Blog
-
OpenAI’s New AI Pipeline Uncovers 1,724 Linux Kernel Vulnerabilities, Offering Both Promise and Peril
OpenAI’s new AI pipeline uncovered 1,724 Linux kernel vulnerabilities, developed 948 working privilege escalation exploits, and generated candidate patches in just 30 hours. A glimpse into AI’s promise and peril for cybersecurity.
-
UK: Critical Infrastructure Companies Told to Expect an AI Malware Attack by 2028
UK’s NCSC warns that AI-enabled malware could compromise critical infrastructure by 2028, potentially enabling ransomware attacks. While AI is accelerating cyber threats, unpatched vulnerabilities and poor security hygiene remain major risks.
-
New Research Shows How Compromised AI Infrastructure Can Secretly Manipulate Model Behavior
New research shows how attackers could exploit vulnerabilities in AI infrastructure and supply chains to secretly manipulate model behavior, bypassing integrity checks without detection. A reminder that securing AI requires more than securing the models themselves.
-
Record $6.3 Billion Binance Crypto Hack Highlights the Persistent Threat of North Korean Hackers
The record $6.3 billion Binance crypto hack is another reminder of the persistent threat posed by North Korean hackers. Beyond the staggering theft, the attack highlights their sophisticated social engineering, operational capabilities, and ability to compromise even major financial platforms.
-
New NIST Guidance Addresses Growing Threat of Rogue AI Incidents
New US government guidance addresses the growing threat of rogue AI incidents, including unauthorized actions, sandbox escapes, and evidence tampering. NIST calls for stronger monitoring, incident response, and human oversight as AI autonomy increases.
-
Botched Bugging Plot at OpenAI Raises Questions About Insider Threat Defenses
An OpenAI engineer allegedly used ChatGPT to plan and conceal a recording device in an executive meeting room. Despite the amateurish execution, the breach raises serious questions about insider threat detection and the risks of AI-assisted espionage.
-
PHP2Shell Attacks Began Before Public Disclosure, Raising Concerns About AI-Assisted Exploitation
Threat actors exploited PHP2Shell vulnerabilities days before public disclosure. Amazon researchers warn that AI may be accelerating vulnerability discovery and exploitation, shrinking the window for defenders to respond.
-
Hacker Breaches 100 Organizations With AI Agents, Demonstrates a New Era of Black Hat Capability Has Arrived
AI agents are now executing end-to-end cyberattacks with minimal human intervention. Researchers uncovered 1,100+ attacks, nearly 100 successful breaches, and an estimated cost of just $50 per breach.
-
Does Drafting 1,000 Contractors to Address Mythos AI Software Vulnerabilities Just Create New Security Issues?
Bank of America hired 1,000 contractors to address vulnerabilities uncovered by Mythos AI. But could rapid onboarding introduce new cybersecurity risks, from insider threats and excessive access privileges to lingering credentials?
-
Anthropic Warns Small AI Models Could Soon Become Self-Replicating Worms Targeting Vulnerable IoT Devices
Anthropic warns that small AI models could soon power self-replicating worms, exploiting vulnerable IoT devices without relying on central servers. Unlike traditional malware, these AI-powered worms could adapt, learn, and spread autonomously.