• A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim’s project hijack the victim’s machine learning model upload and run code inside Google’s serving infrastructure. Palo Alto Networks Unit 42, which found and reported the bug through Google’s bug bounty program, calls the technique “Pickle in the Middle” and said it saw no exploitation in the wild.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • The nation’s largest counterintelligence unit aims to use artificial intelligence tools to speed security clearance reviews for people and companies seeking to do sensitive work on behalf of the government.

    The Defense Counterintelligence and Security Agency can use AI to reduce parts of the vetting process from “months to hours,” said Mark Nehmer, an agency analytics and innovation chief who spoke Tuesday on a panel at the Defense One Tech Summit in Virginia.

    DCSA is the Defense Department’s main agency for conducting background investigations and vetting personnel for access to classified information, and serves as a key determinant for whether companies are eligible to work with military and intelligence agencies.

    A recent congressionally-approved acquisition overhaul, which encourages defense officials to prioritize goods and services from the commercial market, means that the counterintelligence agency will have to process some 43,000 clearance requests per year, he estimated.

    “We’re trying to use AI exquisitely, use AI to make these little tiny decisions, and then bring that up to a human, so they can actually have a package of evidence to say, ‘I asked, and this is exactly the conclusion I will come to as a senior analyst that has to make those decisions day-in and day-out,’” Nehmer said.

    He did not specify what AI systems would be used for the efforts. 

    The remarks highlight how the government is applying AI to a key national security function that determines who has access to clearances, and they add another case to a long list of examples showing how the federal enterprise is using AI to speed operations.

    DCSA has led the government’s background check process since 2019, when the Office of Personnel Management handed off its National Background Investigations Bureau to the Pentagon.

    DCSA’s use of AI builds on a years-long effort to automate and overhaul the federal background-check system. The agency has enrolled millions of clearance holders in continuous vetting under an initiative known as Trusted Workforce 2.0, though the broader modernization effort has faced repeated delays, cost overruns and congressional scrutiny.

    Over the weekend, the U.S. invoked an export-control mechanism to essentially ban two major Anthropic frontier models, escalating debates over how Washington could exert itself over AI usage in the government. The decision has been widely criticized. 

    GovExec Editor-in-Chief Frank Konkel contributed to this report.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • NATO has “really changed a lot in the last three to four years,” since Russia’s invasion of Ukraine forced the alliance to rethink how it learns, experiments, and operates, a top NATO transformation official said.

    Now the alliance is moving away from long, platform-centered modernization cycles and toward faster experimentation, interoperability, and “system-of-systems” approaches, said Maj. Gen. Dominique Luzeaux, NATO’s digital transformation champion and special advisor to the Supreme Allied Commander Transformation. He spoke Tuesday at the Defense One Tech Summit in Arlington, Virginia.

    Luzeaux pointed to Ukraine’s ever-increasing use of unmanned ground, air, surface, and undersea systems—and how the main lesson is more than just drones are useful.

    “What is important is to have an integrated, multi-domain robotic ecosystem,” Luzeaux said. “Because it’s not just one drone making the difference. It’s all the drones being together, the right number, at the right place, at the right time, making a true difference.”

    Another major lesson is that war is about ever-shorter innovation cycles. 

    “If we look at Ukraine in the first year,” he said, they were mostly using Soviet weapons and “more or less losing the battle.” But they learned to evolve, and then Russian forces followed suit. “So after two years, the Russians also had changed their own innovation cycles, and then it was innovation cycle against innovation cycle. 

    “In order to not lose everything, Ukraine had to go from system-oriented innovation to a much wider innovation—not to innovate [just] on the tactical, or very strict tactical, platform level, but to have a more global [approach] and to be able to do strategic, operational, and tactical levels together.” 

    That’s what NATO is now trying to do, Luzeaux said.

    “So we used to have very long-term programs,” he said. “And now what we do, we always have some long-term programs, of course, for major investments, but we also have much shorter-term cycles, experimentations, exercises.”

    Luzeaux pointed to NATO efforts in layered counter-UAS experimentation, which he said tests different approaches every two or three months.

    The shift is also architectural. He said NATO is moving “from a platform-centric to a system-of-systems world,” in which the key problem is not any single weapon, sensor, or vehicle, but how those assets are orchestrated.

    “What is important is the orchestration between the different assets,” he said.

    That means designing architectures that separate functions from platforms—for example, using 5G antennas not just for communications nodes, but also as sensors.

    NATO’s Allied Command Transformation, Luzeaux said, is focused on helping the alliance connect national capabilities into coherent, interoperable forces. NATO must be able to make assets from different countries work together, such as pairing a U.S. drone with a German command-and-control system and a French sensor.

    “This is where we put the glue between the different things,” he said. “Our role is to design all the things that help put together the various assets which are brought by all the countries in order to have something coherent.”

    Asked whether alliance members are learning the lesson quickly enough, Luzeaux said yes, but added that NATO still must learn faster.

    “What we need is a continuous learning and adaptation model,” he said. “Continuous experimentation, continuous learning, which is very important.”

    The same pressure is changing NATO’s approach to standards. Luzeaux said the alliance has long been known for having “too many” standards and that they often took too much time to implement.

    “Part of the new policy in NATO is to take standards—so international standards and standards from the civilian world, from the commercial world—and use them, adopt them, not adapt them,” he said.

    Exercises also matter, he said, because they standardize procedures for forces from different countries to fight together.

    Asked how quickly NATO can develop standards for threats such as Shahed drones, Luzeaux said the alliance is pursuing both short-term reactive initiatives and longer-term efforts that can be integrated into broader capability programs.

    He cited a Baltic Sea effort, launched last year as an experiment and now used by several northern countries, that uses uncrewed surface vehicles to patrol and detect Russia’s shadow fleet.

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, per independent reports from Morphisec, BlueVoyant, and Huntress, respectively. Attacks involving BabaDeda Loader, observed in April 2026, have targeted education and financial organizations. “Earlier BabaDeda activity was known for

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Amos Stealer targets macOS users through fake downloads, stealing Keychain files, browser passwords, cookies, and developer configs for data theft.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Las Vegas, USA / Nevada, June 16th, 2026, CyberNewswire Aembit on Tuesday announced support for Copilot Studio, extending its identity and access management capabilities to Microsoft’s enterprise AI agent platform. The integration, unveiled at Identiverse 2026, gives security teams the tools to manage what Copilot Studio agents can access, under what conditions, and with a […]

    The post Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • When the Pentagon’s science and technology chief looks at Ukraine, he sees a war fought with weapons invented, produced, and fielded since the conflict erupted.

    “The fact that you can bring relevant capability to the fight, as the Ukrainians and allies have done in the conflict with Russia, that essentially didn't exist at the beginning of the fight,” Joseph Jewell, assistant defense secretary for science and technology, said Tuesday at the Defense One Tech Summit in Arlington, Virginia. “That's the new thing here.”

    It’s a thing the United States must learn to do, Jewell said.

    Ukraine’s homegrown drone industry “to a large extent, sprung up almost overnight because of urgency. I think with our industrial resources, we certainly could do things at that scale and even in a more sophisticated way. And we need to do it,” he said. 

    Jewell noted that Ukraine has taken the Russian Navy out of the fight without much of a navy of its own.

    “The way they were able to do that, well, there are several things. First of all, their weapon systems were small, relatively undetectable. Second of all, they had a lot of them,” he said. 

    There is still a need for expensive, highly capable weapons, Jewell said, “But the exquisite effect may be helped along by leveraging a hundred or a thousand drones controlled by AI. And I think that's what we're starting to see modern warfare evolve into. Now, of course, the model is a lot of people in Ukraine who are actually manually controlling these first-person drones. I think the natural evolution of that is AI-controlled or AI-enabled.” 

    Patent holiday

    One way the Pentagon is trying to speed up innovation is by making it easier for defense companies to use government-held technological patents. 

    The Defense Department holds tens of thousands of patents, but only takes in about $20 million a year from them. In January, Jewell’s boss, Defense Undersecretary for Research and Engineering Emil Michael, announced a “patent holiday” under which private companies can license some of those patents—about 500, Jewell said—free of charge. 

    He said the first no-fee patent license was granted last month. As of mid-June, 14 patents have been “signed out” for commercial use, one has been licensed for a fee by a company that wanted exclusivity, 36 more are pending, and 145 more applications have come in, he said.

    Biotech

    Jewell lauded the promise of biotech combined with AI. He cited a new bioengineered thermal coating that may help drones obscure their heat signatures, developed through BioMADE, a DOD-sponsored Manufacturing Innovation Institute. 

    He also described an experiment in which Marines in the Pacific used 3D printers and other tools to field-produce shaped charges with local materials: plastic water bottles, crushed volcanic rock, coconut husks, and coffee grounds. 

    “They all detonated, actually; the volcanic rocks were most effective,” he said. “The thing that's amazing to me is this was 3D-printed. You effectively have 99% reduced the time to point-of-use, because you could make it in the field from materials that are endemic in the Indo-Pacific.”

    What’s more, the Marines’ shaped charge “had 25% better focusing characteristics than conventionally manufactured high explosives,” he said. “So we envision a future where you have a containerized production facility for potentially the ingredients for that, potentially including the 3D printer to pump out the shaped charges. And then you can drop, say, a CONEX box in the field where you need, so it can produce biodiesel, it can produce jet fuel.”

    ]]>

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • Las Vegas, USA / Nevada, 16th June 2026, CyberNewswire

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • New York, United States of America, June 16th, 2026, CyberNewswire Agent Identity Security combines AI agent governance with a native PKI foundation, directly targeting ungoverned AI agents, enterprise security’s fastest-growing blind spot  AppViewX today announced Agent Identity Security, a new product within the AppViewX platform that discovers, governs, secures, and monitors AI agents across the entire […]

    The post AppViewX Launches Agent Identity Security to Govern Agents for the AI and Quantum Era appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

  • New York, New York, June 16th, 2026, CyberNewswire GitGuardian is introducing Developer Endpoint Protection, extending its secrets and non-human identity (NHI) security platform coverage to developer workstations. After 12 months of supply-chain campaigns harvesting credentials from developer machines, CISOs and IT leaders are reopening a question many considered settled: what does endpoint protection have to […]

    The post Developer laptops are the credential store attackers are picking through in 2026, GitGuardian announces Endpoint Protection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶

    ¶¶¶¶¶