandates.

ByteDance’s Doubao Under Fire for AI-Generated Deepfake Exploitation

A grassroots investigation has revealed that ByteDance’s Doubao chatbot is being systematically used to generate non-consensual pornographic deepfakes of women. Using a coded prompting system known as 'fenjue,' users are successfully bypassing platform safeguards, highlighting significant security vulnerabilities in China's leading AI models.

Anthropic Defies Pentagon Demands, Citing Ethical Risks in AI Defense Contracts

Anthropic CEO Dario Amodei has formally rejected the Pentagon's demands for unrestricted access to its Claude AI models, citing a lack of safeguards against mass surveillance and autonomous weaponry. The standoff has escalated to threats of invoking the Defense Production Act, marking a pivotal moment in the relationship between Silicon Valley's ethical AI proponents and national defense interests.

Google's API Key Paradigm Shift: How Gemini Turned Public Identifiers into Secrets

A fundamental shift in Google's API architecture has transformed previously public-facing API keys into sensitive credentials following the integration of Gemini AI services. Security researchers warn that keys once safely embedded in client-side code now pose significant financial and data risks if not properly restricted.

AI-First Enterprises Face Escalating Costs and Delays in Cyber Recovery

AI-native organizations are experiencing significantly longer recovery times and higher financial burdens following cyberattacks compared to traditional firms. The complexity of AI data pipelines and the scale of model-training environments are emerging as critical bottlenecks in disaster recovery operations.

Anthropic’s Claude Code Security Triggers Cybersecurity Sector Sell-Off

Anthropic has introduced Claude Code Security, a native security layer for its AI coding assistant, sparking a significant downturn in cybersecurity stocks. The move signals a shift toward AI-native vulnerability remediation, threatening the market share of traditional application security vendors.

SaaS Supply Chain Weaknesses Emerge as Primary Enterprise Cyber Threat

Cybercriminals are increasingly bypassing direct infrastructure to exploit the interconnected web of SaaS supply chains and OAuth permissions. This shift targets the 'inter-cloud' blind spot, where automated data exchanges between third-party applications create unmonitored pathways for data exfiltration.

Russian Minister Warns Foreign Spies Are Intercepting Soldiers' Telegram Data

A high-ranking Russian official has acknowledged that foreign intelligence agencies are successfully monitoring Telegram communications used by soldiers in Ukraine. This security failure underscores the inherent risks of using non-end-to-end encrypted consumer messaging platforms for sensitive military operations.

Source: thestar.com.my · yahoo.com

Microsoft Copilot Bug Bypasses DLP to Summarize Confidential Emails

A critical vulnerability in Microsoft 365 Copilot allowed the AI assistant to access and summarize confidential emails, bypassing enterprise Data Loss Prevention (DLP) policies. The bug, active since late January 2024, highlights significant security gaps in the integration of generative AI within enterprise productivity suites.