93 stories tagged Security · page 4 of 4
GitHub's security team fixed a critical remote code execution flaw in less than six hours after it was reported. The vulnerability, found by Wiz Research using AI models, could have exposed millions of public and private repositories.
A team of AI researchers discovered 38 critical vulnerabilities in OpenEMR, software used by 100,000 healthcare providers. The findings highlight the urgent need for better security in open-source medical systems.
Hoop introduces an open-source control layer to safely manage AI interactions with production systems. It aims to bridge the gap between AI development and real-world deployment.
Routiium is a new self-hosted, OpenAI-compatible LLM gateway that includes a unique tool-result guard feature. This innovation addresses a critical security gap in LLM agent loops by monitoring tool outputs, not just user inputs.
Anthropic's highly restricted Mythos AI model has been breached by hackers, raising concerns about AI safety. The incident highlights vulnerabilities in even the most secure AI systems.
A new study highlights how AI agents can be misled by adversarial environments that manipulate tool outputs. The research introduces the concept of Adversarial Environmental Injection (AEI) to formalize this security risk.
Researchers introduce GoCoMA, a multimodal framework to identify the source of LLM-generated code. This addresses security and licensing concerns by analyzing code stylometry and binary image representations.
As AI-generated code becomes more prevalent, formal verification is crucial to ensure reliability and security. This shift requires new tools and methodologies to validate machine-written software.
SuperHQ introduces a new way to run AI coding agents in isolated microVMs, ensuring system safety and clean workflows. The tool provides a unified diff view for managing changes without affecting the host environment.
The leaked source code of Claude AI reveals internal tensions and conflicting priorities in AI development. The incident highlights the challenges of balancing innovation with security in large-scale AI projects.
OpenAI CEO Sam Altman has published a blog post responding to a critical New Yorker article and an apparent attack on his home. He defends his leadership and transparency in the face of growing scrutiny.
OpenAI has responded to a supply chain attack on Axios by rotating macOS code signing certificates and updating its apps. The company confirmed that no user data was compromised in the incident.
A critical vulnerability in OpenClaw allows unauthenticated attackers to gain admin access. Users are urged to assume their systems are compromised and take immediate action. The flaw highlights the urgent need for robust security measures in AI tools.
The US AI build-out relies heavily on Chinese electrical parts. This dependence raises concerns about supply chain security and geopolitical implications.
Quantum computers can break vital encryption with fewer resources than thought. This increases the threat to elliptic curve cryptosystems.
New attacks exploit GPU memory to hijack CPUs. GDDRHammer, GeForge, and GPUBreach give attackers complete control.
A supply-chain attack using invisible Unicode code has affected GitHub and other repositories. The attack exploits code that is invisible to the human eye.
Google has bumped up its Q Day deadline to 2029, warning the industry to move off RSA and EC quickly. This deadline is sooner than previously thought.
Google is investing in open source security for the AI era. The company is building new tools and developing code security to improve open source security.
CongaLine is a self-hosted AI agent fleet that allows teams and individuals to run isolated AI assistants. It prioritizes security and offers flexible deployment options.
Anthropic is set to preview its powerful Mythos model to combat AI cyberthreats. This move aims to enhance security against emerging threats.