Tag: control
-
Check Point Puts AI Traffic Controls Into Its Existing Firewalls
Check Point has launched an AI Network Firewall that brings visibility and enforcement for AI applications, agents and Model Context Protocol traffic into the physical and virtual firewalls organizations already operate. Introduced July 30 ahead of Black Hat USA 2026, the product is delivered through Check Point’s AI Defense Plane and firewall software release R82.20……
-
1Password Adds Privileged Access Controls for Human and AI Identities
1Password has launched Privileged Access, extending its Unified Access platform into privileged access management with controls designed to remove standing permissions from human and AI identities. The July 28 launch came ahead of Black Hat USA 2026, where identity security and AI-agent controls are major themes. 1Password said Privileged Access provisions permissions when they are..…
-
Paperclip authorization bug exploited, leads to control plane takeover
First seen on scworld.com Jump to article: www.scworld.com/news/paperclip-authorization-bug-exploited-leads-to-control-plane-takeover
-
Researcher Claims Control of ChatGPT Secure Sandbox
A researcher demonstrated a proof-of-concept attack chain that provided C2-style influence over ChatGPT’s isolated sandbox during a session at Black Hat USA 2026. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/researcher-claims-control-chatgpt-secure-sandbox
-
Why AI Governance Requires Continuous Compliance Assurance
Schellman CEO Avani Desai on Building Governance Before Technology Enforcement. Artificial intelligence governance must evolve as agentic AI systems make decisions at machine speed. Schellman CEO Avani Desai explains why organizations need continuous auditing, unified controls and multiple frameworks to prove AI trustworthiness without slowing innovation. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-governance-requires-continuous-compliance-assurance-a-32438
-
The 12 Best Protective DNS (PDNS) Services, Compared and Priced (2026)
Protective DNS is the rare control where the cheap options are genuinely good so this comparison leads with value. The verdict: DNSFilter is the best published-price PDNS for most organizations, Cloudflare Gateway owns the free-to-enterprise arc (and now runs the UK’s national PDNS with Accenture), N-able and ScoutDNS serve MSPs at fair rates, CIRA gives…
-
How AI Exposed a Browser Security Gap that Enterprises Cannot Ignore
AI did not create a new browser security problem. It exposed one that enterprises have long been able to ignore. Skyhigh Security explains why browsers have become a critical control point for governing data movement, AI interactions, and modern work. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/how-ai-exposed-a-browser-security-gap-that-enterprises-cannot-ignore/
-
Akamai Report Finds Nearly Half of Enterprise AI Use Bypasses Security
Nearly half of enterprise AI use bypasses corporate security controls, according to a new Akamai report that points to unmanaged tools, browser extensions and autonomous agents as growing sources of exposure. Akamai released its Enterprise AI Usage Risk Report 2026 on Aug. 5 as part of its State of the Internet security research. The report..…
-
Zenity Labs Finds Zero-Click Attack Chains Across Agentic Browsers
Zenity Labs released research at Black Hat USA 2026 showing zero-click PleaseFix exploit chains across Claude in Chrome, Gemini in Chrome, Perplexity Comet, ChatGPT Atlas and Copilot Edge. The attacks demonstrated paths to silent data theft, credential theft, account takeover and remote control of a victim’s machine. PleaseFix abuses the way agentic browsers combine information..…
-
AI code security with Claude Mythos Preview: Inside Tenable’s 500+ hours of testing for Project Glasswing
Tags: access, ai, api, application-security, compliance, control, cyber, cybersecurity, data, exploit, flaw, reverse-engineering, risk, software, threat, tool, update, vulnerabilityWe spent 500+ hours and 40 billion tokens testing Anthropic’s Claude Mythos Preview for Project Glasswing. The takeaway: frontier AI won’t run your code security program, but used well, it can make one even stronger. Key takeaways Frontier AI dramatically scales security testing. In one month, Tenable dedicated 11 security experts and more than 40…
-
Fake Xeno Roblox Executor Delivers Powercat Java Stealer Through Discord
The fake “undetected” Xeno Roblox executor currently circulating on gaming forums and Discord is a weaponized loader for the Powercat Java stealer, a multi”‘stage RAT and infostealer that targets Discord, Roblox, Minecraft, crypto wallets and payment tokens while enabling full remote control of infected Windows systems. Threat actors are promoting trojanized Xeno executors through Roblox”‘focused…
-
Defending Water OT with AZT PROTECT – ARIA Cybersecurity
<div cla The threat landscape for municipal water systems has never been more perilous, and the regulatory spotlight has never been brighter. A flurry of attacks has taken over the news: in some cases, ransomware-based attacks cripple water production and in other cases controls on individual unprotected PLCs are being suddenly accessed by bad actors…
-
OSINT collection techniques using legitimate tools
Open source intelligence, usually shortened to OSINT, is the practice of collecting and analysing information that is already publicly available. In a defensive context, that can include company websites, social media posts, public registers, DNS records, certificate logs, archived web pages, document metadata, and other sources that are accessible without bypassing controls or impersonating anyone….…
-
Black Hat USA 2026: One GitHub Issue Could Compromise Major AI Coding Workflows
At Black Hat USA 2026, Novee found GitHub workflow flaws in Claude Code, Gemini CLI and Codex that enabled RCE, credential theft and agent control in pipelines. First seen on hackread.com Jump to article: hackread.com/black-hat-usa-2026-github-compromise-ai-coding/
-
PoC Released for Linux Kernel STP UseFree Vulnerability
A proof-of-concept (PoC) has been released for a use-after-free vulnerability affecting the Linux kernel’s software bridge implementation found in `net/bridge`. This vulnerability occurs within the Spanning Tree Protocol (STP) timer lifecycle. It can result in timer structures referencing freed bridge memory, potentially allowing for control-flow hijacking. The SSD Secure Disclosure technical team disclosed the issue…
-
Cloud Security Alliance Starts Initiative to Define Controls for Catastrophic AI Risks
The Cloud Security Alliance has launched an initiative to define auditable controls for catastrophic AI risks, along with a research center focused on how frontier AI is changing cybersecurity. Announced Wednesday in Las Vegas, the Catastrophic Risk Annex will extend CSA’s AI Controls Matrix with controls for mitigating catastrophic AI risks. CSA said the controls..…
-
Jscrambler Launches Unified Client-Side Security Platform
Jscrambler has launched a Unified Client-Side Security Platform that combines software integrity and data governance through a browser runtime architecture. The platform is built on Jscrambler’s Behavioral Enforcement Core, which continuously monitors browser behavior, analyzes activity and enforces policy through a single deployment. The company said the goal is to extend security controls to the..…
-
AI governance is the missing security control
First seen on scworld.com Jump to article: www.scworld.com/perspective/ai-governance-is-the-missing-security-control
-
AI Browsers Vulnerable to ‘PleaseFix’ Zero-Click Agent Hijacking
Attackers can take control of agents through malicious instructions hidden in content supplied to AI browsers, and there’s no simple fix for the threat. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/ai-browsers-zero-click-agent-hijacking
-
Flooding Dropper Hits npm With 850 Malicious Packages
Tags: attack, automation, cloud, container, control, credentials, cvss, data-breach, detection, dns, endpoint, github, guide, infrastructure, linux, macOS, malicious, malware, monitoring, software, threat, windows<div cla TL;DR Sonatype Research Labs is tracking an active malicious package campaign, dubbed ‘Flooding Dropper,’ spreading on npm, currently impacting 846 software components. The attacker appears to be automating parts of the npm account and package creation process, combining terms such as bigops and bnpl with other words and recurring version patterns, such as releases…
-
Mini Shai-Hulud npm Attack: More Than 2,200 Components Impacted
Tags: access, ai, attack, breach, cloud, container, control, credentials, data, data-breach, github, guide, infection, intelligence, kubernetes, malicious, malware, microsoft, open-source, risk, sbom, service, software, threat, update<div cla TL;DR A new wave of the Shai-Hulud malicious package campaign emerged on npm, with 2,225 software component versions impacted. The malware executes through a malicious preinstall hook, steals npm, GitHub, cloud, Kubernetes, Vault, CI/CD, and other credentials, then uses stolen publishing access to compromise additional packages. Organizations that installed an affected version should…
-
Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
Two security flaws in Paperclip could let attackers execute commands on a network server or a developer’s computer. Paperclip is an open-source control plane for teams of artificial intelligence (AI) agents, and both paths rely on importing a malicious agent and starting it.A third flaw could expose sensitive data and control-plane details through application programming…
-
Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain
Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer.The new dead drop resolver approach, observed in two trojanized npm packages “bianira-ui” and “fluid-type-ui,” has been codenamed NullReceiver by First seen on thehackernews.com Jump…
-
Menlo Security Extends MARS to Protect AI Assistants and Coding Agents
Menlo Security has expanded Menlo Agent Runtime Security, or MARS, with controls aimed at protecting AI assistants and coding agents from prompt injection, malware and data loss as they browse the web, use applications and process files. The company is highlighting the update at Black Hat USA 2026. MARS is a cloud-based capability in Menlo’s..…
-
Reco Expands AI Runtime With Browser Controls and Prompt Blocking
Reco is expanding its AI Runtime capability with browser-based enforcement, real-time prompt analysis and blocking, and automated remediation. The company said the update is designed to act on the risk posed by AI agents without requiring security teams to route traffic through a new gateway or proxy. Reco’s Smart Remediation feature turns findings into proposed..…
-
Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses
Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer.The new dead drop resolver approach, observed in two trojanized npm package “bianira-ui” and “fluid-type-ui,” has been codenamed NullReceiver by First seen on thehackernews.com Jump…
-
Terra Security Adds Prevention Rules to Its Offensive Security Platform
Terra Security has launched Prevention, a capability that turns confirmed exploit findings into targeted Web Application Firewall or firewall rules while a permanent fix is still in progress. The feature is part of Terra Platform. When Terra confirms that a finding is exploitable, its AI agents test whether existing compensating controls stop that attack path……