- #AISecurity
AI slop is piling up highest on the biggest open-source projects
A Linux Foundation survey found that maintainers of large open-source projects are dealing with a significant increase in low-quality code...
SkillmateAll posts
557 posts, newest first · page 14 of 24
- Skillmate
- #SecurityNews
Product showcase: Stellar Cyber’s ISOC platform provides full-cycle architecture
Organizations benefit from streamlined security operations, improved incident response, and enhanced protection against cyber threats....
Skillmate
- #AISecurity
Forgotten AI agents may still access sensitive company data
Arrakis Security’s 2026 Autonomous Agents Threat Report found that 76% of enabled AI agents had not run in 60 days, leaving them with...
Skillmate
- #CryptoFraud
Synthetic identities leave US lenders with $2.4 billion in fraud exposure
According to TransUnion’s report, criminals are using established customer accounts and familiar brands to steal money and personal...
Skillmate
- #AISecurity
r/opensource bans AI projects, and solo devs go down with them
Moderators of r/opensource have barred any project that 'uses AI, is made by AI, or is intended for AI,' impacting solo developers and...
Skillmate
- #AISecurity
- #WebApps
Google open-sources the Elephant-Goldfish Model plugin its engineers use to catch AI coding mistakes
Google has open-sourced the Elephant-Goldfish Model plugin to help catch AI coding mistakes by requiring developers to write and defend a...
Skillmate
- #Vulnerabilities
- #Linux
OpenSSL 4.1.0 Adds DTLS 1.3 Support with Four Known Bugs
The OpenSSL project released version 4.1.0, introducing support for DTLS 1.3 but also listing four known bugs in the DTLS code. The...
Skillmate
- #Linux
- #Vulnerabilities
Single Hacked Device Can Gain Root Access via Tailscale SSH Flaw
A security researcher published findings showing that a single hacked device on a Tailscale network can gain root access to other servers...
Skillmate
- #AISecurity
Malicious AGENTS.md File Hijacks AI Coding Agents
Researchers discovered a malicious AGENTS.md file in a customer's Downloads folder that tricked an AI coding agent into installing a rogue...
Skillmate
- #AISecurity
Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
The funding will be used to enhance Mave’s AI research, improve product lines, and expand the company’s global presence, addressing the...
Skillmate
- #AISecurity
- #Vulnerabilities
- #OpenAI
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
OpenAI conducted a red-teaming campaign to test the security of its research environments and discovered a critical unauthenticated remote...
Skillmate
- #Vulnerabilities
- #Malware
- #IoTOT
BlackX UEFI Bootkit Exploits Baton Drop Flaw
A new UEFI bootkit called BlackX was deployed in early 2026 to target diplomatic agencies in Central Asia, exploiting the Baton Drop...
Skillmate
- #AISecurity
Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
Google has updated its privacy policy to clarify how data from Gmail and Google Photos can be used for targeted ads when users enable...
Skillmate
- #CryptoFraud
Trust Is Not What It Seems — And Fraudsters Are Counting on It
Threat actors are using artificial intelligence to trick help desk employees into granting unauthorized access to organizations, bypassing...
Skillmate
- #Vulnerabilities
- #ActivelyExploited
- #CriticalCVE
Vulnerable Popcorn Time Fork Exposes Millions of Devices
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client,...
Skillmate
- #Phishing
- #AISecurity
- #Microsoft
Microsoft Teams to Add AI-Powered Phishing Detection in November 2026
Microsoft has announced plans to introduce AI-powered phishing detection in Microsoft Teams starting in early November 2026. The...
Skillmate
- #Vulnerabilities
- #Malware
- #IoTOT
Diplomatic Entities in Central Asia Targeted by BlackX UEFI Bootkit
Diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan have been targeted by the BlackX UEFI bootkit, suspected to be...
Skillmate
- #Vulnerabilities
- #AISecurity
- #Ransomware
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions
Organizations face significant business impacts, including data exfiltration, financial loss, and operational disruption. The use of AI in...
Skillmate
- #Privacy
FCC Bans Devices with Huawei Surveillance Chips
The Federal Communications Commission banned two devices , a wireless video transmitter and a dashboard camera , that use chips...
Skillmate
- #AISecurity
AI Tools Are Generating Massive Attacks for Little Cost
A campaign used open-source AI models to target 105 websites, demonstrating the low cost and effectiveness of such attacks. Earlier attacks...
Skillmate
- #Windows
- #Microsoft
Microsoft: Windows Server 2016 reaches end of support in January
Microsoft has announced that Windows Server 2016 will stop receiving security updates on January 12, 2027, leaving systems vulnerable to...
Skillmate
- #Vulnerabilities
Senators say targeted ads are a security risk. Ad groups say the critics are off base
Senators Ron Wyden and Cory Booker are pushing for better security practices in the advertising industry after a report by Citizen Lab...
Skillmate
- #IoTOT
Dual BIOS: A Critical Defense Against Corrupted Firmware
SMBs are at risk of business interruptions due to corrupted BIOS, which can brick devices and disrupt operations. Earlier attacks and...
Skillmate
- #Vulnerabilities
- #WebApps
- #ActivelyExploited
PHP Shares Mitigation for New RCE Vulnerability
The vulnerability can be exploited when an application sets session.serializehandler to phpbinary or phpserialize in its configuration and...
Skillmate