87% say their AI controls need to work better 2026-11-06 at 08:15 By Anamarija Pogorelec The AI running inside large companies has stopped waiting for permission. Across five categories of AI, from chatbots to process automation, more than half of 3,600 business decision-makers say the systems their teams use can act within defined rules without […]
87% say their AI controls need to work better Read More »
Anthropic open-sources FlashProve, its provable inference prototype for MoE models 2026-11-04 at 06:36 By Anamarija Pogorelec Anthropic’s Frontier Red Team, with collaborators at EPFL, MIT and StarkWare, built FlashProve, a prototype that produces a cryptographic proof that one specific language model generated one specific reply. The prover, two verifiers, the formal proofs behind them and […]
Anthropic open-sources FlashProve, its provable inference prototype for MoE models Read More »
AI agents scale and speed up Chinese-linked attacks 2026-11-03 at 14:31 By Zeljka Zorz A China-nexus espionage group used AI agents to attack more than 200 organizations in 11 days, CrowdStrike said last week. On Monday, Kaspersky published details of a separate campaign against educational institutions in Africa and Latin America, mounted by Chinese-speaking operators. […]
AI agents scale and speed up Chinese-linked attacks Read More »
Stolen AI access leaves companies with cloud bills of up to $1 million 2026-11-03 at 11:39 By Sinisa Markovic Criminals who break into corporate cloud accounts are using the stolen access to run AI models at the victim’s expense, in some cases racking up more than $100,000 in charges in a single day, Google Threat […]
Stolen AI access leaves companies with cloud bills of up to $1 million Read More »
LLM agent security needs more than guardrails 2026-10-27 at 08:00 By Help Net Security Madhu Shashanka, Chief Scientist at Concentric AI, explains why securing LLM tools and agents depends more on your data than on the model. Controls on model behavior, such as guardrails and injection detection, lower the rate of bad outcomes but never […]
LLM agent security needs more than guardrails Read More »
AI slop is piling up highest on the biggest open-source projects 2026-10-26 at 08:30 By Mirko Zorz The maintainers of large open source projects are taking the worst of the AI slop. In a Linux Foundation survey of 234 open source contributors and maintainers, people running projects with more than 50 contributors estimated that close […]
AI slop is piling up highest on the biggest open-source projects Read More »
r/opensource bans AI projects, and solo devs go down with them 2026-10-26 at 06:30 By Mirko Zorz Moderators of r/opensource, Reddit’s catch-all forum for open source software, have barred any project that “uses AI, is made by AI, or is intended for AI.” Moderator Wolvereness announced the rules in a post over the weekend. A […]
r/opensource bans AI projects, and solo devs go down with them Read More »
Bringing AI into the SOC means watching for shadow AI and loose permissions 2026-10-21 at 07:30 By Help Net Security In this Help Net Security video, Vince Stoffer, Field CTO at Corelight, talks about how AI is changing work in the SOC and how attackers are using the same tools. He explains how LLMs help […]
Bringing AI into the SOC means watching for shadow AI and loose permissions Read More »
Cloudflare bets you’re overpaying an LLM to read your invoices 2026-10-20 at 06:45 By Anamarija Pogorelec Cloudflare released a preview of Clairic, an extraction model that pulls typed values out of messy text and images in one pass without generating tokens. In Cloudflare’s test on a damaged-product support claim, a pipeline built around Clairic finished […]
Cloudflare bets you’re overpaying an LLM to read your invoices Read More »
80,000 relay servers help users in China slip past U.S. AI region bans 2026-09-23 at 16:57 By Sinisa Markovic More than 80,000 relay servers are helping users in China bypass geographic restrictions on leading U.S. AI models, according to Team Cymru. “What we have uncovered is an entire ecosystem designed explicitly to break the frontier […]
80,000 relay servers help users in China slip past U.S. AI region bans Read More »
AI-Infra-Guard: Open-source security scanner for AI systems 2026-09-09 at 10:13 By Mirko Zorz Tencent’s Zhuque Lab built AI-Infra-Guard, an open-source security scanner for AI systems. It fingerprints running services such as Ollama, vLLM and ComfyUI and checks them against more than 1,600 known CVEs, inspects MCP servers and agent skills across 14 categories of risk, […]
AI-Infra-Guard: Open-source security scanner for AI systems Read More »
National Life Group CISO expects more vulnerabilities in six months than in thirty years 2026-09-02 at 09:00 By Mirko Zorz In this Help Net Security interview, Becky Palmer is VP and CISO at National Life Group, answers five questions about defending against AI-driven attacks. The discussion covers why patch cycles built for human speed cannot […]
National Life Group CISO expects more vulnerabilities in six months than in thirty years Read More »
An AI CAPTCHA solver talked itself out of the right answer 2026-09-02 at 07:00 By Anamarija Pogorelec You have probably spent a few seconds of your life turning a picture until it lines up. Some sites, instead of asking you to tick a box, show you a circular chunk of a photo that has been […]
An AI CAPTCHA solver talked itself out of the right answer Read More »
Debian developers rejected an LLM ban and left disclosure voluntary 2026-08-31 at 11:08 By Anamarija Pogorelec A maintainer reading a merge request can’t tell whether a person or a model wrote the diff, and nobody has to say. Debian developers voted on that through August 28, and Kurt Roeckx, the project secretary, announced the result: […]
Debian developers rejected an LLM ban and left disclosure voluntary Read More »
Production data in testing is still common, and Tricentis’ CISO wants it gone 2026-08-26 at 08:30 By Mirko Zorz In this Help Net Security interview, Erika Dean, CISO at Tricentis, talks about keeping production data out of test environments and why she thinks the alternatives are good enough now. She explains how her team caught […]
Production data in testing is still common, and Tricentis’ CISO wants it gone Read More »
PentestGPT: Open-source automated penetration testing agentic framework 2026-08-12 at 08:30 By Anamarija Pogorelec PentestGPT is an open-source penetration testing agent that points a large language model at a target and lets it work. In its default mode it runs recon, then exploit, then walkthrough, each stage feeding the next. Switch it to pentest mode and […]
PentestGPT: Open-source automated penetration testing agentic framework Read More »
AI agent deception moves from theory to reality in UK cyber tests 2026-08-05 at 15:05 By Zeljka Zorz “During a routine cyber evaluation, AI agents took sustained, unsanctioned action directed at real people and organisations,” UK’s AI Security Institute (AISI) disclosed on Tuesday. The agents’ actions included an attempted supply-chain attack that saw them create […]
AI agent deception moves from theory to reality in UK cyber tests Read More »
Future AGI: Open-source platform for shipping self-improving AI agents 2026-08-05 at 08:30 By Anamarija Pogorelec Future AGI is an open-source platform for tracing, evaluating, simulating, and guardrailing LLM agents, licensed Apache 2.0 and self-hostable. Self-hosted instances register with Future AGI on first boot and send an instance ID, a version string, a deployment type, and […]
Future AGI: Open-source platform for shipping self-improving AI agents Read More »
What stops attackers wrecking industrial plants is knowing how 2026-08-05 at 07:30 By Mirko Zorz Engineers at an Israeli food producer spent most of a week rebuilding a refrigeration system after an intruder switched the gas cooler and receiver valves to manual and pinned them open. Liquid CO2 flooded the compressors and destroyed them. The […]
What stops attackers wrecking industrial plants is knowing how Read More »
Chinese hacker used DeepSeek to launch autonomous cyberattacks on vulnerable servers 2026-08-03 at 16:51 By Sinisa Markovic A Chinese threat actor operating under the aliases “knaithe” and “KnYuan” used multiple LLMs to automate cyberattacks against internet-facing systems with limited human intervention. Researchers at Palo Alto Networks’ Unit 42 uncovered the operation after the threat actor’s […]
Chinese hacker used DeepSeek to launch autonomous cyberattacks on vulnerable servers Read More »