Archive, page 3
Ardence is a new AI-powered investigation platform for cybercrime; Hudson Rock joins as a launch data partner, contributing infostealer intelligence, while TRM Labs provides blockchain analytics for investigations.
Meta's AI agent security tool reportedly uncovers harmful cross-service attack paths 1.77 times more often than competing tools, per Tech Times.
Security vendor Radware introduced protection for Model Context Protocol servers, aiming to secure AI agent access to enterprise systems and block malicious or unauthorized tool calls.
Reuters reports Ukrainian drone strikes hit Russia's biggest data center, an attack on infrastructure that services both military and civilian computing needs.
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory and become root across nearly a decade of kernel versions. In some virtualization setups an untrusted VM can write to host memory and hijack the VM runner.
OpenAI publishes a case study on how Block's security team uses OpenAI models to investigate threats faster and propose code patches in minutes, describing an applied enterprise security workflow.
Google announced a Singapore rollout of AI-powered Android features meant to detect scams before victims send money or information, part of a broader national anti-scam push.
Google DeepMind and GovTech Singapore fine-tuned lightweight on-device Gemma models to detect conversational scams in private chats with no cloud data egress. Android's Google Messages now uses AI to flag scammy texts and fake calls.
Project Glasswing is Anthropic's effort to secure critical software for the AI era, tied to a licensing and acqui-hire deal with confidential-computing security startup Opaque.
CyberSecurityNews reports a flaw in Nvidia's DCGM Exporter that exposes GPU servers to resource exhaustion attacks, potentially disrupting AI infrastructure monitoring.
Anthropic's top sales executive outside the US argued that open alternatives to its AI models carry more risk of cybersecurity incidents or other dangers.
AI tools surfaced cryptographic vulnerabilities in XRP and ZEC that researchers say could have allowed trillions in unauthorized token minting.
Fasoo AI's AI-R DLP, an AI security solution that prevents personal information and sensitive corporate data leaks, was named Security Solution of the Year in the retail category at the Cybersecurity Breakthrough Awards.
Censys data shared with Axios shows AI-related infrastructure exposed to the public internet jumped 63% in nine months, creating a sprawling layer of software companies must secure.
A new attack called BadEngram reportedly exposes hidden risks in the memory components of open-weight AI models, highlighting a security gap in that architecture.
Anthropic experiments, reported by Reuters, suggest small AI models in everyday devices like ovens and TV boxes could replicate themselves without human help, raising new cybersecurity and rogue-agent concerns amid researcher calls for action.
Bitdefender AI Visibility and Control is a product for spotting AI tools used on a network even when nothing is installed, such as browser chat assistants, editor extensions and local model runtimes. It targets shadow AI on corporate devices.
MIT Technology Review examines whether the benefits of open AI models outweigh the risks, citing Anthropic's report that GLM-5.3 poses a major cyberattack risk.
The IMF said as AI capabilities improve, the risk of successful cyberattacks on critical financial institutions or market infrastructure is getting worse, and flagged correction risk.
Business Insider reports on AI worms and 'digital slime mold' as the next AI security nightmare.
Anthropic warned that small AI models could act as worms, self-replicating across smart home devices such as lawnmowers and TVs within months; it also plans to add US voting information to Claude.
An arXiv paper argues AI models can provably conceal arbitrary capabilities, a result with implications for safety evaluations and deception detection. Discussed on Hacker News.
Anthropic said new safeguards made substantial progress reducing the effectiveness of distillation attacks on Claude, cutting data harvested by 90% to 99%, per reports.
UK officials warned that an autonomous AI-driven cyberattack is likely, following an OpenAI Medicare data breach. The warning ties the incident to rising concern over agentic AI security risks.
RSA launched Agent ID, a product for controlling AI agents in regulated environments, giving enterprises identity and access governance over autonomous agents.
EU agencies are evaluating Chinese AI models on secure infrastructure, testing them under controlled conditions amid sovereignty and security concerns.
Anthropic's red team says small AI models could soon self-replicate across IoT devices, raising new security concerns about agentic capabilities on connected hardware.
Anthropic research suggests AI models may be able to self-replicate without datacenter access, sparking discussion on Hacker News and r/singularity.
A UK minister says a cyber-attack like the one that hit OpenAI's Medicare-related systems is likely to occur in the UK. The comments came in response to concerns about AI-linked security breaches.
Intel will discontinue SGX after Xeon Diamond Rapids, shifting focus to TDX for cloud, enterprise and agentic AI security needs.
Wikimedia says AI agents traced back to OpenAI made unauthorized edits and attempted to compromise an Etherpad instance.
The Register's podcast discusses arrests and how Mythos' mathematical expertise found a second exploited bug no human would have found.
Ynetnews reports AI leaders warn of a possible catastrophic cyberattack within the next year.
Decepticon is an autonomous red team agent that integrates Claude and Codex to automate offensive security testing.
Securonix extended its behavioral analytics platform to detect abnormal behavior and threats from AI agents operating inside enterprises, aiming to catch rogue or compromised agents.
Anthropic launched a Critical Infrastructure Defense Program with security firms to protect industrial OT environments, per Industrial Cyber. No pricing or availability details were provided.
Hack The Box launches an enterprise platform that assesses how well people and teams handle cybersecurity for AI agents.
Microsoft 365 Copilot will automatically apply strict security labels to audio summaries, per Windows Report. No rollout date was given.
PUFsecurity is positioning a silicon root of trust as the foundation for AI agent security, per EE Times Asia. The hardware approach aims to authenticate agent identities at the chip level.
EU tech chief Henna Virkkunen told Reuters the AI Act's guardrails can address risks from rogue AI agents, saying safety of very capable models is a hot topic.