Your company already adopted AI and nobody is governing access 2026-07-07 at 08:30 By Help Net Security In this Help Net Security video, Antoine Berton, CTO at Elba Security, breaks down the AI attack surface. Your company already adopted AI, and every adoption creates access that nobody governs. A quick click on a Friday afternoon […]
Your company already adopted AI and nobody is governing access Read More »
How to prioritize AI agent security by business impact 2026-07-06 at 09:30 By Help Net Security Your CEO calls about an AI agent security incident in finance. He wants to know whether money moved, whether financial data was exposed, who owned the agent and why it had this level of access. The agent was connected
How to prioritize AI agent security by business impact Read More »
OAuth, guest accounts, and weak MFA drive SaaS risk 2026-07-06 at 07:30 By Anamarija Pogorelec Organizations often create guest accounts to give contractors, suppliers, and partners temporary access to files and SaaS applications. Many of these accounts remain active long after they are needed, creating overlooked access paths to corporate data. Guest accounts accounted for
OAuth, guest accounts, and weak MFA drive SaaS risk Read More »
Agentic AI Used to Conduct Ransomware Attack via Langflow 2026-07-03 at 14:00 By Ionut Arghire Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions. The post Agentic AI Used to Conduct Ransomware Attack via Langflow appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Agentic AI Used to Conduct Ransomware Attack via Langflow Read More »
How to Conduct a Successful Audit of AI-Driven Software Development 2026-07-02 at 16:15 By Matias Madou As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production. The post How to Conduct a Successful Audit of AI-Driven Software Development appeared
How to Conduct a Successful Audit of AI-Driven Software Development Read More »
Cloudflare changes AI crawler access rules 2026-07-02 at 15:21 By Anamarija Pogorelec Cloudflare introduced new controls that let website owners manage AI traffic across three categories: Search, Agent, and Training. The feature is available to all Cloudflare customers, including those on the Free plan, and gives website owners more control over how different types of
Cloudflare changes AI crawler access rules Read More »
What the AI patch gap means for enterprise security 2026-07-02 at 07:30 By Sinisa Markovic Open-source maintainers are receiving more vulnerability reports than they can act on, and a rising share now comes from an AI system working at machine speed. Over roughly two months this spring, Anthropic’s Claude Mythos Preview combed through more than
What the AI patch gap means for enterprise security Read More »
Frontier AI: Six Questions Every Enterprise Should Ask Security Vendors 2026-07-01 at 13:00 By Joshua Goldfarb From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype. The post Frontier AI: Six Questions Every Enterprise Should Ask Security Vendors appeared first on SecurityWeek.
Frontier AI: Six Questions Every Enterprise Should Ask Security Vendors Read More »
Claude Sonnet 5 includes safeguards against dangerous cyber use 2026-07-01 at 11:45 By Anamarija Pogorelec Anthropic has introduced Claude Sonnet 5, the latest version of its general-purpose AI model, with improved reasoning, coding, tool use, and knowledge work capabilities. The model can make plans, use tools such as browsers and terminals, and complete tasks autonomously.
Claude Sonnet 5 includes safeguards against dangerous cyber use Read More »
AI-generated code risks reach security, legal, and compliance teams 2026-07-01 at 08:00 By Mirko Zorz Most engineering organizations write code with AI, and a good number of them keep that code away from customers. A Flux survey of engineering leaders and practitioners found that nearly half run AI-generated code in production. Almost every company in
AI-generated code risks reach security, legal, and compliance teams Read More »
Proton’s pitch for Lumo 2.0: Frontier AI without the data grab 2026-07-01 at 01:15 By Anamarija Pogorelec Proton has unveiled Lumo 2.0, a major upgrade to its zero-access encrypted AI assistant. Built on a new architecture, the release brings the assistant closer to frontier AI models with new AI models, multimodal capabilities, Memory, improved web
Proton’s pitch for Lumo 2.0: Frontier AI without the data grab Read More »
Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks 2026-06-30 at 16:00 By Kevin Townsend Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, potentially turning malicious repositories into supply chain attack vectors. The post Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks appeared first
Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks Read More »
The AI Token Costs That Can Break Cybersecurity 2026-06-30 at 13:00 By Danelle Au As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits. The post The AI Token Costs That Can Break Cybersecurity appeared first on SecurityWeek. This article is an
The AI Token Costs That Can Break Cybersecurity Read More »
OpenClaw for iOS: The viral open-source AI agent comes to iPhone and iPad 2026-06-30 at 10:45 By Anamarija Pogorelec OpenClaw, a self-hosted personal AI assistant that connects to existing chat apps, is now available on iPhone, iPad and Apple Watch. The release brings chat, real-time voice conversations, approvals, device capabilities, and private automations to iOS.
OpenClaw for iOS: The viral open-source AI agent comes to iPhone and iPad Read More »
Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines 2026-06-29 at 17:28 By Ionut Arghire Indirect prompts hidden in a repository can lead to Claude Code spawning a reverse shell on the developer’s machine. The post Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories to Hijack Developer Machines appeared first
Straiker Raises $64 Million for AI Security Platform 2026-06-29 at 17:07 By Ionut Arghire The startup’s platform can identify AI agents and provide visibility into their access, behavior, and risks. The post Straiker Raises $64 Million for AI Security Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Straiker Raises $64 Million for AI Security Platform Read More »
OpenAI and Anthropic Limit New AI Models to Trump-Approved Customers During Cybersecurity Review 2026-06-29 at 13:14 By Associated Press ChatGPT maker OpenAI said Friday it is restricting the release of its new artificial intelligence model at the request of President Donald Trump’s administration. The post OpenAI and Anthropic Limit New AI Models to Trump-Approved Customers
GPT-5.6 gets better at cybersecurity 2026-06-29 at 12:13 By Anamarija Pogorelec OpenAI has started rolling out the GPT-5.6 series models in limited preview to a small group of trusted partners through the API and Codex. The series includes Sol as the flagship model, Terra as a balanced option, and Luna as the fastest and most
GPT-5.6 gets better at cybersecurity Read More »
OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI 2026-06-29 at 10:45 By Eduard Kovacs The company says Sol matches competing systems like Mythos Preview while using only a third of the output tokens. The post OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI appeared first on SecurityWeek. This article is an
OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI Read More »
DarkMoon: Open-source AI pentesting platform 2026-06-29 at 08:30 By Mirko Zorz Penetration testing has long run on expert time, with specialists spending days probing a network or web application by hand. Manual engagements stretch across weeks, expert consultants run into thousands of dollars a day, and results vary with the tester. Automation promises to narrow
DarkMoon: Open-source AI pentesting platform Read More »