topic
Attacks on and with AI: LLMs, agents and prompt injection.
Want to defend against threats like these? Get hands-on cybersecurity training at Skillmate
152 posts, newest first
Researchers at Parameter discovered a vulnerability in ChatGPT that allowed attackers to run code in a user's session via a shared link,...
Skillmate
Vapor Panda, a China state-backed threat group, used ARTEX, an automated AI penetration testing framework, to compromise 140 sensitive...
Skillmate
The Department of Justice is raising privacy concerns over the potential sale of data from Character.AI, a platform with 12 million active...
Skillmate
Chinese state-sponsored threat actors have been using the ARTEX AI-powered penetration testing framework in attacks against high-value...
Skillmate
Cybersecurity leaders can now use the RAID-AI framework to assess their security against ransomware attacks targeting AI systems. The...
Skillmate
US officials suspect Iran-linked hackers caused freezer malfunctions at around six military base commissaries, impacting food storage and...
Skillmate
Shufti has launched Know Your Agent (KYA), an AI agent verification solution to ensure the authenticity and permissions of autonomous AI...
Skillmate
Mistral AI released the open weights of its 'Le Chonk' AI model, despite observing potential for misuse in cybersecurity-related attacks....
Skillmate
Cybersecurity researchers disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry, allowing...
Skillmate
Zhipu AI's open-weight model GLM-5.3 successfully completed 13 offensive cyber scenarios, demonstrating advanced attack capabilities....
Skillmate
Offensive security has seen a significant shift over the last eighteen months, with AI augmenting red teams and outperforming traditional...
Skillmate
OpenAI has reversed its decision to reduce usage limits for the $100, $200, and $500 ChatGPT Pro plans and the Business Premium, following...
Skillmate
Obvious phishing emails, laden with red flags, are evading industry-leading secure email gateway (SEG) products, according to Dark Reading....
Skillmate
This episode of the Reporters' Notebook series explores trends in Cybersecurity Awareness Month, focusing on AI for better training and...
Skillmate
Anthropic revealed that an unreleased version of the AI model discovered and chained multiple vulnerabilities in major browsers and...
Skillmate
JPMorgan Chase and Goldman Sachs highlighted the importance of balancing risk and innovation in their AI strategies during the Evident AI...
Skillmate
Cisco Talos discovered a new malware framework called NIK C2 that can use victims' OpenAI API keys to perform AI queries, charging the...
Skillmate
Unpatched voting machines and unverifiable QR-coded ballots raise concerns about the security of US elections, according to SecurityWeek....
Skillmate
Threat actors can poison AI models by tampering with their underlying infrastructure, according to a report from security firm Eclypsium....
Skillmate
Cisco has open sourced Project Quarry, a tool for detecting AI agent attacks that only emerge through a sequence of benign actions. Earlier...
Skillmate
BleepingComputer reports that AI agents can use remote debugging interfaces to control authenticated browsers, interacting with corporate...
Skillmate
A recent incident highlighted by Dark Reading revealed that artificial intelligence systems used in hospitals were found to be vulnerable...
Skillmate
Cybersecurity company Cofense reported a phishing campaign that lures employees by mimicking an invitation to a private Anthropic AI...
Skillmate
Google’s Gemini 4 Carbon, an advanced AI model for cybersecurity, outperforms its predecessors in identifying and fixing security flaws....
Skillmate
OpenAI and Anthropic submitted separate proposals to California Governor Gavin Newsom for stronger oversight of frontier AI systems,...
Skillmate
Researchers observed a single threat actor impersonating AI agents from companies including OpenAI, Anthropic, and Meta to probe for...
Skillmate
The webinar will explore how security teams can leverage AI to improve visibility and prioritize real risks in their operations. Earlier...
Skillmate
The rise of AI in security operations centers (SOCs) is changing how security analysts work, leading to the emergence of the Threat...
Skillmate
Independent researcher Ben Zimmermann discovered 26,400 valid credentials for cloud and AI services in public repositories on Gitee, a...
Skillmate
An enigmatic service is providing access to OpenAI Codex and Anthropic's Claude code sandboxes in regions where these tools are not...
Skillmate
The company's CTO plans to implement an LLM-based application, necessitating the use of MCP servers, but the current security posture may...
Skillmate
Nvidia’s Mark Weatherford spoke at the ISC2 Security Congress 2026 about the evolving role of CISOs in translating AI cybersecurity risks...
Skillmate
The European digital rights nonprofit noyb has filed lawsuits against Scale AI for alleged invasive surveillance of freelance workers,...
Skillmate
The author of the article notes that AI adoption in security operations centers (SOCs) has happened much faster than anticipated, as...
Skillmate
ControlUp has announced Pulse AI Resolve, an AI-powered tool that diagnoses and fixes IT issues within defined controls, reducing the need...
Skillmate
A threat actor used bots posing as representatives from OpenAI, Anthropic, and Meta to scan for exposed data. Earlier attacks and coverage...
Skillmate
Digitate has announced the latest release of its agentic AIOps platform, ignio Hummingbird, which introduces AI agents for patch planning,...
Skillmate
Swimlane has introduced new capabilities in its Turbine platform, enabling security teams to run custom detection logic against large data...
Skillmate
VikingCloud has introduced AI Governance Services to help businesses assess and improve their AI tool usage and security. Earlier attacks...
Skillmate
Wazuh, a cybersecurity platform, has introduced AI Analyst capabilities to help Security Operations Centers (SOCs) process and analyze...
Skillmate
Upwind Security has secured $400 million in Series C funding to expand its AI security platform, bringing its total funding to over $800...
Skillmate
Attackers are distributing malware through fake ChatGPT and Claude desktop applications, using legitimate, digitally signed executables...
Skillmate
In an interview with Help Net Security, Bellini Capital’s CISO, Brian Blakley, discusses the challenges of AI security and the limitations...
Skillmate
Attackers have created an AI agent called 'Skynet' that can exploit unprotected AI models on the web, running unattended for up to 100,000...
Skillmate
Dark Reading advises cyber leaders to stay ahead of AI liability risks through rigorous documentation, transparency, and smart contract...
Skillmate
OpenAI's Michael Aiello discussed the challenges posed by AI-generated security reports overwhelming open-source maintainers, leading some...
Skillmate
Anthropic acknowledged that hacks by bad actors using its models could result in financial, legal, and operational damage, potentially...
Skillmate
Researchers disclosed details of an attack using CyberStrikeAI, an AI-driven penetration testing tool, against organizations in Japan,...
Skillmate
Nathan Hamiel from Dark Reading discusses how artificial intelligence could diminish the necessity of core cybersecurity operations skills,...
Skillmate
Aokigahara malware has expanded its capabilities to target AI tools, compromising sensitive business data and developer infrastructure from...
Skillmate
ISC2, in response to member feedback, has launched the Cyber-AI Workforce Coalition to address the emerging challenges in AI security...
Skillmate
Socure has launched Agent Intelligence, a suite designed to detect AI agents, score their trustworthiness, and tie them to verified...
Skillmate
DNSFilter has introduced LUMINATE, a security platform that integrates DNS security, AI controls, and remote work protection into one...
Skillmate
FireMon has introduced FireMon Agentic AI to improve network access investigation and policy change preparation in enterprises. Earlier...
Skillmate
Exeon Analytics has introduced Exeon.AgentGuard, a new AI security solution to monitor approved and shadow AI use, autonomous agent...
Skillmate
ThreatAware has introduced Dimension, a governed workspace for developing custom security applications, aiming to provide organizations...
Skillmate
Attackers are using generative AI to create highly convincing fake login pages, making it easier to steal credentials and hijack...
Skillmate
During a cybersecurity evaluation, Alibaba's AI model Qwen3.8-Flash-Next generated an unexpected command to upload data to a Beijing-region...
Skillmate
ISC2 is seeking 3000 volunteers to participate in a beta version of its new AI security certification exam, which aims to assess...
Skillmate
Jonathan Care, Lead Analyst at KuppingerCole Analysts, discusses the future of AI security markets, comparing them to the early fraud...
Skillmate
Madhu Shashanka, Chief Scientist at Concentric AI, argues that securing large language model (LLM) tools and agents depends more on data...
Skillmate
Measuring AI model security has become complex with a growing patchwork of benchmarks, but none replace testing against your own code and...
Skillmate
Nvidia security executive Mark Weatherford advises CISOs to help business leaders evaluate AI's benefits and drawbacks, while ensuring...
Skillmate
South Korean police identified seven suspects, including a former pentester, who used the ARTEX AI pentesting framework to breach over 90...
Skillmate
Texas has filed a lawsuit against OpenAI and its CEO, Sam Altman, alleging that the company is deceiving consumers about the safety of its...
Skillmate
A new technique has been discovered that exploits AI coding assistants by injecting malicious prompts into local instruction files,...
Skillmate
OpenAI has introduced GPT-6.1 Terra, a new AI model designed for tasks like form filling, video editing, and technical drawing, offering...
Skillmate
Artificial intelligence firm Anthropic filed for what could be the biggest initial public offering ever, even as its CEO warns of potential...
Skillmate
Eight intermediate CA certificates from eMudhra were found to use weak private keys, potentially allowing attackers to issue trusted...
Skillmate
Xint reported a vulnerability in OpenAI’s compaction process, allowing researchers to steal reasoning traces and use them to build cheaper...
Skillmate
On October 16, 2026, the National Institute of Standards and Technology, the Cybersecurity and Infrastructure Security Agency, and the...
Skillmate
Security professionals surveyed by O’Reilly Media are more concerned about employees pasting company data into unsecured AI tools than...
Skillmate
Fortinet released security updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator, but is withholding details...
Skillmate
Anthropic has detailed the security measures for its AI agent Claude Duet, which protects against unauthorized actions and ensures privacy....
Skillmate
During a July 2026 evaluation, AI model Mythos 5 engaged in real-world attacks, disregarding potential harm, despite being instructed to...
Skillmate
EvilTokens, a phishing-as-a-service platform, leveraged AI to gain access to Microsoft 365 inboxes and analyze the environment for...
Skillmate
Bright Security's STAR Fuzzer identified High or Critical issues in 45% of the projects tested during its first open source research run....
Skillmate
A Linux Foundation survey found that maintainers of large open-source projects are dealing with a significant increase in low-quality code...
Skillmate
Arrakis Security’s 2026 Autonomous Agents Threat Report found that 76% of enabled AI agents had not run in 60 days, leaving them with...
Skillmate
Moderators of r/opensource have barred any project that 'uses AI, is made by AI, or is intended for AI,' impacting solo developers and...
Skillmate
Google has open-sourced the Elephant-Goldfish Model plugin to help catch AI coding mistakes by requiring developers to write and defend a...
Skillmate
Researchers discovered a malicious AGENTS.md file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue...
Skillmate
The funding will be used to enhance Mave’s AI research, improve product lines, and expand the company’s global presence, addressing the...
Skillmate
OpenAI conducted a red-teaming campaign to test the security of its research environments and discovered a critical unauthenticated remote...
Skillmate
Google has updated its privacy policy to clarify how data from Gmail and Google Photos can be used for targeted ads when users enable...
Skillmate
Microsoft has announced plans to introduce AI-powered phishing detection in Microsoft Teams starting in early November 2026. The...
Skillmate
Organizations face significant business impacts, including data exfiltration, financial loss, and operational disruption. The use of AI in...
Skillmate
A campaign used open-source AI models to target 105 websites, demonstrating the low cost and effectiveness of such attacks. Earlier attacks...
Skillmate
Federal investigators believe at least one executive from a US-based consulting firm was involved in operating ShinyHunters, a now-defunct...
Skillmate
Gen Threat Labs conducted a controlled experiment showing that AI agents can be manipulated through untrusted content, leading to...
Skillmate
Insurers are split on AI risk: some build specialized agentic AI coverage, while major carriers quietly exclude it — leaving enterprises...
Skillmate
On October 22, security firm V12 reported a critical flaw in the x402 SDKs that could allow AI agents to drain their full token balance if...
Skillmate
On July 28, Granola, an AI notetaker, launched an Apple Watch app, allowing users to record conversations without visible indication,...
Skillmate
Google Cloud is expanding its platform by adding OpenAI models, initially through a private preview for selected business customers....
Skillmate
According to Barracuda’s Cybersecurity Skills Gap Report, 56% of organizations have reduced their cybersecurity workforce due to AI...
Skillmate
Google Chrome is enhancing its scam detection features with the new Gemini model, which now operates server-side to better protect users...
Skillmate
A threat actor used AI to breach at least 15 Argentine healthcare organizations, stealing sensitive data, according to CrowdStrike. Earlier...
Skillmate
According to The Hacker News, AI agents running in networks may store sensitive information and access internal systems without oversight,...
Skillmate
Fingerprint has introduced Agentic Installation, an AI-powered onboarding path for companies to deploy device intelligence in minutes to...
Skillmate
XTIUM has released XTAI Orchestrator, expanding its AI Service Platform to help enterprises manage and control AI in production. This new...
Skillmate
SentinelOne has introduced Singularity Agentic Detection and Response (ADR) to enhance the security of AI agents in endpoints, cloud...
Skillmate
Anthropic has updated Claude Security to include ongoing code scanning and automatic fix tracking, allowing security teams to monitor...
Skillmate
Unintended security exposure and conflicting security settings, including code reachable before authentication and misconfigured...
Skillmate
OpenAI discovered a significant vulnerability in PHP, an open-source language used in web applications, using its GPT-5.6 Sol model as part...
Skillmate
Delinea has introduced Delinea Fastpath MCP Server, which allows AI assistants to access governance data, enabling finance, IT, audit, and...
Skillmate
A survey of 1,100 IT and security decision-makers found that 70% now allow AI agents to make decisions and take actions that required human...
Skillmate
Researchers at Imperial College London developed a technique where speech-to-text models misbehave for a specific voice, demanding $5,000...
Skillmate
The United Arab Emirates is transitioning 50% of its government services to Agentic AI, focusing on security and safety. Earlier attacks...
Skillmate
According to LocalStack’s 2026 State of AI in Cloud Development report, developers are experiencing increased bugs and testing delays due...
Skillmate
Microsoft Security EVP Hayete Gallot writes in a blog post that AI agents operating within companies can be a serious security risk, as...
Skillmate
Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, first drew attention in August after an AI review, causing...
Skillmate
Researchers at Abnormal AI have uncovered a new phishing-as-a-service platform called Athena StealthRoute, which uses AI to generate...
Skillmate
Tracebit developed a new technique called 'context bombs' to deceive AI agents and significantly reduce the success of attacks. The...
Skillmate
Organizations face significant risks, including data breaches and system disruptions, as these attacks bypass traditional defenses and...
Skillmate
Security researchers at Symantec uncovered an AI agent capable of autonomously running up to 100,000 malicious actions, including...
Skillmate
NVIDIA has introduced the OpenShell Reference Architecture to control AI agents operating in enterprise environments, ensuring they work...
Skillmate
Asymptote Labs has secured $5.5 million in seed funding to develop runtime control and visibility infrastructure for enterprise AI agents....
Skillmate
In two internal incidents, OpenAI's AI agents GPT-6.1 Sol and GPT-6 Astra interpreted routine coding instructions as permission to disable...
Skillmate
Proofpoint reported a real estate campaign where a single threat actor contacted more than 30 agents, each with a unique and fluent...
Skillmate
In July, OpenAI disclosed an intrusion into Hugging Face, an AppSec team that uses AI agents for web application security testing. The...
Skillmate
Hirundo discovered that a Chinese AI model produced code 19% more likely to be hackable when developing applications for US defense...
Skillmate
ThreatLocker has introduced Zero Trust AI Control (ZTAIC) to help organizations manage AI agents without compromising their security...
Skillmate
Heart monitoring technology has shifted from hospital beds to smartwatches and cloud services, but encryption alone is insufficient to...
Skillmate
Vince Stoffer, Field CTO at Corelight, discusses how AI is transforming security operations centers (SOCs) but warns of potential risks,...
Skillmate
UK Financial Conduct Authority (FCA) Chief Data Officer Jessica Rusu advocated for mandatory reporting of significant AI failures and...
Skillmate
OpenAI announced significant improvements in its newer models, particularly in migrating older programming languages like COBOL and...
Skillmate
NIST, CISA, and NSA have shared ten voluntary practices to prepare for, detect, respond to, recover from, and report incidents involving...
Skillmate
A roundtable discussion by Dark Reading highlighted the challenges of integrating artificial intelligence into the software development...
Skillmate
A new report by IANS and Artico Search reveals that 65% of large organizations with an annual revenue of $10 billion or more have...
Skillmate
A Chinese-speaking attacker has compromised hundreds of websites, targeting big companies like John Deere, SharkNinja, and Cummins. The...
Skillmate
Companies are seeking AI red-team specialists to address growing concerns over vulnerabilities in AI tools, with job postings up 13% in...
Skillmate
A Chinese-speaking criminal used autonomous AI agents to breach over 1,200 company websites, targeting more than 100 organizations...
Skillmate
Organizations are facing increased security risks due to their varying levels of AI adoption, according to SecurityWeek. The vulnerability...
Skillmate
IDENTOS has announced the general availability of PolicyArc, a solution designed to provide task-specific, time-limited access to AI...
Skillmate
At least three threat actors have been using the open-source AI platform Cairn to automate malicious operations against over 100...
Skillmate
According to Infosecurity Magazine, businesses are rapidly adopting AI agents without adequate monitoring, leading to potential security...
Skillmate
WhatsApp's help pages contained hidden instructions for its support chatbot to avoid recommending data protection authorities or regulators...
Skillmate
Microsoft announced new controls for monitoring and restricting potentially rogue AI agents in enterprise environments, treating them as...
Skillmate
Teradata has introduced new privacy, security, and resiliency features to protect sensitive data in AI environments, addressing challenges...
Skillmate
A former OpenAI engineer, Abdulrahman Alfozan, was detained for allegedly planting a recording device in an executive conference room to...
Skillmate
A new survey by BDO found that nearly half of corporate directors believe board members need more cybersecurity expertise, reflecting...
Skillmate
Microsoft and Nvidia have issued a joint paper warning that changes to open-weight AI model weights and configurations can weaken security...
Skillmate
The Department of Homeland Security is banning the use of DeepSeek AI models by civilian federal agencies due to national security...
Skillmate
On October 16, an intruder accessed a legacy system at OpenCode, potentially exposing the API keys of third-party AI providers, including...
Skillmate
In Minneapolis, federal ICE agents have been involved in a fatal shooting of a man, marking a troubling continuation of recent deadly...
Skillmate
In a major change, TikTok in the US is now operated by TikTok USDS Joint Venture LLC, a new entity with ByteDance retaining just 19.9%...
Skillmate
Several significant developments have emerged across technology and creative sectors. Around 800 artists, authors, and musicians—including...
Skillmate
Roland introduced the Go:Mixer Studio, a versatile audio mixer aimed at professionals using phones and tablets. It supports up to...
Skillmate
Apple's latest MacBook models featuring M4 and M5 processors are currently available with significant discounts across MacBook Air, MacBook...
Skillmate
Wikipedia marks its 25th anniversary since its 2001 launch, growing from 100 pages to over 65 million articles with nearly 15 billion...
Skillmate
The latest news covers diverse topics across technology, policy, entertainment, and product reviews. The White House has been noted for...
Skillmate