NexusRiver | CISO Intelligence Brief — Issue 60 · September 15, 2026 TLP:AMBER — Limited disclosure, recipients’ organizations onlyNexusRiver · Issue 60 · Tuesday, September 15, 2026 NexusRiver CISO Intelligence Brief Issue 60 September 15, 2026 Published by Software Armor LLC Lead signal — 404 Media, “Project Lily” The user said “keep this between us.”…
NexusRiver | CISO Intelligence Brief — Issue 59 · September 10, 2026 TLP:AMBER — Limited disclosure, recipients’ organizations onlyNexusRiver · Issue 59 · Thursday, September 10, 2026 NexusRiver CISO Intelligence Brief Issue 59 September 10, 2026 Published by Software Armor LLC Lead signal — Published post-mortem, OpenAI / Hugging Face The agent knew the target…
NexusRiver | CISO Intelligence Brief — Issue 58 · September 8, 2026 TLP:AMBER — Limited disclosure, recipients’ organizations onlyNexusRiver · Issue 58 · Tuesday, September 8, 2026 NexusRiver CISO Intelligence Brief Issue 58 September 8, 2026 Published by Software Armor LLC Lead signal — Misalignment incident, second confirmed victim Fifteen thousand authorized edits to a…
NexusRiver | CISO Intelligence Brief — Issue 57 · September 3, 2026 TLP:AMBER NEXUSRIVER // ISSUE 57 NEXUSRIVER CISO Intelligence Brief · Issue 57 · Thursday, September 3, 2026 AGENT AUTHORITY // DEVELOPER TOOLCHAIN The repo told the agent what to run. The agent ran it. Nothing asked. On September 2, Manifold Security disclosed eight…
NexusRiver | CISO Intelligence Brief — Issue 56 · September 1, 2026 TLP:AMBER NEXUSRIVER // ISSUE 56 NEXUSRIVER CISO Intelligence Brief · Issue 56 · Tuesday, September 1, 2026 AGENT AUTHORITY // CONTROL-PLANE INTEGRITY Authority at execution shipped yesterday. Now ask who verifies the verifier. Broadcom made per-tool-call agent authorization a generally available product on…
NexusRiver | CISO Intelligence Brief — Issue 54 · August 27, 2026 TLP:AMBER — Limited Disclosure Recipients may share within their organization and with clients on a need-to-know basis NexusRiver CISO Intelligence Brief · Software Armor LLC Issue 54 · Thursday, August 27, 2026 Posture: Elevated Seven hundred agents. One word of authorization. OpenAI and…
CISO Intelligence Brief 53 — The checkpoint belongs to the model, not to you. TLP:AMBER Limited disclosure · recipient organization, need-to-know CISO Intelligence Brief NexusRiver · Issue 53 Tuesday, 25 August 2026 The checkpoint belongs to the model,not to you. Three brokers and one IDE shipped inside twenty-four hours. Together they show that the human-approval…
NexusRiver — Issue 53 | 20 August 2026 TLP:AMBER NexusRiver Issue 53 · Thursday, 20 August 2026 · Eric Yehle Five federal agencies confirmed yesterday that attackers are using AI to write exploitation code against physical infrastructure. The mitigations they published do not contain the control that would have stopped the write. 01Federal Advisory Washington…
NexusRiver — August 18, 2026 — The Defender’s Window Has a Lock On It TLP:AMBER Limited disclosure — recipient organization only NexusRiver CISO Intelligence Brief · Tuesday, August 18, 2026 The Defender’s Window Has a Lock On It OpenAI’s president published a first-person account of an agent reconfiguring his infrastructure. Everything it did was authorized….
NexusRiver — The Binding Moment — August 11, 2026 TLP:AMBER — Limited disclosure, recipient organization only Issue 2026-08-11 NexusRiver Agentic AI risk intelligence for security leadership Tuesday, August 11, 2026 · Prepared by Eric Yehle Signal In a single news cycle, the two labs with the most sophisticated agent controls in the industry shipped their…