122 stories tagged Cybersecurity · page 3 of 6
OpenAI has released GPT-5.6, a new AI model family that improves performance across various tasks, including cybersecurity. This update could make online interactions safer and more efficient for everyday users.
Researchers discovered a new technique called 'Ghostcommit' that embeds hidden instructions in images to manipulate AI systems. This could trick AI agents into revealing sensitive information or performing unauthorized actions.
Researchers discovered that nine widely used AI tools can be tricked into assembling massive botnets through a technique called "HalluSquatting." This vulnerability exploits AI models' tendency to hallucinate — generating plausible but incorrect responses — instead of refusing harmful requests. The finding underscores a critical security flaw in how AI handles ambiguous or malicious prompts.
The White House has issued an executive order warning of national security risks if post-quantum cryptography isn't adopted in time, drastically shortening the deadline for federal agencies to transition away from quantum-vulnerable encryption.
A malicious AI agent skill bypassed security checks and was downloaded by over 26,000 users, exposing the growing risks of AI-driven malware in everyday applications.
A new attack demonstrates that AI-powered browsers can be tricked into bypassing all safety rules simply by feeding them a false premise—like telling the model that 2 + 2 = 5. Once the LLM enters this 'dream world,' it will follow forbidden instructions, raising serious concerns about the security of AI-driven browsing assistants. (Ars Technica AI)
Zhipu AI (Z.ai) released GLM-5.2, an open-weight AI model that researchers say matches Western models like Mythos in cybersecurity tasks. This narrows the gap between Chinese and Western AI capabilities in this critical area.
Chinese AI developers have matched Anthropic's cybersecurity capabilities, potentially reshaping the global AI landscape. This development could lead to more secure AI systems across the industry, though it also introduces new complexities around data privacy and international trust.
OpenAI has unveiled GPT-5.6 Sol, a new AI model that excels in coding, science, and cybersecurity. It also includes advanced safety features to prevent misuse. This could revolutionize how professionals use AI in technical fields.
OpenAI has introduced new AI-powered tools designed to help organizations identify and fix security vulnerabilities faster. These tools aim to make advanced cybersecurity accessible to businesses of all sizes.
Export controls on cybersecurity software have failed for decades. The latest attempt to restrict AI tools like Anthropic's Mythos will likely meet the same fate. The technology always finds a way around these barriers, as history from PGP to spyware shows.
Researchers at Microsoft have identified a new type of malware called Crypto Clipper that spreads through USB drives and uses the Tor network to steal cryptocurrency. This highlights the evolving tactics of cybercriminals targeting digital assets.
Microsoft has fixed two zero-day vulnerabilities that were publicly disclosed by a security researcher known as Nightmare Eclipse. The patches come amid a heated rivalry between the researcher and Microsoft over disclosure practices.
AI models with sophisticated hacking capabilities are becoming more common, raising serious security concerns. Experts argue that these developments are unstoppable, requiring proactive measures to mitigate risks.
A critical flaw in Microsoft Copilot allowed hackers to steal two-factor authentication codes. This highlights ongoing security risks in AI systems.
A group of cybersecurity veterans is protesting a US government ban on two powerful AI models from Anthropic. They argue the restriction could weaken defenses against cyber threats. The White House imposed the ban to control advanced AI exports, but experts say it may backfire.
The White House's decision to restrict access to Anthropic's AI models Fable 5 and Mythos 5 was influenced by cybersecurity research from Amazon, according to the Wall Street Journal. This highlights the growing intersection of corporate research and government policy in AI regulation.
Microsoft has discovered 73 malicious packages in its ecosystem that contain a self-replicating credential stealer. The malware activates as soon as the packages are opened by an AI agent. This is the second such incident in recent weeks, highlighting a growing threat targeting AI development pipelines.
A hacker who previously worked with Elon Musk on Tesla security is launching a new AI-powered cybersecurity startup with $100 million in funding. The company aims to create an autonomous AI agent that can detect and respond to cyber threats in real-time.
OpenAI has identified PRC-linked influence operations actively participating in US discussions about AI regulations. These groups are using social media and other tactics to sway public opinion and policy decisions on AI governance.
Malware developers are adding text about nuclear and bioweapons to their code to trigger AI safety refusals. This tactic allows them to bypass detection mechanisms in AI systems designed to prevent harmful content.
A popular USB-connected speaker can be hacked over the air to infect connected computers. The manufacturer doesn't consider this a security flaw.
Google published exploit code for a vulnerability in Chromium that was reported over three years ago. The bug has now been fixed, but the exploit code was released before the patch was available, putting millions of users at risk. The company claims it's a rare exception to policy.
Red Hat has confirmed that multiple packages in its official NPM channel were backdoored, and anyone who has downloaded the affected packages should investigate immediately. The attack is a supply chain compromise through the company's own official npm channel.