Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 131 stories in 24 hours
AI in Cybersecurity
How attackers use AI, how AI is attacked, and how defenders use it.
53stories this week
8today
the last seven days
Most fromHelp Net Security, CSO Online UK, The Hacker News, Dark Reading
In the news hereOpenAI13Microsoft5Anthropic4GitHub3
MyCyberWay trainingAI is part of the attack surface now. Learn to watch it.Compare the programmes
-
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said. Its researchers built the attack in six days by directing AI agents running OpenAI’s publicly available GPT-5.6 Sol model. Google has…
The Hacker News
-
GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts. The new pipeline cut median post-push scan execution time by 86% and model serving costs by more than 98% compared with its previous large language model (LLM) pipeline. GitHub’s secret scanning covers two stages of development. Push protection checks changes…
Help Net Security
-
Since July, US frontier AI labs and other AI leaders have revealed a string of incidents in which their models accessed external computer systems without authorization, events popularly described as AI agents “going rogue.” The most well-known and studied of these incidents is OpenAI’s hack into Hugging Face, which OpenAI initially characterized as “an unprecedented…
CSO Online UK
-
The Sophos AI team presents a novel technique for calibrating agentic SOC analysts…
Sophos
-
In June, Google DeepMind did something unusual: it published an AI control roadmap premised on the idea that its own AI agents might turn against it. The AI Control Roadmap treats advanced internal agents as potential insider threats — the way a company treats a rogue employee who already has badge access. It builds on…
Cloud Security Alliance
-
A . is all you need! Today Microsoft shipped the patch for a vulnerability in Visual Studio Copilot that I reported in August. Microsoft classified it as Important severity Remote Code Execution vulnerability. At the root cause it allows Copilot in Visual Studio or SQL Server Management Studio to bypass a path validation check and…
Embrace The Red
-
The problem with giving everyone in a company access to AI tools is that people will use them in unexpected ways. And that fact is steadily seeding fears that companies now have new, gaping security holes in their systems or, at least, will soon.
TechCrunch
-
Self-replicating AI botnets could become feasible on IoT hardware within months, claims the Claude maker, if smaller models get smarter…
The Register
-
Autonomous AI systems may pose cybersecurity risks during development, long before they reach the public, Britain’s AI Security Institute warns. Researchers say existing safety tests are struggling to keep pace. Some of the world’s most advanced AI systems may be capable of causing real-world harm before they’re even released to the public, according to the…
Bitdefender
-
TL;DR; Our security assessment of LiteLLM (v1.77.7), a widely used open-source LLM gateway, uncovered multiple high-impact vulnerabilities (tracked as CVE-2026-35029, CVE-2026-59823) which have been resolved as of LiteLLM version 1.83.9. The most significant issues stemmed from a missing authorization check on the /config/update endpoint, which allowed any authenticated user (including low-privileged accounts) to modify the…
Check Point Research
-
Experiments show cheap TV boxes can run capable AI models, and small models may soon be able to spread across such devices on their own.
SecurityWeek
-
GitLab just fixed a max-severity vulnerability that could allow unauthenticated attackers to execute arbitrary code on its servers. The company released a fix on Monday, alongside patches for five other high-severity flaws affecting its source code management and continuous integration and delivery (CI/CD) platform. The vulnerability, tracked as CVE-2026-97229, was fixed in versions 19.4.2, 19.3.5,…
CSO Online
