AI

OpenAI’s Daybreak uses Codex Security to identify risky attack paths

OpenAI’s Daybreak uses Codex Security to identify risky attack paths 2026-05-12 at 11:38 By Anamarija Pogorelec OpenAI Daybreak is the company’s cybersecurity initiative focused on building AI-assisted software defense into the development process from the start. It combines OpenAI models, Codex Security, and cyber-focused GPT-5.5 variants to help organizations identify, validate, and prioritize software vulnerabilities. […]

OpenAI’s Daybreak uses Codex Security to identify risky attack paths Read More »

Google researchers uncover criminal zero-day exploit likely built with AI

Google researchers uncover criminal zero-day exploit likely built with AI 2026-05-11 at 16:48 By Mirko Zorz Google’s threat intelligence researchers have linked a zero-day exploit to AI-assisted development by a criminal group. The exploit targeted a popular open-source web-based system administration tool. It allowed attackers to bypass two-factor authentication once they had valid user credentials.

Google researchers uncover criminal zero-day exploit likely built with AI Read More »

Google Detects First AI-Generated Zero-Day Exploit

Google Detects First AI-Generated Zero-Day Exploit 2026-05-11 at 16:48 By Eduard Kovacs The zero-day was designed to bypass 2FA and it was developed by a prominent cybercrime group. The post Google Detects First AI-Generated Zero-Day Exploit appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Detects First AI-Generated Zero-Day Exploit Read More »

Cloudflare Lays Off 1,100 Employees in AI-Driven Restructuring

Cloudflare Lays Off 1,100 Employees in AI-Driven Restructuring 2026-05-11 at 15:09 By Eduard Kovacs The company topped revenue and earnings forecasts for the first quarter of 2026, but its shares plunged more than 20%. The post Cloudflare Lays Off 1,100 Employees in AI-Driven Restructuring appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Cloudflare Lays Off 1,100 Employees in AI-Driven Restructuring Read More »

The scam economy has found its AI upgrade

The scam economy has found its AI upgrade 2026-05-11 at 12:32 By Anamarija Pogorelec Scam attempts continue to reach consumers via email, text messages, social media, online advertising, and phone calls. The volume of exposure has remained stable over the past year, with more than half of consumers encountering scam attempts at least monthly, according

The scam economy has found its AI upgrade Read More »

Security teams are turning to AI to survive alert overload

Security teams are turning to AI to survive alert overload 2026-05-11 at 08:18 By Anamarija Pogorelec The World Economic Forum white paper “Empowering Defenders: AI for Cybersecurity” identified AI as the biggest driver of change in cybersecurity for 94% of survey respondents. The paper found that 77% of organizations already use AI in cybersecurity, with

Security teams are turning to AI to survive alert overload Read More »

AI Firm Braintrust Prompts API Key Rotation After Data Breach

AI Firm Braintrust Prompts API Key Rotation After Data Breach 2026-05-08 at 14:14 By Ionut Arghire Hackers accessed one of the company’s AWS accounts and compromised AI provider secrets stored in Braintrust. The post AI Firm Braintrust Prompts API Key Rotation After Data Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

AI Firm Braintrust Prompts API Key Rotation After Data Breach Read More »

Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover

Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover 2026-05-08 at 11:42 By Ionut Arghire Lax extension permissions and improper trust implementation allow attackers to inject prompts in the Claude Chrome extension. The post Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover appeared first on SecurityWeek. This article is an

Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover Read More »

What Mozilla learned running an AI security bug hunting pipeline on Firefox

What Mozilla learned running an AI security bug hunting pipeline on Firefox 2026-05-08 at 01:14 By Mirko Zorz Over the past several months, Mozilla ran an agentic harness powered by Claude Mythos Preview across Firefox’s source code, identifying 271 security bugs that were fixed in Firefox 150, with additional fixes shipped in versions 149.0.2 and

What Mozilla learned running an AI security bug hunting pipeline on Firefox Read More »

One keypress is all it takes to compromise four AI coding tools

One keypress is all it takes to compromise four AI coding tools 2026-05-08 at 01:14 By Mirko Zorz Developers clone unfamiliar repositories all the time. Open-source projects, work from teammates, sample code from a tutorial, a library someone recommended on a forum. The convention is old and reasonable: you look at what’s inside before you

One keypress is all it takes to compromise four AI coding tools Read More »

Worries About AI’s Risks to Humanity Loom Over the Trial Pitting Musk Against OpenAI’s Leaders

Worries About AI’s Risks to Humanity Loom Over the Trial Pitting Musk Against OpenAI’s Leaders 2026-05-07 at 22:10 By Associated Press Musk said that he could have founded OpenAI as a for-profit company, just like the other companies he started or took over. “I deliberately chose this,” he said, “for the public good.” The post

Worries About AI’s Risks to Humanity Loom Over the Trial Pitting Musk Against OpenAI’s Leaders Read More »

Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking

Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking 2026-05-07 at 17:33 By Kevin Townsend Mitiga researchers say attackers can silently redirect Claude Code MCP traffic, intercept OAuth tokens, and maintain persistent access to connected SaaS platforms. The post Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking appeared first on

Claude Code OAuth Tokens Can Be Stolen Through Stealthy MCP Hijacking Read More »

Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack

Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack 2026-05-07 at 14:33 By Ionut Arghire Attackers could inject prompts into a GitHub issue and take over the AI agent designed to automatically triage the issue. The post Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack appeared first on

Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack Read More »

Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion

Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion 2026-05-07 at 10:35 By Eduard Kovacs Dragos has published a report describing how threat actors used Claude AI in an attack on a water and drainage utility in Mexico. The post Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion appeared first

Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion Read More »

Oracle rolls out monthly security patch updates

Oracle rolls out monthly security patch updates 2026-05-05 at 17:46 By Anamarija Pogorelec Oracle is changing how its security fixes are delivered: starting in May 2026, there will be a monthly Critical Security Patch Update. “Each [monthly] CSPU is smaller and more focused, making it easier to apply critical fixes quickly [to customer-managed deployments],” Oracle

Oracle rolls out monthly security patch updates Read More »

Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft

Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft 2026-05-05 at 17:46 By Ionut Arghire Dubbed Bleeding Llama, the heap out-of-bounds read issue can be exploited remotely, without authentication. The post Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft Read More »

Hacker Conversations: Joey Melo on Hacking AI

Hacker Conversations: Joey Melo on Hacking AI 2026-05-05 at 16:30 By Kevin Townsend AI red team specialist details his methods for manipulating AI guardrails through jailbreaking and data poisoning, helping developers harden machine learning models. The post Hacker Conversations: Joey Melo on Hacking AI appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Hacker Conversations: Joey Melo on Hacking AI Read More »

One in four MCP servers opens AI agent security to code execution risk

One in four MCP servers opens AI agent security to code execution risk 2026-05-05 at 13:21 By Anamarija Pogorelec Enterprise deployments of AI agents lean on two extension mechanisms that introduce risk at different layers of the stack. MCP servers expose deterministic code functions with structured, loggable invocations. Skills load textual instruction sets directly into

One in four MCP servers opens AI agent security to code execution risk Read More »

Claude Security enters public beta with Opus 4.7 vulnerability scanning and patching

Claude Security enters public beta with Opus 4.7 vulnerability scanning and patching 2026-05-04 at 13:11 By Anamarija Pogorelec Claude Security, previously called Claude Code Security, is in public beta for Claude Enterprise customers. Available in Claude.ai, the capability scans codebases for security vulnerabilities and suggests targeted patches for review, helping teams identify and fix issues

Claude Security enters public beta with Opus 4.7 vulnerability scanning and patching Read More »

Scroll to Top