Senate Judiciary advances bill that would bar minors from interacting with AI companions

Multiple security and policy developments: CISA ordered federal agencies to urgently patch a critical cPanel vulnerability (CVE-2026-41940) that Rapid7 says can give attackers full control of the host and hosted sites; the UK cyber agency warned of a looming “patch wave” as AI accelerates vulnerability discovery and increases exploitation risk; the US Senate Judiciary advanced the GUARD Act to restrict minors’ interactions with AI companions and require bots to disclose they are not human (including criminalizing knowingly soliciting sexual content from children); two incident responders were—