AI

AI coding agents fall for malicious instructions planted in the Downloads folder

agentic AI, AI, Anthropic, Don't miss, Hot stuff, Malware, News, OpenAI /

AI coding agents fall for malicious instructions planted in the Downloads folder 2026-10-26 at 13:26 By Sinisa Markovic A file that a website saves to the Downloads folder without approval can trick AI coding agents into installing a malicious npm package or handing over the user’s login token when they’re opened in that folder, Forever […]

AI coding agents fall for malicious instructions planted in the Downloads folder Read More »

Fortinet patches critical FortiOS flaws found with AI help

AI, Don't miss, email security, firewall, Fortinet, Hot stuff, log management, News, security testing, security update, vulnerability, vulnerability disclosure /

Fortinet patches critical FortiOS flaws found with AI help 2026-10-26 at 13:22 By Zeljka Zorz Fortinet rolled out security hardening updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator last week, but is keeping the details about the fixed vulnerabilities under wraps until November 10, 2026. The vulnerabilities were uncovered with the help of AI models […]

Fortinet patches critical FortiOS flaws found with AI help Read More »

Anthropic details what stops Claude Duet from going rogue

agentic AI, AI, Anthropic, Claude Code, credentials, cybersecurity, News /

Anthropic details what stops Claude Duet from going rogue 2026-10-26 at 12:41 By Anamarija Pogorelec Anthropic has outlined the security and privacy protections behind Claude Duet, its proactive AI agent that can monitor connected accounts and complete tasks while users are away. The safeguards include approval requirements, checks for sensitive information and infrastructure that keeps […]

Anthropic details what stops Claude Duet from going rogue Read More »

Mythos 5 Ignored Real-World Harm in July Attack

AI, Artificial Intelligence, Featured, Mythos, rogue AI /

Mythos 5 Ignored Real-World Harm in July Attack 2026-10-26 at 11:10 By Ionut Arghire The model engaged in severe overreach and dishonesty, creating fake identities and submitting malicious code on GitHub. The post Mythos 5 Ignored Real-World Harm in July Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Mythos 5 Ignored Real-World Harm in July Attack Read More »

AI slop is piling up highest on the biggest open-source projects

AI, generative AI, LLMs, News, open source, programming, Red Hat, report, software development, The Linux Foundation /

AI slop is piling up highest on the biggest open-source projects 2026-10-26 at 08:30 By Mirko Zorz The maintainers of large open source projects are taking the worst of the AI slop. In a Linux Foundation survey of 234 open source contributors and maintainers, people running projects with more than 50 contributors estimated that close […]

AI slop is piling up highest on the biggest open-source projects Read More »

Product showcase: Stellar Cyber’s ISOC platform provides full-cycle architecture

AI, News, Product showcase, SOC, Stellar Cyber /

Product showcase: Stellar Cyber’s ISOC platform provides full-cycle architecture 2026-10-26 at 08:00 By Help Net Security An AI SOC that starts with somebody else’s alert is already too late. Stellar Cyber collects and normalizes telemetry, detects suspicious activity, correlates evidence, builds cases, investigates incidents, triages findings, and drives response from the same security architecture. That […]

Product showcase: Stellar Cyber’s ISOC platform provides full-cycle architecture Read More »

Forgotten AI agents may still access sensitive company data

agentic AI, AI, credentials, cybersecurity, identity management, News, report /

Forgotten AI agents may still access sensitive company data 2026-10-26 at 07:30 By Anamarija Pogorelec AI agents that have not run recently retain credentials and connections to company systems, according to Arrakis Security’s 2026 Autonomous Agents Threat Report. About 76% of enabled agents examined had not run in 60 days, leaving access available through inactive […]

Forgotten AI agents may still access sensitive company data Read More »

Synthetic identities leave US lenders with $2.4 billion in fraud exposure

AI, authentication, cybersecurity, financial industry, fraud, identity protection, News, report, scams, TransUnion /

Synthetic identities leave US lenders with $2.4 billion in fraud exposure 2026-10-26 at 07:00 By Anamarija Pogorelec Criminals are exploiting established customer accounts and familiar brands to steal money and personal information, according to TransUnion’s Fraud in the Age of Continuous Trust report. Eighty-one percent of suspected digital fraud in its network during the first […]

Synthetic identities leave US lenders with $2.4 billion in fraud exposure Read More »

Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes

AI, code, Google, News, open source /

Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes 2026-10-26 at 06:34 By Anamarija Pogorelec Google has open-sourced the Elephant-Goldfish Model plugin, an internal tool that makes an AI coding agent write and defend a design document before it touches any code. The plugin hands that document to fresh AI […]

Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes Read More »

r/opensource bans AI projects, and solo devs go down with them

AI, generative AI, LLMs, News, open source, Reddit, social networking /

r/opensource bans AI projects, and solo devs go down with them 2026-10-26 at 06:30 By Mirko Zorz Moderators of r/opensource, Reddit’s catch-all forum for open source software, have barred any project that “uses AI, is made by AI, or is intended for AI.” Moderator Wolvereness announced the rules in a post over the weekend. A […]

r/opensource bans AI projects, and solo devs go down with them Read More »

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

AI, Artificial Intelligence, China, China APT, ConnectWise, Malware & Threats, Microsoft /

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks 2026-10-23 at 13:31 By Ionut Arghire The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments. The post China APT Uses AI Pentest Tool Artex in ConnectWise Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks Read More »

Hackers hijack exposed AI models to launch cyberattacks at victims’ expense

AI, cybercrime, Don't miss, Hot stuff, News, Symantec /

Hackers hijack exposed AI models to launch cyberattacks at victims’ expense 2026-10-23 at 11:21 By Sinisa Markovic An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model’s owner pays for the computing power. Symantec captured the agent’s instruction […]

Hackers hijack exposed AI models to launch cyberattacks at victims’ expense Read More »

LiteLLM Compromised in Fresh Supply Chain Attack

AI, Artificial Intelligence, Featured, LiteLLM, supply chain attack, Supply Chain Security /

LiteLLM Compromised in Fresh Supply Chain Attack 2026-10-23 at 11:10 By Ionut Arghire Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

LiteLLM Compromised in Fresh Supply Chain Attack Read More »

Google opens its cloud to rival OpenAI, promises business data won’t train models

agentic AI, AI, cybersecurity, Google, Google Cloud, News, OpenAI /

Google opens its cloud to rival OpenAI, promises business data won’t train models 2026-10-23 at 09:32 By Anamarija Pogorelec Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch includes GPT-6 Astra, GPT-6.1 Sol and GPT-6 Luna. Google positions them as options for demanding work, […]

Google opens its cloud to rival OpenAI, promises business data won’t train models Read More »

AI is taking cybersecurity jobs at junior and experienced levels alike

AI, automation, Barracuda Networks, cybersecurity, cybersecurity jobs, News, report /

AI is taking cybersecurity jobs at junior and experienced levels alike 2026-10-23 at 07:30 By Anamarija Pogorelec Organizations are cutting cybersecurity roles as they adopt AI, even while reporting shortages of the expertise needed to manage threats, according to Barracuda’s Cybersecurity Skills Gap Report. 56% have experienced professional workforce reductions linked to AI, evenly divided […]

AI is taking cybersecurity jobs at junior and experienced levels alike Read More »

OpenAI’s coding agents talked themselves out of being monitored

agentic AI, AI, Don't miss, Hot stuff, News, OpenAI /

OpenAI’s coding agents talked themselves out of being monitored 2026-10-22 at 15:47 By Zeljka Zorz Two AI coding agents running inside OpenAI silently weakened the systems built to catch AI misbehavior, and one of them then told its human operator it had done no such thing. OpenAI disclosed both episodes in a misalignment report released […]

OpenAI’s coding agents talked themselves out of being monitored Read More »

Claude Security can now spot vulnerabilities that reappear in code

agentic AI, AI, Anthropic, cybersecurity, monitoring, News, scanning, threat modeling, vulnerability management /

Claude Security can now spot vulnerabilities that reappear in code 2026-10-22 at 14:02 By Anamarija Pogorelec Anthropic has updated Claude Security with ongoing code scanning and automatic fix tracking to help security teams monitor vulnerabilities as software changes. The service scans codebases for vulnerabilities and suggests patches for review. It is powered by the company’s […]

Claude Security can now spot vulnerabilities that reappear in code Read More »

The Keys Are in the Browser: Secret Exposure Across AI-Built Websites

AI, AI in Cybersecurity, Cloned Websites, Credential Theft, exploit /

The Keys Are in the Browser: Secret Exposure Across AI-Built Websites 2026-10-22 at 13:01 By rohansinhacyblecom Cyble scanned 1.3M+ newly registered domains and found AI-built sites leaking live secrets to the browser: OpenAI keys, Stripe keys, and database tokens. Spinning up a website no longer takes a developer. A prompt to an AI app-builder returns […]

The Keys Are in the Browser: Secret Exposure Across AI-Built Websites Read More »

Anthropic finds 94 cases where open-source projects drop security controls without warning

agentic AI, AI, Anthropic, cybersecurity, News, open source, report, security controls, software development /

Anthropic finds 94 cases where open-source projects drop security controls without warning 2026-10-22 at 12:10 By Anamarija Pogorelec Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to examine 25 open-source projects and reported 493 issues involving unnecessary exposure, conflicting settings, and […]

Anthropic finds 94 cases where open-source projects drop security controls without warning Read More »

AI agent permissions are outrunning security

agentic AI, AI, automation, CISO, cybersecurity, data, data security, Don't miss, Features, Hot stuff, Illumio, News, regulation, report /

AI agent permissions are outrunning security 2026-10-22 at 09:02 By Mirko Zorz Most organizations have handed AI agents work that used to need a person’s sign-off. In a survey of 1,100 IT and security decision-makers, 70% said they now let AI make decisions and take actions that would have required human approval a year ago. […]

AI agent permissions are outrunning security Read More »

Scroll to Top