87 stories tagged Cybersecurity · page 2 of 4
Researchers at Microsoft have identified a new type of malware called Crypto Clipper that spreads through USB drives and uses the Tor network to steal cryptocurrency. This highlights the evolving tactics of cybercriminals targeting digital assets.
Microsoft has fixed two zero-day vulnerabilities that were publicly disclosed by a security researcher known as Nightmare Eclipse. The patches come amid a heated rivalry between the researcher and Microsoft over disclosure practices.
AI models with sophisticated hacking capabilities are becoming more common, raising serious security concerns. Experts argue that these developments are unstoppable, requiring proactive measures to mitigate risks.
A critical flaw in Microsoft Copilot allowed hackers to steal two-factor authentication codes. This highlights ongoing security risks in AI systems.
A group of cybersecurity veterans is protesting a US government ban on two powerful AI models from Anthropic. They argue the restriction could weaken defenses against cyber threats. The White House imposed the ban to control advanced AI exports, but experts say it may backfire.
The White House's decision to restrict access to Anthropic's AI models Fable 5 and Mythos 5 was influenced by cybersecurity research from Amazon, according to the Wall Street Journal. This highlights the growing intersection of corporate research and government policy in AI regulation.
Microsoft has discovered 73 malicious packages in its ecosystem that contain a self-replicating credential stealer. The malware activates as soon as the packages are opened by an AI agent. This is the second such incident in recent weeks, highlighting a growing threat targeting AI development pipelines.
A hacker who previously worked with Elon Musk on Tesla security is launching a new AI-powered cybersecurity startup with $100 million in funding. The company aims to create an autonomous AI agent that can detect and respond to cyber threats in real-time.
OpenAI has identified PRC-linked influence operations actively participating in US discussions about AI regulations. These groups are using social media and other tactics to sway public opinion and policy decisions on AI governance.
Malware developers are adding text about nuclear and bioweapons to their code to trigger AI safety refusals. This tactic allows them to bypass detection mechanisms in AI systems designed to prevent harmful content.
A popular USB-connected speaker can be hacked over the air to infect connected computers. The manufacturer doesn't consider this a security flaw.
Google published exploit code for a vulnerability in Chromium that was reported over three years ago. The bug has now been fixed, but the exploit code was released before the patch was available, putting millions of users at risk. The company claims it's a rare exception to policy.
Red Hat has confirmed that multiple packages in its official NPM channel were backdoored, and anyone who has downloaded the affected packages should investigate immediately. The attack is a supply chain compromise through the company's own official npm channel.
President Trump signed an executive order creating a voluntary framework for AI companies to share their frontier models with the federal government before public release. The order aims to promote secure innovation and strengthen the cybersecurity of critical infrastructure.
Anthropic is rolling out its AI security tool, Mythos, to 150 organizations in 15 countries. This move aims to protect critical infrastructure like power grids and hospitals from cyberattacks that could impact millions.
OpenAI is launching new tools to help people access accurate election information and combat misinformation. They're also working to increase transparency in AI to ensure fair and informed voting.
The Open Web Application Security Project (OWASP) launched Agent Memory Guard, a tool to defend AI agents from memory poisoning attacks. This is crucial as AI systems become more integrated into daily tasks.
The head of GCHQ, the UK's intelligence agency, has warned that AI could become an unstoppable force in cyber warfare. This highlights the urgent need for global cooperation to manage AI's risks and ensure its responsible use.
Cisco has published a guide to help organizations protect themselves from AI-driven cyber threats. The guide provides practical steps to secure systems against increasingly sophisticated attacks.
Cisco is integrating OpenAI's Codex to speed up software development and improve cybersecurity. This partnership aims to automate tasks, reduce errors, and enhance productivity for enterprise teams.
AI tools are now identifying software flaws faster than developers can fix them. This shift is changing how companies approach cybersecurity. These tools can scan code for weaknesses in seconds, but fixing them still requires human time and effort.
A hacker group called TeamPCP is sabotaging open-source software, including projects on GitHub. This threatens the security of countless applications and services that rely on open-source code.
Google is expanding access to CodeMender, an AI tool designed to identify and fix security vulnerabilities in code. This move positions Google to compete directly with Anthropic’s Mythos in the cybersecurity market.
Terminal Guardian is an open-source tool that prevents AI agents from executing harmful commands in your terminal. It's designed to keep your system safe while you use AI-powered tools. This is a big deal for anyone using AI assistants that interact with their computer.