Security programs were built around a threat model that assumed clear boundaries: data lives in databases, code lives in code repositories, and trusted users are separated from untrusted external parties by authentication and access controls. AI assistants — and agentic AI systems in particular — have been systematically eroding all three of those assumptions since 2024, and most enterprise security teams have not caught up.
Tech Sentinel covers cybersecurity news with an engineer’s filter. That means we go deeper than vendor press releases and incident headlines to explain what actually happened, what the technical mechanism was, and what the security architecture implication is. For AI security specifically, that means tracking the incidents that reveal how the threat model is changing, the vulnerabilities in the AI infrastructure that enterprises have already deployed, and the workforce and organizational dynamics that determine whether security programs can actually respond.
This hub page indexes the most useful coverage on Tech Sentinel organized around the themes that matter most for enterprise security teams dealing with AI in 2026. The landscape is moving fast. Use this index as a stable reference point and return to it as new coverage is added.
The Evolving AI Threat Model
Understanding how AI systems change the attack surface — not just as individual vulnerabilities, but as a structural shift in what security teams need to defend.
AI Agents Rewrite the Threat Model for Security Teams The foundational analysis. AI coding assistants and autonomous “co-workers” blur the line between data and code, trusted user and insider threat. The Clinejection attack, the FortiGate campaign, and the OpenClaw exposure wave, analyzed together as a pattern: autonomous AI systems collapse the boundaries — between user and system, between data and code, between trusted tool and attack surface — that enterprise security architecture was built to protect. Covers what “prompt injection at the boundary” means as a security engineering problem and what organizational responses are actually working. Required reading for any security architect evaluating AI assistant deployment.
AI Fraud Detection: How It Works and Where It Fails The defensive side. How supervised classifiers, anomaly detection, graph neural networks, and behavioral biometrics stack in production, how attackers probe and evade them, and why cross-institutional data fragmentation caps the whole stack.
Standard Chartered’s CISO on AI’s Dual Role in Bank Security The view from inside a global bank. Group CISO Cezary Piekarski on machine learning that now handles transaction and access volumes no human review could cover, adversaries turning AI against model and data pipelines and into deepfake social engineering, and the Singapore and Hong Kong regulators asking banks to show their own AI systems have been assessed for exploitability.
Enterprise AI Vulnerabilities
Specific vulnerabilities in the AI systems enterprises have already deployed.
AI Hacking: Attack Paths, Real CVEs and Defensive Controls
The attack-path map. Separates AI-assisted intrusions from attacks on models, agents and ML supply chains, then works through PyTorch CVE-2026-24747: a crafted checkpoint that could reach arbitrary code execution through torch.load() even with weights_only=True, rated CVSS 8.8 and fixed in PyTorch 2.10.0. Closes with a defender checklist for model artifacts, agent permissions and monitoring.
Supply Chain and Device Integrity
Where the compromise ships inside the product, before anyone gets a chance to configure it wrong.
H96 Android TV Boxes Ship With Ad-Fraud and Proxy Malware The H96 Android TV box ad-fraud and residential-proxy malware documented by Bitsight is the clearest current case of an AI-assisted fraud operation whose entry point is a hardware supply chain rather than a model: roughly 38,000 boxes still beaconing to Fengwo infrastructure, two ROM-level apps that survive a factory reset, an IP leased out as a residential proxy while the television is on, and a network of AI-generated sites built to receive the spoofed mobile impressions while it is off.
Workforce and Organizational Dynamics
The human infrastructure of security programs — who does the work, what they’re experiencing, and how AI changes the operating model.
Cybersecurity Burnout Is a Structural Problem A Sophos survey of 5,000 practitioners found 76% experiencing burnout. This post argues that’s a systems problem: the alert volume and staffing gaps that cause burnout are getting worse as AI accelerates vulnerability discovery, while the organizational model that creates those gaps remains unchanged. Relevant for security leadership thinking about team capacity as AI-generated vulnerability research increases the pace of disclosure.
Cross-Site Reading
Tech Sentinel covers news and threat intelligence. For technical deep dives on offensive AI security techniques, see aisec.blog. For AI incident tracking and CVE coverage, see AI Alert. For defensive engineering and guardrails, see GuardML.
The framework, model-attack and vendor explainers that used to sit in this hub now live on AI Alert:
- Generative AI Risks: A Practitioner’s Guide to What Matters: what NIST AI 600-1, the OWASP LLM Top 10 and Cisco’s State of AI Security report each say, and where they diverge.
- LLM Security Risks: The OWASP Top 10 and How to Defend: LLM01 through LLM10 and the controls that reduce exposure.
- Machine Learning Security: Key Threats, Attacks, and Defenses: evasion, poisoning, model extraction and membership inference against the classifiers already running in fraud and detection pipelines.
- Deepfake Cybersecurity: How AI Voice Cloning Reshapes Fraud: voice cloning, video-conference impersonation and the procedural controls that hold.
- ChatGPT Security: Risks, Controls, and How to Use It Safely: ChatGPT risk in enterprise deployments and the controls that reduce it.
- OpenAI Security: Incidents, Disclosure, and API Hardening: the vendor’s incident record, disclosure policy and API hardening.
Related across the network
- Robust Intelligence (Now Cisco AI Defense): Platform Review — aisecreviews.com
- Protect AI’s ModelScan and NB Defense: An Open-Source Review — aisecreviews.com
- Best AI Security Testing Tools 2026: Scanners and Red Teams — aisecreviews.com
