Researchers have discovered a first-of-its-kind supply-chain vulnerability in OpenAI’s official skills repository. OpenAI maintains an official GitHub repository of skills that teach…
News
Xbow spent $40K on AI and cracked Google Chrome wide open
A chain of vulnerabilities in Google’s Chrome browser could have enabled researchers to take control of one billion Windows machines worldwide —…
Bank of America spent millions on anti-money-laundering tech, but not enough to avoid a $1.2B fine
Bank of America has had to spend big on IT in response to an AI security audit and findings that its anti-money-laundering…
Linux kernel gets a fix for a flaw that enabled attackers to escape VMs
The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack, in which an attacker operating inside a virtual machine…
BeyondTrust zero-day tied to Chinese spies puts Remote Support users on alert
Organizations running self-hosted BeyondTrust Remote Support should treat exposed appliances as potentially compromised after a suspected Chinese espionage group exploited a critical…
Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers say
Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community. They are…
Malware evasion made easier with AI — but behavior still gives it away
Fresh research suggests recent panic over AI-generated malware may be overblown. Last month Anthropic detailed how Russia-linked cyberespionage group Midnight Blizzard used…
No click required: How the ad industry became a pipeline for mercenary spyware
That ad you just scrolled past on your phone but barely spared a look or click? It could be tracking your movements…
TypeSafe’s Jev ‘even more susceptible to attack’ than LLMs, says security vendor
Although the Jev model rolled out last month by TypeSafe claims to have significant advantages over traditional LLMs, a security report published…
Cisco warns of actively exploited Secure Email Gateway flaw
A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers towrite arbitrary files on the underlying operating system. In an…