Vulnerability

• La deputata del Workers' Party He Ting Ru ha evidenziato che Singapore è una delle economie più vulnerabili all'impatto dell'IA durante una mozione parlamentare sulla transizione verso l'IA. • Ha esortato a riconoscere realtà scomode che vanno oltre le lodate infrastrutture e le iniziative di riqualificazione della nazione. • L'approccio di Singapore, citato da BCG, da Kristalina Georgieva del Fondo Monetario Internazionale e da altri, si concentra sull'affrontare le opportunità e i rischi dell'IA attraverso il reskilling dei lavoratori.

• Anthropic ha annunciato Claude Mythos, un nuovo modello di IA in grado di rilevare vulnerabilità zero-day nel codice che gli sviluppatori non hanno identificato. • L'azienda ha ritenuto Mythos troppo pericoloso per il rilascio pubblico, scatenando dibattiti sul suo potenziale di causare una 'bugmageddon' o il collasso di internet. • Attraverso il Project Glasswing, Anthropic condivide Mythos Preview con 48 organizzazioni, tra cui grandi aziende tecnologiche e banche, per risolvere preventivamente falle critiche.

• Cogent Security, a vulnerability management developer, secured $42 million in Series A funding in February 2026 at a post-money valuation of $295 million. • Bain Capital Ventures led the round with participation from OpenAI, Datadog, and existing investor Greylock Partners, bringing the company's total capital raised to $53 million since its seed round. • The investment reflects growing enterprise demand for AI-powered vulnerability management tools as organizations prioritize cybersecurity infrastructure upgrades.

• Indian cybersecurity companies are deploying in-house AI agents built on large language models to combat threats. • These AI agents reduce software vulnerability detection and remediation times from days to hours. • The acceleration matches attackers' machine-speed operations, where human response windows shrink to near zero.

• Anthropic launched Claude Mythos Preview on April 7, 2026, an advanced AI model designed for defensive cybersecurity that uncovered thousands of major vulnerabilities in every major operating system and web browser. • Through Project Glasswing, access granted to tech giants including Amazon, Microsoft, Nvidia, Apple, and over 40 organizations maintaining critical software infrastructure. • Rising concerns from experts and governments about misuse risks to economies, public safety, and national security; US software stocks tumbled on April 9 amid fears of AI disruption to traditional security firms.

• Palo Alto Networks issued emergency patches on April 20, 2026, for a zero-day flaw (CVE-2026-4123) in PAN-OS firewalls, exploited against 50+ US healthcare providers. • Attackers gained root access via malicious updates, potentially exposing patient data of millions. • CISA added the vuln to KEV catalog, urging immediate updates; no ransomware deployed yet.

• Anthropic launched Project Glasswing, collaborating with Apple, Google, and Microsoft to deploy Claude Mythos Preview in identifying and patching critical software vulnerabilities preemptively. • The initiative unites rivals to leverage AI against cyber threats targeting US software infrastructure. • By fixing flaws before exploitation, the project aims to bolster national cybersecurity amid escalating AI-driven attacks.