Claude AI APIs Can Be Abused for Data Exfiltration 2025-11-03 at 15:57 By Ionut Arghire An attacker can inject indirect prompts to trick the model into harvesting user data and sending it to the attacker’s account. The post Claude AI APIs Can Be Abused for Data Exfiltration appeared first on SecurityWeek. This article is an […]
Claude AI APIs Can Be Abused for Data Exfiltration Read More »
AI Security Firm Polygraf Raises $9.5 Million in Seed Funding 2025-10-29 at 14:23 By Eduard Kovacs Polygraf AI has developed proprietary small language model (SLM) technology designed to help organizations mitigate AI risks. The post AI Security Firm Polygraf Raises $9.5 Million in Seed Funding appeared first on SecurityWeek. This article is an excerpt from
AI Security Firm Polygraf Raises $9.5 Million in Seed Funding Read More »
AI Sidebar Spoofing Puts ChatGPT Atlas, Perplexity Comet and Other Browsers at Risk 2025-10-23 at 17:10 By Eduard Kovacs SquareX has shown how malicious browser extensions can impersonate AI sidebar interfaces. The post AI Sidebar Spoofing Puts ChatGPT Atlas, Perplexity Comet and Other Browsers at Risk appeared first on SecurityWeek. This article is an excerpt
AI Sidebar Spoofing Puts ChatGPT Atlas, Perplexity Comet and Other Browsers at Risk Read More »
Vibe Coding’s Real Problem Isn’t Bugs—It’s Judgment 2025-10-23 at 14:39 By Kevin Townsend As AI coding tools flood enterprises with functional but flawed software, researchers urge embedding security checks directly into the AI workflow. The post Vibe Coding’s Real Problem Isn’t Bugs—It’s Judgment appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View
Vibe Coding’s Real Problem Isn’t Bugs—It’s Judgment Read More »
Mobile Security: Verizon Says Attacks Soar, AI-Powered Threats Raise Alarm 2025-10-23 at 13:05 By Eduard Kovacs Verizon’s 2025 Mobile Security Index shows that 85% of organizations believe mobile device attacks are on the rise. The post Mobile Security: Verizon Says Attacks Soar, AI-Powered Threats Raise Alarm appeared first on SecurityWeek. This article is an excerpt
Mobile Security: Verizon Says Attacks Soar, AI-Powered Threats Raise Alarm Read More »
Keycard Emerges From Stealth Mode With $38 Million in Funding 2025-10-22 at 15:43 By Ionut Arghire The company’s IAM platform identifies AI agents, supports assigning permission to them, and tracks all activity. The post Keycard Emerges From Stealth Mode With $38 Million in Funding appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Keycard Emerges From Stealth Mode With $38 Million in Funding Read More »
Beyond the Black Box: Building Trust and Governance in the Age of AI 2025-10-14 at 15:04 By Steve Durbin Balancing innovation with ethical governance is crucial for ensuring fairness, accountability, and public trust in the age of intelligent machines. The post Beyond the Black Box: Building Trust and Governance in the Age of AI appeared
Beyond the Black Box: Building Trust and Governance in the Age of AI Read More »
Your SOC is tired, AI isn’t 2025-10-10 at 07:39 By Anamarija Pogorelec Security teams have discussed AI in the SOC for years, but solid evidence of its impact has been limited. A recent benchmark study by Dropzone puts measurable evidence behind the idea, showing that AI agents can help analysts work faster and with greater
Your SOC is tired, AI isn’t Read More »
GitHub Copilot Chat Flaw Leaked Data From Private Repositories 2025-10-09 at 14:04 By Ionut Arghire Hidden comments allowed full control over Copilot responses and leaked sensitive information and source code. The post GitHub Copilot Chat Flaw Leaked Data From Private Repositories appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
GitHub Copilot Chat Flaw Leaked Data From Private Repositories Read More »
AI Takes Center Stage at DataTribe’s Cyber Innovation Day 2025-10-08 at 20:02 By Kevin Townsend From defending AI agents to teaching robots to move safely, finalists at this year’s DataTribe Challenge are charting the next frontier in cybersecurity innovation. The post AI Takes Center Stage at DataTribe’s Cyber Innovation Day appeared first on SecurityWeek. This
AI Takes Center Stage at DataTribe’s Cyber Innovation Day Read More »
Will AI-SPM Become the Standard Security Layer for Safe AI Adoption? 2025-10-08 at 19:31 By Etay Maor How security posture management for AI can protect against model poisoning, excessive agency, jailbreaking and other LLM risks. The post Will AI-SPM Become the Standard Security Layer for Safe AI Adoption? appeared first on SecurityWeek. This article is
Will AI-SPM Become the Standard Security Layer for Safe AI Adoption? Read More »
Google DeepMind’s New AI Agent Finds and Fixes Vulnerabilities 2025-10-08 at 16:35 By Eduard Kovacs The new product is called CodeMender and it can rewrite vulnerable code to prevent future exploits. The post Google DeepMind’s New AI Agent Finds and Fixes Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
Google DeepMind’s New AI Agent Finds and Fixes Vulnerabilities Read More »
Google Offers Up to $20,000 in New AI Bug Bounty Program 2025-10-08 at 16:26 By Ionut Arghire The company has updated the program’s scope and has combined the rewards for abuse and security issues into a single table. The post Google Offers Up to $20,000 in New AI Bug Bounty Program appeared first on SecurityWeek.
Google Offers Up to $20,000 in New AI Bug Bounty Program Read More »
North Korea’s IT workers are targeting firms beyond tech, crypto, and the U.S. 2025-10-01 at 17:24 By Zeljka Zorz North Korea’s clandestine IT Worker (ITW) program, which is long known for targeting U.S. technology firms and crypto firms, has broadened its scope to attempt to infiltrate a variety of industries worldwide, including finance, healthcare, public
North Korea’s IT workers are targeting firms beyond tech, crypto, and the U.S. Read More »
Google Patches Gemini AI Hacks Involving Poisoned Logs, Search Results 2025-09-30 at 18:45 By Eduard Kovacs Researchers found more methods for tricking an AI assistant into aiding sensitive data theft. The post Google Patches Gemini AI Hacks Involving Poisoned Logs, Search Results appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
Google Patches Gemini AI Hacks Involving Poisoned Logs, Search Results Read More »
Salesforce AI Hack Enabled CRM Data Theft 2025-09-25 at 21:26 By Eduard Kovacs Prompt injection has been leveraged alongside an expired domain to steal Salesforce data in an attack named ForcedLeak. The post Salesforce AI Hack Enabled CRM Data Theft appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Salesforce AI Hack Enabled CRM Data Theft Read More »
Top 25 MCP Vulnerabilities Reveal How AI Agents Can Be Exploited 2025-09-23 at 15:43 By Kevin Townsend A new ranking of Model Context Protocol weaknesses highlights critical risks—from prompt injection to command injection—and provides a roadmap for securing the foundations of agentic AI. The post Top 25 MCP Vulnerabilities Reveal How AI Agents Can Be
Top 25 MCP Vulnerabilities Reveal How AI Agents Can Be Exploited Read More »
Mycroft Raises $3.5 Million for AI-Powered Security and Compliance Platform 2025-09-22 at 16:11 By Eduard Kovacs The Canada-based company has emerged from stealth with autonomous AI agents designed to manage and operate the security and IT stack. The post Mycroft Raises $3.5 Million for AI-Powered Security and Compliance Platform appeared first on SecurityWeek. This article
Mycroft Raises $3.5 Million for AI-Powered Security and Compliance Platform Read More »
ChatGPT Tricked Into Solving CAPTCHAs 2025-09-19 at 14:30 By Ionut Arghire The AI agent was able to solve different types of CAPTCHAs and adjusted its cursor movements to better mimic human behavior. The post ChatGPT Tricked Into Solving CAPTCHAs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
ChatGPT Tricked Into Solving CAPTCHAs Read More »
ChatGPT Targeted in Server-Side Data Theft Attack 2025-09-18 at 18:49 By Eduard Kovacs OpenAI has fixed this zero-click attack method called by researchers ShadowLeak. The post ChatGPT Targeted in Server-Side Data Theft Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
ChatGPT Targeted in Server-Side Data Theft Attack Read More »