Overview On August 10, 2026, MATS Research, the ELLIS Institute Tübingen, the Max Planck Institute for Intelligent Systems, and other institutions jointly published the paper Stealing Reasoning Traces from Proprietary LLM APIs. The research reveals a common architectural flaw in the reasoning model APIs of three major AI providers, Anthropic, OpenAI, and Google, which allows […] The post AI…
Overview On August 12, NSFOCUS CERT monitored that Microsoft released its August security update patch, fixing 421 security issues. These affect widely used products such as Windows, Microsoft Office, Azure, Visual Studio Code, Microsoft Exchange Server, etc., which include high-risk vulnerability types such as privilege escalation and remote code execution. Among the vulnerabilities fixed in […]…
Abstract NSFOCUS’s self-developed intelligent offensive-and-defensive system NSFOCUS AI achieved a vulnerability-reproduction success rate of 93.6% on the CyberGym Level 1 benchmark. Behind this result lies the deep integration between NSFOCUS AI and Zhipu’s GLM-5.2 large model: by formalizing the offensive-and-defensive expertise accumulated by NSFOCUS’s red team into computable workflows, the…
Regional APT Threat Situation In April 2026, the global threat hunting system of Fuying Lab detected a total of 29 APT attack activities. These activities were primarily concentrated in regions including East Asia, South Asia, Eastern Europe, North America, and the Middle East, as shown in the figure below. Regarding the activity levels of different […] The post NSFOCUS Monthly APT Insights –…
Overview In August 2026, the UK AI Security Institute (AISI) disclosed a startling security incident: during routine cybersecurity capability evaluations, Anthropic’s Mythos 5 and OpenAI’s GPT-5.6 Sol models, without receiving any explicit attack instructions, autonomously decided to launch unauthorized actions against real open-source project maintainers and external systems. Their specific…
SANTA CLARA, Calif., August 11, 2026 – NSFOCUS has been honored with the Frost & Sullivan 2026 Global Anti-DDoS Competitive Strategy Leadership Award, recognizing the company’s forward-looking market strategy, sustained technological innovation, and long-term commitment to delivering customer value. As one of the world’s most respected market research and consulting organizations, Frost & Sullivan…
The Log Management Challenge Most enterprises accumulate log sources the same way they accumulate infrastructure: one device at a time, each generating data in its own proprietary format. The result is logs scattered across security appliances, network devices, servers, databases, middleware, applications, and cloud workloads, with no unified view and unknown device status. Any issue […] The post…
SANTA CLARA, Calif., August 6, 2026 – Recently, the global research and advisory firm Forrester has released its first report on Agentic Development Security (ADS) tools, “The Agentic Development Security Tools Landscape, Q2 2026[1]”. NSFOCUS has been recognized among representative vendors in the report, marking international acknowledgment of the company’s technical capabilities in AI supply…
Overview On July 28, 2026, security researcher Håkon Måløy publicly disclosed a new attack technique called “AI Worming through Word”. The attack exploits a hint injection vulnerability in Microsoft Copilot for Word, allowing malicious instructions to self-replicate and spread in normal document workflows, forming a new type of document-based AI worm. This discovery will prompt […] The post AI…
In July 2026, Hugging Face—the world’s largest open-source AI model platform—disclosed an industry-shattering intrusion: OpenAI’s AI models used for internal safety evaluation (GPT-5.6 Sol and an even more powerful pre-release model) exploited a zero-day vulnerability to break out of their sandbox, autonomously intruded into Hugging Face’s production system, and exfiltrated evaluation answers.…
