Tag: ai
-
Researchers discover suite of agentic AI browser vulnerabilities
Through a simple calendar invite, AI browsers like Comet can be directed to access local file systems, browse directories, open and read files, and exfiltrate data. First seen on cyberscoop.com Jump to article: cyberscoop.com/agentic-ai-browsers-allow-hijacking-zenity-labs-comet/
-
Chat at your own risk! Data brokers are selling deeply personal bot transcripts
AI conversations for sale include sensitive health and legal details First seen on theregister.com Jump to article: www.theregister.com/2026/03/03/chatbot_data_harvesting_personal_info/
-
The ‘Six-Day’ Security Week: AI Adoption Ignites Leadership Crisis
Enterprise security teams are sprinting toward an artificial intelligence (AI)-driven future, but the breakneck pace of adoption is pushing leadership to a breaking point. According to Seemplicity’s 2026 State of the Cybersecurity Workforce Report, released Tuesday, the industry is witnessing a >>system failure<< where rapid technological integration is outpacing human capacity and governance. The data..…
-
Human vs. AI Identity: Why AI Agents Are Breaking Identity
4 min readTraditional IAM was built for predictable workloads. Learn why AI agents demand a new approach to identity, access control, and credential management. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/human-vs-ai-identity-why-ai-agents-are-breaking-identity/
-
Speakeasies to Shadow AI: Banning AI Browsers Will Fail
Tags: aiLessons from history highlight why AI-enabled browsers require controlled enablement. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/speakeasies-shadow-ai-banning-ai-browsers-fail
-
Pentagon ditches Anthropic AI over >>security risk<< and OpenAI takes over
At the center of the dispute is how far AI models should be allowed to go inside military systems. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/pentagon-ditches-anthropic-ai-over-security-risk-and-openai-takes-over/
-
Identity Security Blind Spots Fuel Modern Attacks
New data shows identity-related incidents are rising as cloud complexity and AI-driven automation outpace governance and visibility. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/identity-security-blind-spots-fuel-modern-attacks/
-
AI Emerges as the New Insider Threat: Thales Releases the 2026 Data Threat Report
Tags: access, ai, api, attack, business, cloud, compliance, container, control, credentials, cyber, data, deep-fake, encryption, governance, identity, infrastructure, risk, saas, skills, software, strategy, theft, threat, toolAI Emerges as the New Insider Threat: Thales Releases the 2026 Data Threat Report madhav Tue, 03/03/2026 – 15:00 Over the past year, I’ve watched AI move to operational reality across nearly every industry we work with. The conversation is no longer about whether AI will transform business. It already has. Cybersecurity Todd Moore –…
-
The Evolution of OSS Index in the Age of AI
<div cla In the past 12 months, enterprise software development has changed faster than at any other point in our lifetime. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/the-evolution-of-oss-index-in-the-age-of-ai/
-
AI and Deepfakes Supercharge Sophisticated Cyber-Attacks, Says Cloudflare
Cloudflare Threat Report warns that AI tools enable attackers who lacked required skills to generate effective attacks rapidly and at scale First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-deepfakes-supercharge/
-
Zenity Details Perplexity AI Browser Vulnerability
Zenity, a provider of a platform for securing artificial intelligence (AI) applications and agents, today detailed how a zero-click attack could be launched against the Comet AI browser developed by Perplexity. Company CTO Michael Bargury said the attack vector, dubbed PerplexedComet, enables a malicious attacker to control content in a way that can be used..…
-
Open-Source CyberStrikeAI Deployed in AI-Driven FortiGate Attacks Across 55 Countries
The threat actor behind the recently disclosed artificial intelligence (AI)-assisted campaign targeting Fortinet FortiGate appliances leveraged an open-source, AI-native security testing platform called CyberStrikeAI to execute the attacks.The new findings come from Team Cymru, which detected its use following an analysis of the IP address (“212.11.64[.]250”) that was used by the suspected First seen on…
-
Until last month, attackers could’ve stolen info from Perplexity Comet users just by sending a calendar invite
AI browsing agent left local files open for the taking First seen on theregister.com Jump to article: www.theregister.com/2026/03/03/perplexity_comet_browser_hole_cal_invite/
-
Google Expands AI Scam Protection to Samsung Galaxy S26
Google expands Gemini-powered scam detection to Samsung Galaxy S26 and more Android devices, bringing on-device AI fraud protection to calls and messages. The post Google Expands AI Scam Protection to Samsung Galaxy S26 appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-google-gemini-scam-detection-android-samsung-expansion/
-
Quantum-Resistant Data Diode Secures Sensitive Data on Edge Devices, Critical Systems
Forward Edge-AI’s new Isidore Quantum is a compact, low-power hardware device designed to defend sensitive operational technology endpoints against future quantum attacks. First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/quantum-resistant-data-diode-secures-sensitive-data-on-edge-devices-critical-systems
-
On Moltbook
The MIT Technology Review has a good article on Moltbook, the supposed AI-only social network: Many people have pointed out that a lot of the viral comments were in fact posted by people posing as bots. But even the bot-written posts are ultimately the result of people pulling the strings, more puppetry than autonomy. “Despite…
-
Addressing the God Key Challenge in Agentic AI for MCP Servers, Effective Solutions Explained
The Agentic AI wave is accelerating rapidly. What began as chatbots equipped with simple tools is now evolving into autonomous digital workers that are deeply integrated into enterprise workflows. As these deployments mature, a critical security gap is becoming increasingly apparent. Many current agent architectures still rely on what can be described as a God……
-
Until last month, attackers could’ve stolen info from Perplexity Comet users just by sending a calendar invite
AI browsing agent left local files open for the taking First seen on theregister.com Jump to article: www.theregister.com/2026/03/03/perplexity_comet_browser_hole_cal_invite/
-
Shannon: Autonomous AI Tool with Nmap Integration Can Uncover and Exploit Security Flaws
Keygraph has released Shannon, a fully autonomous AI-powered penetration testing tool designed to identify and actively exploit real vulnerabilities in web applications before malicious actors can. Unlike traditional scanners that generate alerts, Shannon delivers proven, reproducible exploits, closing the dangerous security gap that exists between annual pentests and continuous code deployments. How Shannon Works Shannon emulates…
-
Shannon: Autonomous AI Tool with Nmap Integration Can Uncover and Exploit Security Flaws
Keygraph has released Shannon, a fully autonomous AI-powered penetration testing tool designed to identify and actively exploit real vulnerabilities in web applications before malicious actors can. Unlike traditional scanners that generate alerts, Shannon delivers proven, reproducible exploits, closing the dangerous security gap that exists between annual pentests and continuous code deployments. How Shannon Works Shannon emulates…
-
Shannon: Autonomous AI Tool with Nmap Integration Can Uncover and Exploit Security Flaws
Keygraph has released Shannon, a fully autonomous AI-powered penetration testing tool designed to identify and actively exploit real vulnerabilities in web applications before malicious actors can. Unlike traditional scanners that generate alerts, Shannon delivers proven, reproducible exploits, closing the dangerous security gap that exists between annual pentests and continuous code deployments. How Shannon Works Shannon emulates…
-
AI Agent Overload: How to Solve the Workload Identity Crisis
Workloads keep getting more complicated and organizations are struggling to keep up. So what’s the play? First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/ai-agent-workload-identity-crisis
-
Singapore AI Risk Guidelines and Capital Resilience – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/singapore-ai-risk-guidelines-and-capital-resilience-kovrr/
-
Chrome Gemini panel became privilege escalator for rogue extensions
High-severity flaw let malicious add-ons access system via browser’s embedded AI feature First seen on theregister.com Jump to article: www.theregister.com/2026/03/03/google_chrome_bug_gemini/
-
AI Agents: The Next Wave Identity Dark Matter – Powerful, Invisible, and Unmanaged
The Rise of MCPs in the EnterpriseThe Model Context Protocol (MCP) is quickly becoming a practical way to push LLMs from “chat” into real work. By providing structured access to applications, APIs, and data, MCP enables prompt-driven AI agents that can retrieve information, take action, and automate end-to-end business workflows across the enterprise. This is…
-
Cyberkriminelle kommerzialisieren KI-gestützte Angriffe – KI-Crimeware als Service für wenige Dollar pro Monat
First seen on security-insider.de Jump to article: www.security-insider.de/ki-crimeware-dark-llms-deepfakes-phishing-kits-a-b1e9eec3e9f095e175dd152d1bed7141/
-
Cyberkriminelle kommerzialisieren KI-gestützte Angriffe – KI-Crimeware als Service für wenige Dollar pro Monat
First seen on security-insider.de Jump to article: www.security-insider.de/ki-crimeware-dark-llms-deepfakes-phishing-kits-a-b1e9eec3e9f095e175dd152d1bed7141/
-
Fortinet FortiGate Devices Targeted by CyberStrikeAI, Allowing Hackers to Bypass Security
Threat intelligence researchers at Team Cymru have uncovered an open-source AI-powered offensive security tool called CyberStrikeAI, actively used to target Fortinet FortiGate devices at scale, with its developer carrying suspected ties to China’s Ministry of State Security (MSS).”‹ CyberStrikeAI is an AI-native security testing platform written in Go, developed by a GitHub user named Ed1s0nZ.…
-
Iranian Cyber Threat Actor Targets Iraqi Government Officials in AI-Powered Campaign
Zscaler ThreatLabz assessed with medium to high confidence that an Iranian adversary targeted Iraq’s Ministry of Foreign Affairs in a new cyber-attack First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/iran-cyber-threat-actor-iraq/