Living off the AI: The Next Evolution of Attacker Tradecraft 2026-02-06 at 14:04 By Etay Maor Living off the AI isn’t a hypothetical but a natural continuation of the tradecraft we’ve all been defending against, now mapped onto assistants, agents, and MCP. The post Living off the AI: The Next Evolution of Attacker Tradecraft appeared […]
Living off the AI: The Next Evolution of Attacker Tradecraft Read More »
Claude Opus 4.6 improves agentic performance and model safety 2026-02-06 at 12:13 By Sinisa Markovic Claude Opus 4.6 builds on earlier releases with improved coding performance and more consistent behavior in complex tasks. Opus 4.6 finds real vulnerabilities in codebases better than any other model (Source: Anthropic) According to Anthropic, the model applies more deliberate […]
Claude Opus 4.6 improves agentic performance and model safety Read More »
Airrived Emerges From Stealth With $6.1 Million in Funding 2026-02-06 at 12:13 By Ionut Arghire The startup aims to unify SOC, GRC, IAM, vulnerability management, IT, and business operations through its Agentic OS platform. The post Airrived Emerges From Stealth With $6.1 Million in Funding appeared first on SecurityWeek. This article is an excerpt from […]
Airrived Emerges From Stealth With $6.1 Million in Funding Read More »
Smart glasses are back, privacy issues included 2026-02-05 at 09:11 By Sinisa Markovic AI smart glasses are the latest addition to fashion, and they include a camera, a microphone, AI, and privacy risks. After Google Glass failed to gain traction more than a decade ago, the category is seeing renewed interest as companies redesign the […]
Smart glasses are back, privacy issues included Read More »
Measuring AI use becomes a business requirement 2026-02-05 at 09:11 By Anamarija Pogorelec Enterprise teams already run dozens of AI tools across daily work. Usage stretches from code generation and analytics to customer support drafting and internal research. Oversight remains uneven across roles, functions, and industries. A new Larridin survey of enterprise leaders places measurement […]
Measuring AI use becomes a business requirement Read More »
DockerDash Flaw in Docker AI Assistant Leads to RCE, Data Theft 2026-02-04 at 13:48 By Ionut Arghire The critical vulnerability exists in the contextual trust in MCP Gateway architecture, as instructions are passed without validation. The post DockerDash Flaw in Docker AI Assistant Leads to RCE, Data Theft appeared first on SecurityWeek. This article is […]
DockerDash Flaw in Docker AI Assistant Leads to RCE, Data Theft Read More »
Security Analysis of Moltbook Agent Network: Bot-to-Bot Prompt Injection and Data Leaks 2026-02-04 at 10:47 By Eduard Kovacs Wiz and Permiso have analyzed the AI agent social network and found serious security issues and threats. The post Security Analysis of Moltbook Agent Network: Bot-to-Bot Prompt Injection and Data Leaks appeared first on SecurityWeek. This article […]
Security Analysis of Moltbook Agent Network: Bot-to-Bot Prompt Injection and Data Leaks Read More »
Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant 2026-02-03 at 15:49 By Eduard Kovacs OpenClaw (aka Moltbot and Clawdbot) is vulnerable to one-click remote code execution attacks. The post Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant Read More »
Firefox to let users manage and block AI features 2026-02-03 at 15:15 By Sinisa Markovic Mozilla will add a set of controls in Firefox that let users manage and block GenAI features in the desktop browser. The controls will be included in Firefox version 148 on February 24, 2026. “We believe choice is more important […]
Firefox to let users manage and block AI features Read More »
OpenAI releases Codex macOS app for agent-based software development 2026-02-03 at 13:17 By Anamarija Pogorelec OpenAI has launched the new Codex app for macOS, a dedicated workspace for managing multiple AI coding agents in parallel. The app is designed to help developers reduce repetitive work and focus on higher-level engineering tasks. Codex can write features, […]
OpenAI releases Codex macOS app for agent-based software development Read More »
Open-source AI pentesting tools are getting uncomfortably good 2026-02-02 at 09:10 By Help Net Security AI has come a long way in the pentesting world. We are now seeing open-source tools that can genuinely mimic how a human tester works, not just fire off scans. I dug into three of them, BugTrace-AI, Shannon, and CAI, […]
Open-source AI pentesting tools are getting uncomfortably good Read More »
AI is flooding IAM systems with new identities 2026-02-02 at 07:20 By Anamarija Pogorelec Most organizations view AI identities through the same lens used for other non-human identities, such as service accounts, API keys, and chatbots, according to The State of Non-Human Identity and AI Security report by the Cloud Security Alliance. AI identities inherit […]
AI is flooding IAM systems with new identities Read More »
175,000 Exposed Ollama Hosts Could Enable LLM Abuse 2026-01-30 at 16:44 By Ionut Arghire Among them, 23,000 hosts were persistently responsible for the majority of activity observed over 293 days of scanning. The post 175,000 Exposed Ollama Hosts Could Enable LLM Abuse appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
175,000 Exposed Ollama Hosts Could Enable LLM Abuse Read More »
Security work keeps expanding, even with AI in the mix 2026-01-30 at 08:07 By Sinisa Markovic Board attention continues to rise, and security groups now operate closer to executive decision making than in prior years, a pattern reflected the Voice of Security 2026 report by Tines. Within that environment, large numbers of teams already rely […]
Security work keeps expanding, even with AI in the mix Read More »
LLMs Hijacked, Monetized in ‘Operation Bizarre Bazaar’ 2026-01-29 at 17:29 By Ionut Arghire An LLMjacking operation has been targeting exposed LLMs and MCPs at scale, for commercial monetization. The post LLMs Hijacked, Monetized in ‘Operation Bizarre Bazaar’ appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
LLMs Hijacked, Monetized in ‘Operation Bizarre Bazaar’ Read More »
PwC and Google Cloud Ink $400 Million Deal to Scale AI-Powered Defense 2026-01-29 at 09:45 By Eduard Kovacs The announcement comes just weeks after Palo Alto Networks and Google Cloud announced a multibillion-dollar AI and cloud security deal. The post PwC and Google Cloud Ink $400 Million Deal to Scale AI-Powered Defense appeared first on […]
PwC and Google Cloud Ink $400 Million Deal to Scale AI-Powered Defense Read More »
What motivates hackers and what makes them walk away 2026-01-29 at 07:02 By Anamarija Pogorelec Most hackers spend more time learning, testing, and comparing notes than breaking into systems. The work often happens alone or in small groups, shaped by curiosity, persistence, and a habit of examining how systems behave. Bugcrowd examined who these security […]
What motivates hackers and what makes them walk away Read More »
Why We Can’t Let AI Take the Wheel of Cyber Defense 2026-01-28 at 16:06 By Steve Durbin The fastest way to squander the promise of AI is to mistake automation for assurance, and novelty for resilience. The post Why We Can’t Let AI Take the Wheel of Cyber Defense appeared first on SecurityWeek. This article […]
Why We Can’t Let AI Take the Wheel of Cyber Defense Read More »
Audits for AI systems that keep changing 2026-01-28 at 07:28 By Anamarija Pogorelec Security and risk teams often rely on documentation and audit artifacts that reflect how an AI system worked months ago. ETSI’s continuous auditing based conformity assessment specification (ETSI TS 104 008) describes a different approach, where conformity is evaluated through recurring measurement […]
Audits for AI systems that keep changing Read More »
Chrome, Edge Extensions Caught Stealing ChatGPT Sessions 2026-01-27 at 15:49 By Ionut Arghire Marketed as ChatGPT enhancement and productivity tools, the extensions allow the threat actor to access the victim’s ChatGPT data. The post Chrome, Edge Extensions Caught Stealing ChatGPT Sessions appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Chrome, Edge Extensions Caught Stealing ChatGPT Sessions Read More »