Tag: RedTeam
-
Anthropic open-sources FlashProve, its provable inference prototype for MoE models
Anthropic’s Frontier Red Team, with collaborators at EPFL, MIT and StarkWare, built FlashProve, a prototype that produces a cryptographic proof that one specific language … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/04/anthropic-flashprove-provable-inference/
-
11 Breach Attack Simulation Tools: The 2026 Buyer’s Verdict Guide
Breach and attack simulation tools answer the question audits can’t: would the controls you pay for actually stop the techniques attackers use this quarter? The buying mistake is treating the category as uniform it spans safe simulators, real-exploitation engines, and emulation frameworks for red teams, each with different governance and staffing implications. This verdict guide…
-
Anthropic’s Claude Chains One-Click and Zero-Click Exploits to Bypass Chrome, Android and Linux Security
Anthropic announced that an unreleased research model called Claude successfully developed working exploit chains for Chrome, Safari, Android, Windows, and Linux. The company’s Frontier Red Team shared these findings on October 27, 2026. Many exploit chains required minimal or no user interaction, and the team reported every identified flaw to the respective vendor before publication.…
-
OpenAI AI Agents Exploit Zero-Day Vulnerabilities to Escape Sandboxes and Access Host Systems
OpenAI disclosed that its AI agents escaped hardened virtual machines, bypassed network restrictions, and exchanged information across isolated environments during an internal red-teaming campaign. Published October 23, the findings describe weaknesses in frontier-model research infrastructure, not demonstrated compromises of customer-facing products. The company said it patched discovered vulnerabilities and strengthened containment before resuming frontier training.…
-
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Tags: ai, cybersecurity, data, data-breach, extortion, infrastructure, intelligence, ransomware, RedTeam, russia, threatCybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups.Central to the operation is an “Autonomous Red Team Kill Chain Framework” referred to as Phantom. The threat actor is assessed to be Russian-speaking and functions both as an intrusion and data-extortion operator, as well…
-
Anthropic finds 94 cases where open-source projects drop security controls without warning
Software can expose complex functionality to unauthenticated users even when that functionality is disabled or unnecessary. Anthropic’s Frontier Red Team used Claude to … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/22/anthropic-attack-surface-reduction-open-source/
-
AI security hiring focuses on red-teaming, SOC orchestration and governance
Roles mitigating AI deepfakes and overseeing post-quantum encryption rollouts are on the horizon, according to a new report. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-security-jobs-hiring-sans-tracker/833465/
-
Einblicke in Googles Red Team – So rüsten sich Red Teamer gegen KI-Angriffe in Maschinengeschwindigkeit
First seen on security-insider.de Jump to article: www.security-insider.de/google-gsec-muenchen-ki-cyberangriffe-red-team-a-46aa26409df8fb566f8b6003a4e4c102/
-
What are self-replicating ‘AI worms’, and why is Anthropic worried about them?
The tech company says successful AI worms need more capability on less powerful devices, but current trends make that feasible by the end of the yearWarnings about what artificial intelligence might do in the future together with alarming reports of what it has gotten up to already are being issued so quickly that even security…
-
12 Best Bug Bounty Platforms Compared (2026): Features Pricing
HackerOne and Bugcrowd remain the global anchors, Intigriti and YesWeHack lead the European lane, and Synack’s vetted red team defines the private high-assurance end. Twelve platforms compared across crowd models, triage quality, and jurisdiction with the specialty lanes (web3’s Immunefi, Cobalt’s PtaaS) and status flags treated honestly. Quick Verdict: Best Bug Bounty at a Glance…
-
Cisco Talos Warns AI Agent Swarms Can Compress Cyberattacks From Months to Hours
Cisco Talos warns that coordinated AI agent swarms could radically shorten the time needed to run sophisticated cyberattacks, compressing operations that traditionally require months of red-team planning, reconnaissance, and infrastructure work into hours. The primary concern is no longer whether AI will be used in cyberattacks, but how organizations can withstand persistent, scalable and increasingly…
-
WorkNest Secure Achieves CREST STAR-FS Accreditation for Red Teaming
WorkNest Secure has achieved CREST Simulated Targeted Attack & Response for Financial Services (STAR-FS) accreditation, recognising its ability to deliver intelligence-led red teaming assessments for organisations operating in high-risk and regulated environments. The accreditation confirms that WorkNest Secure meets CREST’s standards for conducting threat-led penetration testing, using realistic attack scenarios to assess how effectively organisations…
-
Anthropic Expands Access to Frontier Cyber AI Models
3 Access Tiers Cover Defense, Red Teaming and Critical Systems. Anthropic opened its advanced cyber AI program to applications from any organization, offering tiered access for defense, red teaming and critical infrastructure testing as increasingly capable models become available to attackers and defenders alike. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/anthropic-expands-access-to-frontier-cyber-ai-models-a-33035
-
Anthropic Opens Claude’s Advanced Cyber Capabilities to Verified Red Teams With Reduced Restrictions
On October 6, 2026, Anthropic announced an expanded Cyber Verification Program (CVP) that gives vetted security professionals access to advanced Claude capabilities with fewer cybersecurity restrictions. This initiative integrates its existing verification program and Project Glasswing into three distinct access tiers focused on defensive analysis, authorized offensive testing, and assessments of sensitive infrastructure. According to…
-
Code-Sicherheit mit Frontier-KI – Rubrik-Dienst für KI-gestütztes Red-Teaming von Kundencode
First seen on security-insider.de Jump to article: www.security-insider.de/rubrik-dienst-fuer-ki-gestuetztes-red-teaming-von-kundencode-a-7d88338ea39c2cbd279084ff35c5018e/
-
RemoteThreat Bets Security Teams Need to Test What Happens After Defenses Fail
The offensive cyber operations startup looks to evolve red teaming beyond traditional methods to simulate attackers’ increasingly advanced capabilities. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/remotethreat-bets-security-teams-need-to-test-what-happens-after-defenses-fail
-
8 Top Red Teaming Service Providers for Enterprise Adversary Emulation
Compare 8 top red teaming providers for enterprise adversary emulation, from DeepSeas and Mandiant to CrowdStrike, IBM, SpecterOps, TrustedSec and NCC Group. First seen on hackread.com Jump to article: hackread.com/red-teaming-service-providers-enterprise-adversary-emulation/
-
Rubrik Code Guardian: Frontier-KI wird zum Red Team für Unternehmenscode
Rubrik Code Guardian nutzt Claude Mythos 5, um Quellcode isoliert auf ausnutzbare Schwachstellen und komplexe Angriffsketten zu untersuchen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/rubrik-code-guardian-frontier-ki-wird-zum-red-team-fuer-unternehmenscode/a46440/
-
Pentest bestanden und trotzdem gehackt: Wo Red Teaming und APT Simulationen mehr bieten
Die Firma hat den Pentest bestanden, wurde aber trotzdem gehackt? Erfahre, warum Red Teaming und APT-Simulationen die IT-Abwehr verbessern. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/gast-artikel/pentest-bestanden-und-trotzdem-gehackt-wo-red-teaming-und-apt-simulationen-mehr-bieten-333471.html
-
TIBER-EU and the Future of Cyber Resilience: Why Continuous Security Validation Is No Longer Optional
Sep 14, 2026 TIBER-EU and the Future of Cyber Resilience: Why Continuous Security Validation Is No Longer Optional A point-in-time red team exercise proves resilience once. Here’s what it takes to prove it every day in between. Summary TIBER-EU is… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/tiber-eu-and-the-future-of-cyber-resilience-why-continuous-security-validation-is-no-longer-optional/
-
The Harness Advantage in Autonomous Red Teaming: Why Frontier LLMs Alone Fail Offensive Security and How RidgeGen Solves the Alignment Dilemma
An Empirical 8-Model Benchmark on Agent Harness Architecture, Model Over-Refusal, Token Efficiency, and Enterprise Sovereignty in Modern AI-Driven Penetration Testing 1. The Core Thesis: Offensive Capability Is a Function of the Harness, Not the Raw Model In my book on… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-harness-advantage-in-autonomous-red-teaming-why-frontier-llms-alone-fail-offensive-security-and-how-ridgegen-solves-the-alignment-dilemma/
-
CrowdStrike launches autonomous AI red teaming to cut breakout time
First seen on scworld.com Jump to article: www.scworld.com/brief/crowdstrike-launches-autonomous-ai-red-teaming-to-cut-breakout-time
-
Angriffspfade mit ‘Attack Chaining” gezielt analysieren und absichern
Filigran, das europäische Open-Source-Unternehmen für Bedrohungsmanagement, hat ‘Attack Chaining” vorgestellt. Dabei handelt es sich um eine Funktion zur Validierung von Angriffspfaden, die Penetrationstests und Red-Teaming-Aktivitäten mit OpenAEV automatisiert. OpenAEV ist ein Produkt zur Validierung von Sicherheitslücken durch simulierte Angreifer. Die neue Funktionalität ist ab sofort in OpenAEV v3 verfügbar. Angreifer wenden Techniken nicht isoliert an, sondern…
-
Filigran erweitert OpenAEV v3 um dynamische Attack-Chaining-Funktion
Filigran erweitert OpenAEV v3 um Attack Chaining: Dynamische Angriffspfade automatisieren Penetrationstests, Red-Teaming und Security-Validierung. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/filigran-erweitert-openaev-v3-um-dynamische-attack-chaining-funktion/a46303/
-
Project Watershed 250: White House Tests Water Cyber Defenses in Texas
Project Watershed 250 brings free AI tools, red teaming and private-sector expertise to Texas water utilities during a six-month cybersecurity pilot. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/project-watershed-250-white-house-tests-water-cyber-defenses-texas/
-
Filigran Adds AI-Powered Attack Chaining to OpenAEV for Autonomous Pentesting
Filigran has launched a new attack chaining capability for its OpenAEV platform, designed to help security teams test how multiple weaknesses can be combined to create a viable path through an organisation’s environment. Released as part of OpenAEV v3, Attack Chaining allows penetration tests and red team exercises to adapt dynamically based on what a…
-
Offensive Security Investments Surge as AI Threats Increase
Omdia’s Theresa Lanowitz talks with the Dark Reading News Desk about the potential, and risks, of using agentic AI for penetration testing, red teaming, and other practices. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/offensive-security-investments-surge-ai-threats-increase
-
CISA identifies security hurdles that led to very different results in two red-team engagements
The agency said its recent simulated cyberattacks offered several key lessons for many organizations. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-red-team-exercises-lessons-cloud-soc/828733/
-
CISA Red Team Fully Compromised Two Critical Infrastructure Orgs
CISA red teams fully compromised two critical infrastructure orgs. One SOC isolated hosts in minutes; the other never detected the breach. CISA published an advisory (AA26-237A) documenting two simultaneous red team assessments at critical infrastructure organizations. Both organizations lost full domain control and had their cloud environments compromised. One of them didn’t know until CISA…