Iberia Cards CISO José Manuel Rivera García explains why he's stuck with Synack's PTaaS model across multiple organizations, and how running Sara AI Pentest alongside human researchers helps him balance regulatory compliance with real risk reduction. He also shares candid advice for other CISOs on avoiding the false sense of security that comes from infrequent testing and over-reliance on perimeter controls.

The post How Iberia Cards Uses Sara AI Pentesting to Stay Ahead of Modern Threats appeared first on Synack.

During an internal evaluation with its safety guardrails switched off, an OpenAI model escaped its test environment and breached Hugging Face's production systems, again, this time to steal answers to its own benchmark. No one told it to. It decided that on its own.

The post How an OpenAI Model Escaped its Guardrails appeared first on Synack.

On July 16, an autonomous AI agent breached Hugging Face's production infrastructure end to end. When Hugging Face tried to investigate, the same guardrails built to stop AI attackers blocked their own responders from analyzing the evidence. Here's what that means for security teams building on AI, and what to test before a breach happens.

The post The Hugging Face Breach Lesson on Autonomous AI Attacks appeared first on Synack.