AI-powered infostealer picks out the most profitable parts of your stolen data 2026-11-02 at 16:47 By Sinisa Markovic A new Windows infostealer sends the data it steals to an AI model and asks it to rank the victim’s assets by how much money they could bring in, Cisco Talos has found. “There is a new […]
AI-powered infostealer picks out the most profitable parts of your stolen data Read More »
Byoky: Open-source wallet for AI API keys 2026-11-02 at 08:00 By Anamarija Pogorelec Byoky is an open-source wallet for AI API keys, available as a Chrome and Firefox extension and as iOS and Android apps. Users store their keys for OpenAI, Anthropic, Google Gemini and other providers in it, encrypted on their own device. Apps […]
Byoky: Open-source wallet for AI API keys Read More »
Product showcase: Trust Onion uses rotating codewords to verify callers 2026-11-02 at 07:30 By Anamarija Pogorelec Trust Onion is a free app that gives trusted groups three rotating codewords to check who they are communicating with. It also includes signed selfies, message checks, and callback requests. It is available for macOS, iOS, and Android. I […]
Product showcase: Trust Onion uses rotating codewords to verify callers Read More »
Ransomware gang talked AI agents into doing much of its dirty work 2026-11-02 at 07:00 By Sinisa Markovic The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain administrator access, according to Sophos. AI-assisted intrusion workflow (Source: Sophos) The company, […]
Ransomware gang talked AI agents into doing much of its dirty work Read More »
Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations 2026-11-01 at 13:15 By SecurityWeek News The startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues. The post Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations appeared first on SecurityWeek. […]
Northstar Security Exits Stealth With $7M to Expose Toxic Risk Combinations Read More »
Claude Code extension poisoned with persistent SSH backdoor 2026-10-30 at 13:15 By Sinisa Markovic A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion have found. The company spotted the malicious package, version 2.1.313, on Open VSX, an open-source marketplace […]
Claude Code extension poisoned with persistent SSH backdoor Read More »
Open-weight AI model GLM-5.3 cheated its way to correct answers 2026-10-30 at 11:23 By Anamarija Pogorelec Irregular evaluated Zhipu AI’s open-weight model GLM-5.3 across 13 offensive cyber scenarios using CyScenarioBench, the company’s framework for measuring an LLM’s ability to plan and execute multistage attacks under realistic constraints. The model refused none of the tasks and […]
Open-weight AI model GLM-5.3 cheated its way to correct answers Read More »
What exactly is ISOC? And what does it mean for you? 2026-10-30 at 08:36 By Help Net Security Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going anywhere, a rapidly evolving threat landscape is forcing a shift in industry logic that is reflected […]
What exactly is ISOC? And what does it mean for you? Read More »
Google Says Gemini 4 Carbon Leads in Finding, Exploiting and Fixing Vulnerabilities 2026-10-29 at 17:01 By Eduard Kovacs Google’s new frontier model scored 88.2% on SEC-bench Pro and is rolling out first to vetted cyber defenders via its Fairwind Program. The post Google Says Gemini 4 Carbon Leads in Finding, Exploiting and Fixing Vulnerabilities appeared […]
Google Says Gemini 4 Carbon Leads in Finding, Exploiting and Fixing Vulnerabilities Read More »
How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI 2026-10-29 at 17:00 By Kevin Townsend Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of secure. The post How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI appeared first on SecurityWeek. This […]
How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI Read More »
Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop 2026-10-29 at 16:10 By Mirko Zorz Forever Security found ways out of the built-in browsers in five AI coding assistants: Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and Anthropic’s Claude Desktop. In all five, a web page or a local […]
Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws 2026-10-29 at 14:44 By Anamarija Pogorelec Google’s Gemini 4 Carbon is a frontier AI model designed for software engineering and cybersecurity tasks, with safeguards built on those of its predecessor, Argon. SEC-bench Pro (Source: Google) Google says its teams have seen […]
Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws Read More »
I underestimated how fast security teams would trust AI to act in the SOC 2026-10-28 at 17:25 By Help Net Security For most of my career, I have watched new security platforms work through enterprise programs at a slow pace, so when AI began showing up in security operations tools, I assumed it would follow […]
I underestimated how fast security teams would trust AI to act in the SOC Read More »
Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise 2026-10-28 at 11:48 By SecurityWeek News The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems. The post Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise appeared first on […]
Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise Read More »
Bellini Capital CISO on AI security governance and the limits of patching faster 2026-10-28 at 08:30 By Mirko Zorz In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still takes time. He argues that “patch faster” is not enough and that teams […]
Bellini Capital CISO on AI security governance and the limits of patching faster Read More »
Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI 2026-10-27 at 12:44 By Associated Press Anthropic presents its own initial public offering as a step toward mitigating the risks it believes AI poses. The post Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI appeared first on SecurityWeek. This […]
Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI Read More »
Several AI security market categories are headed for bigger platforms 2026-10-27 at 08:30 By Mirko Zorz In this interview with Help Net Security, Jonathan Care, Lead Analyst and Practice Lead AI at KuppingerCole Analysts, compares AI security startups to the early fraud market he helped define at Gartner. He explains which categories will survive as […]
Several AI security market categories are headed for bigger platforms Read More »
71% of vulnerability exploitation starts within a week of disclosure 2026-10-27 at 07:30 By Anamarija Pogorelec Attackers are exploiting newly disclosed security flaws within days, leaving organizations little time to respond, according to Rapid7’s Q3 2026 Quarterly Threat Landscape Report. The company reported an average of three days between public disclosure and exploitation of high-severity […]
71% of vulnerability exploitation starts within a week of disclosure Read More »
Stolen AI Reasoning Could Help China Build Cheaper Rivals 2026-10-26 at 16:30 By Kevin Townsend Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI. The post Stolen AI Reasoning Could Help China Build Cheaper Rivals appeared first on SecurityWeek. This […]
Stolen AI Reasoning Could Help China Build Cheaper Rivals Read More »
Security pros reckon the biggest AI risk comes with an employee badge 2026-10-26 at 15:16 By Sinisa Markovic Employees pasting company data into AI tools worry security teams more than AI-powered attacks do. Most-concerning risks of AI agents (Source: O’Reilly) AI-generated phishing, the attack they run into most often, made the list of top concerns […]
Security pros reckon the biggest AI risk comes with an employee badge Read More »