OpenAI Hit by TanStack Supply Chain Attack 2026-05-15 at 14:32 By Ionut Arghire Two employee devices were compromised in the attack, and credential material was stolen from OpenAI code repositories. The post OpenAI Hit by TanStack Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
OpenAI Hit by TanStack Supply Chain Attack Read More »
Mythos Proves Potent in Vulnerability Discovery, Less Convincing Elsewhere 2026-05-14 at 18:25 By Kevin Townsend Independent benchmarking finds Mythos highly effective for source code audits, reverse engineering, and native-code analysis, though its exploit validation and reasoning capabilities remain inconsistent. The post Mythos Proves Potent in Vulnerability Discovery, Less Convincing Elsewhere appeared first on SecurityWeek. This […]
Mythos Proves Potent in Vulnerability Discovery, Less Convincing Elsewhere Read More »
Hackers Targeted PraisonAI Vulnerability Hours After Disclosure 2026-05-14 at 12:48 By Ionut Arghire The first exploitation attempts were observed less than four hours after the authentication bypass was publicly disclosed. The post Hackers Targeted PraisonAI Vulnerability Hours After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Hackers Targeted PraisonAI Vulnerability Hours After Disclosure Read More »
Microsoft, Palo Alto Networks Find Many Vulnerabilities by Using AI on Their Own Code 2026-05-13 at 19:01 By Eduard Kovacs Microsoft’s MDASH discovered 16 of the Patch Tuesday vulnerabilities, and Palo Alto used Mythos to find dozens of flaws. The post Microsoft, Palo Alto Networks Find Many Vulnerabilities by Using AI on Their Own Code […]
Microsoft, Palo Alto Networks Find Many Vulnerabilities by Using AI on Their Own Code Read More »
Sweet Security Launches Agentic AI Red Teaming to Counter ‘Mythos Moment’ 2026-05-13 at 17:50 By Kevin Townsend New “Sweet Attack” platform uses runtime intelligence and continuous agentic red teaming to identify exploitable attack chains human teams may miss. The post Sweet Security Launches Agentic AI Red Teaming to Counter ‘Mythos Moment’ appeared first on SecurityWeek. […]
Sweet Security Launches Agentic AI Red Teaming to Counter ‘Mythos Moment’ Read More »
White Circle Raises $11 Million for AI Control Platform 2026-05-12 at 20:12 By Ionut Arghire The startup will invest in accelerating product development, hiring new talent, and expanding its customer base. The post White Circle Raises $11 Million for AI Control Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
White Circle Raises $11 Million for AI Control Platform Read More »
Claude Mythos Finds Only One Curl Vulnerability; Experts Divided on What It Really Means 2026-05-12 at 14:18 By Eduard Kovacs Curl’s lead developer says Mythos claims are marketing, but many in the industry believe the results stem from Curl’s robust security. The post Claude Mythos Finds Only One Curl Vulnerability; Experts Divided on What It […]
Claude Mythos Finds Only One Curl Vulnerability; Experts Divided on What It Really Means Read More »
Google Detects First AI-Generated Zero-Day Exploit 2026-05-11 at 16:48 By Eduard Kovacs The zero-day was designed to bypass 2FA and it was developed by a prominent cybercrime group. The post Google Detects First AI-Generated Zero-Day Exploit appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Google Detects First AI-Generated Zero-Day Exploit Read More »
Cloudflare Lays Off 1,100 Employees in AI-Driven Restructuring 2026-05-11 at 15:09 By Eduard Kovacs The company topped revenue and earnings forecasts for the first quarter of 2026, but its shares plunged more than 20%. The post Cloudflare Lays Off 1,100 Employees in AI-Driven Restructuring appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Cloudflare Lays Off 1,100 Employees in AI-Driven Restructuring Read More »
AI Firm Braintrust Prompts API Key Rotation After Data Breach 2026-05-08 at 14:14 By Ionut Arghire Hackers accessed one of the company’s AWS accounts and compromised AI provider secrets stored in Braintrust. The post AI Firm Braintrust Prompts API Key Rotation After Data Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
AI Firm Braintrust Prompts API Key Rotation After Data Breach Read More »
Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover 2026-05-08 at 11:42 By Ionut Arghire Lax extension permissions and improper trust implementation allow attackers to inject prompts in the Claude Chrome extension. The post Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover appeared first on SecurityWeek. This article is an […]
Vulnerability in Claude Extension for Chrome Exposes AI Agent to Takeover Read More »
Worries About AI’s Risks to Humanity Loom Over the Trial Pitting Musk Against OpenAI’s Leaders 2026-05-07 at 22:10 By Associated Press Musk said that he could have founded OpenAI as a for-profit company, just like the other companies he started or took over. “I deliberately chose this,” he said, “for the public good.” The post […]
Attackers Could Exploit AI Vision Models Using Imperceptible Image Changes 2026-05-07 at 17:33 By Eduard Kovacs Cisco’s AI security researchers have analyzed ways to target vision-language models (VLMs) using pixel-level perturbation. The post Attackers Could Exploit AI Vision Models Using Imperceptible Image Changes appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Attackers Could Exploit AI Vision Models Using Imperceptible Image Changes Read More »
AI Coding Agents Could Fuel Next Supply Chain Crisis 2026-05-07 at 17:33 By Kevin Townsend “TrustFall” attack shows how AI coding agents can be manipulated into launching stealthy supply chain compromises. The post AI Coding Agents Could Fuel Next Supply Chain Crisis appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
AI Coding Agents Could Fuel Next Supply Chain Crisis Read More »
Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack 2026-05-07 at 14:33 By Ionut Arghire Attackers could inject prompts into a GitHub issue and take over the AI agent designed to automatically triage the issue. The post Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack appeared first on […]
Gemini CLI Vulnerability Could Have Led to Code Execution, Supply Chain Attack Read More »
Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion 2026-05-07 at 10:35 By Eduard Kovacs Dragos has published a report describing how threat actors used Claude AI in an attack on a water and drainage utility in Mexico. The post Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion appeared first […]
Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion Read More »
Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft 2026-05-05 at 17:46 By Ionut Arghire Dubbed Bleeding Llama, the heap out-of-bounds read issue can be exploited remotely, without authentication. The post Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]
Critical Bug Could Expose 300,000 Ollama Deployments to Information Theft Read More »
Hacker Conversations: Joey Melo on Hacking AI 2026-05-05 at 16:30 By Kevin Townsend AI red team specialist details his methods for manipulating AI guardrails through jailbreaking and data poisoning, helping developers harden machine learning models. The post Hacker Conversations: Joey Melo on Hacking AI appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Hacker Conversations: Joey Melo on Hacking AI Read More »
Cisco Moves to Acquire Astrix Security to Tackle Non-Human Identity Risks 2026-05-04 at 22:03 By Mike Lennon Cisco on Monday announced its intent to acquire Astrix Security, a startup focused on securing non-human identities (NHIs) such as API keys, service accounts, and OAuth tokens increasingly used by applications and AI agents. In a blog post, Cisco said […]
Cisco Moves to Acquire Astrix Security to Tackle Non-Human Identity Risks Read More »
OpenAI Rolls Out Advanced Security for ChatGPT Accounts 2026-05-04 at 13:11 By Eduard Kovacs Advanced Account Security provides stronger login methods, more secure account recovery, shorter sessions, and training exclusion. The post OpenAI Rolls Out Advanced Security for ChatGPT Accounts appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
OpenAI Rolls Out Advanced Security for ChatGPT Accounts Read More »