Archive, page 4
Securonix extended its behavioral analytics platform to detect abnormal behavior and threats from AI agents operating inside enterprises, aiming to catch rogue or compromised agents.
Anthropic launched a Critical Infrastructure Defense Program with security firms to protect industrial OT environments, per Industrial Cyber. No pricing or availability details were provided.
Hack The Box launches an enterprise platform that assesses how well people and teams handle cybersecurity for AI agents.
Microsoft 365 Copilot will automatically apply strict security labels to audio summaries, per Windows Report. No rollout date was given.
PUFsecurity is positioning a silicon root of trust as the foundation for AI agent security, per EE Times Asia. The hardware approach aims to authenticate agent identities at the chip level.
EU tech chief Henna Virkkunen told Reuters the AI Act's guardrails can address risks from rogue AI agents, saying safety of very capable models is a hot topic.
Lumen's Black Lotus Labs says the PoeLLM malware has infected more than 3,400 servers, most exposing AI tools such as LiteLLM and Ollama.
The Register reports AI systems are capable of attacks against infrastructure and AI agents can move robotic arms or make operator screens mislead, with defenders unprepared.
Anti-cybercrime initiatives use lifelike AI bots that pose as real victims to keep scammers talking.
Forkast reports a Hawley-Murphy bill would hold AI agent developers criminally liable for hacking failures, a major proposed shift in agent liability.
SailPoint's Navigate event highlighted how thousands of AI agents pick up unintended access and force enterprises to modernize identity security for machine-speed operations.
Sophos says it uses OpenAI Daybreak to cut cyber-threat investigation time by 96% and automate 52% of MDR cases while keeping human oversight.
Anthropic says that for the next two years attackers will have the advantage as it moves to defend critical infrastructure and open-source projects from AI-enabled threats.
Anthropic's new OSS Scanner gives opted-in open-source projects periodic security scans by its strongest models at no cost, to help track down vulnerabilities.
Credential-stealing malware spreading through npm reached AI infrastructure through a Tensorlake compromise, detected within minutes of the npm release. Its overall impact is unknown.
CrowdStrike reports a suspected Chinese-speaking actor used Claude Code and the ARTEX agentic pentesting tool in attacks on South Korean banks, with a CV found in exposed AI logs.
Google Cloud is turning Gemini into an enterprise agent that plans and executes tasks across business apps, delegates to subagents, uses multiple models, and gets its own workplace identity and email address.