Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 125 stories in 24 hours
AI & Emerging Technology
👉 AI misuse, automation, deepfakes
77stories this week
11today
the last seven days
Most fromHelp Net Security, SecurityWeek, CSO Online UK, The Hacker News
In the news hereOpenAI17Microsoft9Google9Anthropic8APT29 (Cozy Bear)1
MyCyberWay trainingAI is part of the attack surface now. Learn to watch it.Compare the programmes
-
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a major insurer’s production website, on its own. One login request let the user choose where…
The Hacker News
-
GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts. The new pipeline cut median post-push scan execution time by 86% and model serving costs by more than 98% compared with its previous large language model (LLM) pipeline. GitHub’s secret scanning covers two stages of development. Push protection checks changes…
Help Net Security
-
Since July, US frontier AI labs and other AI leaders have revealed a string of incidents in which their models accessed external computer systems without authorization, events popularly described as AI agents “going rogue.” The most well-known and studied of these incidents is OpenAI’s hack into Hugging Face, which OpenAI initially characterized as “an unprecedented…
CSO Online UK
-
AI can speed up attacks, with faster reconnaisance, while defenders should use AI to accelerate existing SOC work, but not chase after full autonomy…
Computer Weekly
-
The Sophos AI team presents a novel technique for calibrating agentic SOC analysts…
Sophos
-
In June, Google DeepMind did something unusual: it published an AI control roadmap premised on the idea that its own AI agents might turn against it. The AI Control Roadmap treats advanced internal agents as potential insider threats — the way a company treats a rogue employee who already has badge access. It builds on…
Cloud Security Alliance
-
A . is all you need! Today Microsoft shipped the patch for a vulnerability in Visual Studio Copilot that I reported in August. Microsoft classified it as Important severity Remote Code Execution vulnerability. At the root cause it allows Copilot in Visual Studio or SQL Server Management Studio to bypass a path validation check and…
Embrace The Red
-
The problem with giving everyone in a company access to AI tools is that people will use them in unexpected ways. And that fact is steadily seeding fears that companies now have new, gaping security holes in their systems or, at least, will soon.
TechCrunch
-
Self-replicating AI botnets could become feasible on IoT hardware within months, claims the Claude maker, if smaller models get smarter…
The Register
-
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit data outside approved networks.
The Record
-
Autonomous AI systems may pose cybersecurity risks during development, long before they reach the public, Britain’s AI Security Institute warns. Researchers say existing safety tests are struggling to keep pace. Some of the world’s most advanced AI systems may be capable of causing real-world harm before they’re even released to the public, according to the…
Bitdefender
-
Risks are growing at a time when companies rely more than ever on vendors for cybersecurity, according to a new report.
Cybersecurity Dive
