Tag: ai
-
The Hidden Risk in Enterprise AI Agents: Ungoverned Context
Enterprises are handing AI agents real access to customer records, financial systems, internal documents, and the tools that… First seen on hackread.com Jump to article: hackread.com/hidden-risk-enterprise-ai-agents-ungoverned-context/
-
Hugging Face discloses breach linked to autonomous AI agent
The Hugging Face artificial intelligence repository disclosed that attackers gained access to internal datasets and credentials after breaching its production infrastructure using an autonomous AI agent system. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hugging-face-breach-autonomous-ai-agent-system-internal-datasets-credentials/
-
Mythos Didn’t Break Your Security Program. Your Exposure Window Could.
The industry spent the initial months after Anthropic’s April 7 Mythos reveal focused on volume. How many new CVEs would Mythos add to an already overloaded pipeline? How quickly would the flood of AI-driven discovery overwhelm triage capabilities? How long would it take adversaries to weaponize Mythos findings at scale? Those questions were and remain…
-
Hugging Face breached by autonomous AI agent
Hugging Face, the widely used platform for sharing open-source machine learning models and datasets, has disclosed a security breach it says was carried out by an autonomous … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/20/hugging-face-breached-by-autonomous-ai-agent/
-
Cyberangriff auf Hugging Face: KI-Angriff auf KI-Plattform mittels KI aufgedeckt
Hugging Face hat einen von KI-Agenten ausgeführten Cyberangriff per KI entdeckt. Der Zugriff gelang durch Sicherheitslücken in der KI-Plattform. First seen on golem.de Jump to article: www.golem.de/news/cyberangriff-auf-hugging-face-ki-erkennt-ki-angriff-auf-ki-plattform-2607-211057.html
-
The ACLU Is Arming Lawyers to Expose State Surveillance Secrets
Tags: aiA new toolkit for attorneys in Massachusetts targets the technologies police use”, and conceal”, to build criminal cases, from facial recognition to AI-written police reports. First seen on wired.com Jump to article: www.wired.com/story/the-aclu-is-arming-lawyers-to-expose-state-surveillance-secrets/
-
Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs
A solo Russian-speaking threat actor known as “bandcampro” outsourced a chunk of their operations to Google’s open-source Gemini CLI artificial intelligence (AI) and commandeered a live botnet.The findings come from an analysis of 200 Gemini CLI session logs between March 19 and April 21, 2026, which found the threat actor using AI, among other things,…
-
Cyberangriff auf Hugging Face: KI erkennt KI-Angriff auf KI-Plattform
Hugging Face hat einen von KI-Agenten ausgeführten Cyberangriff per KI entdeckt. Der Zugriff gelang durch Sicherheitslücken in der KI-Plattform. First seen on golem.de Jump to article: www.golem.de/news/cyberangriff-auf-hugging-face-ki-erkennt-ki-angriff-auf-ki-plattform-2607-211057.html
-
How agentic endpoint security shuts down IDE-based supply chain attacks
Attention shifts from EDR to Agentic Endpoint Security to close visibility gaps that AI can exploit. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/spons/how-agentic-endpoint-security-shuts-down-ide-based-supply-chain-attacks/825550/
-
The secret problem in AI infrastructure: Why MCP security starts with secrets
AI changes how infrastructure is accessed. Here’s what to secure. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/spons/the-secret-problem-in-ai-infrastructure-why-mcp-security-starts-with-secre/825210/
-
Critical ServiceNow code execution flaw now exploited in attacks
Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-servicenow-code-execution-flaw-now-exploited-in-attacks/
-
AI Agents Turned Into Attackers: Hugging Face Reveals Autonomous Intrusion Campaign
Hugging Face says an autonomous AI agent breached part of its production infrastructure and accessed internal data and service credentials. Hugging Face is one of the world’s leading open-source AI companies. It provides a platform where developers and organizations can build, share, and deploy machine learning and generative AI models. Hugging Face disclosed that an…
-
KI-Betrug im Sommer erkennen: Vier Tipps von Experten
Management Summary KI-gestützte Betrugsversuche werden durch täuschend echte Stimmen, Videos und Gesprächsskripte immer schwerer erkennbar. Der Beitrag zeigt vier unmittelbar anwendbare Prüfmethoden: spontane Folgefragen stellen, die reale Umgebung im Video einbeziehen, Augen- und Lippenbewegungen kontrollieren sowie mit Ironie oder unerwartetem Humor testen, ob das Gegenüber den Kontext versteht. Für potenzielle Opfer lautet die zentrale… First…
-
Singapore spells out how personal data can be used in GenAI
New advisory guidelines clarifying when organisations can scrape and reuse personal data to build GenAI models are among a raft of announcements at the inaugural Singapore Data Festival First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366645910/Singapore-spells-out-how-personal-data-can-be-used-in-GenAI
-
Wenn KI Stimmen imitiert – Fraunhofer entwickelt personenzentrierte Deepfake-Erkennung
First seen on security-insider.de Jump to article: www.security-insider.de/padse-audio-deepfakes-stimmprofile-erkennen-a-d61680b8b2fbc9653c42d963bfbc549f/
-
Thales-Studie zeigt: KI-Vorreiter sind besser auf Quantenbedrohungen vorbereitet
Thales Studie zeigt: KI-Vorreiter sind bei Post-Quantum Security besser vorbereitet. Datentransparenz, Governance und kryptografische Agilität werden entscheidend. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/thales-studie-zeigt-ki-vorreiter-sind-besser-auf-quantenbedrohungen-vorbereitet/a45804/
-
PENTDEM AI Pentesting Daemon Uses 34 Security Tools to Automate WAF Bypass and Attack Chains
Tags: ai, attack, bug-bounty, cyber, firewall, LLM, open-source, penetration-testing, tool, vulnerability, wafPENTDEM is an open-source autonomous AI pentesting daemon that integrates 34 security tools with LLM-directed analysis to automate various tasks, including reconnaissance, vulnerability discovery, evidence validation, Web Application Firewall (WAF) fingerprinting, and multi-stage attack-path modeling. This Python-based project is designed for authorized security testing and bug-bounty workflows, offering both an autonomous agent mode and a…
-
Weekly Cybersecurity Newsletter The 50 Biggest Cybersecurity Stories Microsoft Patch, AI Attack, Exploits Releases, Data Breaches More
Welcome to this week’s edition of the GBHackers cybersecurity newsletter, your weekly cybersecurity bulletin covering the 40 most important stories from July 1317, 2026. What a week: Microsoft shattered records with 570 vulnerabilities patched in a single Patch Tuesday, China-linked hackers weaponized Claude Code and DeepSeek against government networks, GPT-5.6 wrote a complete Chrome […]…
-
A forensic tool for backdoored code completions in AI assistants
Developers lean on AI coding assistants for a growing share of their daily work, letting the tools predict the next few lines and accepting many suggestions with a quick … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/20/tracing-backdoored-code-completions/
-
Nearly half of open-source AI projects never reach production
Open models are moving into production across more organizations, and the work of securing those deployments increasingly extends beyond the model weights. Mozilla’s The State … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/20/mozilla-open-source-ai-adoption-report/
-
SoftBank leverages OpenAI for AI-driven cybersecurity patching service
First seen on scworld.com Jump to article: www.scworld.com/brief/softbank-leverages-openai-for-ai-driven-cybersecurity-patching-service
-
Over 1 million malicious emails found using text salting to fool AI scanners
First seen on scworld.com Jump to article: www.scworld.com/news/over-1-million-malicious-emails-found-using-text-salting-to-fool-ai-scanners
-
Identity Security als Schlüssel für sichere AI-Agenten
Warum AI nur dann sicher skaliert, wenn jede maschinelle Identität, vom Agenten bis zur MCP-Verbindung, von Anfang an verwaltet wird. Kaum eine Technologie entwickelt sich derzeit so schnell wie agentenbasierte AI. Im Wochentakt erscheinen neue Modelle, Frameworks und Protokolle. Anbieter überbieten sich mit autonomen Assistenten, die eigenständig planen, Werkzeuge aufrufen und Aufgaben über Systemgrenzen… First…
-
Gemini CLI missbraucht: KI baut Botnetz in nur sechs Minuten
Trend Micro zeigt, wie ein Hacker Gemini CLI missbrauchte und mit KI ein Botnetz in nur sechs Minuten migrierte. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/kuenstliche-intelligenz/gemini-cli-missbraucht-ki-baut-botnetz-in-sechs-minuten-331606.html
-
Fortune 100: KI-gestützte Phishing-Angriffe auf 86 Prozent der großen Welt-Unternehmen
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/fortune-100-ki-phishing-angriffe-86-prozent-welt-unternehmen
-
Kimi K3 Highlights Limits of AI Benchmark Leaderboards
Open-source model impresses on tests but enterprise performance remains unproven. Moonshot AI’s Kimi K3 has climbed AI benchmark leaderboards and challenged leading U.S. models on coding tasks. But benchmark scores offer only a narrow view of model performance, fueling calls for independent testing and enterprise evaluations before organizations make deployment decisions. First seen on govinfosecurity.com…
-
Your Period Tracker Is (Probably) Spying on You
Plus: Russian cyberspies turn to infrastructure hacking, DHS repeatedly fails to realize it’d been hacked, a breach exposes an AI music generator’s scraping ways, and more. First seen on wired.com Jump to article: www.wired.com/story/security-news-this-week-your-period-tracker-is-probably-spying-on-you/