The cybercriminal market for hijacked AI accounts is flourishing as threat actors seek to lower their costs and obscure attribution for attacks.

SAP says it needs to “be disciplined in how we spend.” That includes still freezing hires and travel. Unless it's to do with AI, of course.

Bad actors are registering fake accounts to resell discounted and trial AI services from Anthropic, Google and Amazon for profit. Here's the lowdown.

OpenAI and Hugging Face share early findings from a security incident during AI model evaluation, highlighting advanced cyber capabilities and lessons for defenders.

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

Use an MCP to connect AI tools and agents like Claude and ChatGPT to CourtListener's full functionality, enabling complex legal monitoring, research, and analysis.

Context bombing" tricks hacking agents into shutting down before they can do harm.

Europol together with partners from across the globe today announces a landmark blow to cybercriminal networks as part of Operation Endgame, a sweeping international operation targeting the criminal i...

Until last week, attackers faced a dilemma in using frontier models: even if they could manage the cat-and-mouse game of setting up fake accounts to retain API access to frontier model providers, and even if they could induce models to help them hack via creative prompting, their usage was logged, so if discovered after the fact, their tactics, techniques, procedures, goals, and targets would be exposed to defenders.

The pull_request_target event is one of the most commonly misused triggers in GitHub Actions, leading to vulnerabilities in workflows. Workflows triggered by pull_request_target run with the base repo...

An update from Klue's CEO on a recent security incident.

Anthropic is an AI safety and research company that's working to build reliable, interpretable, and steerable AI systems.

Update (May 19 13:37 UTC): Updated the timeline of the compromised VSCode extension. Added information about OpenVSX. Update (May 20 23:46 UTC): Updated details on scope of impact Update (May 21 ...

Posted 1:35:03 AM. Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta…See this and similar jobs on LinkedIn.

Okta Threat Intelligence studies recent abuse of the device code authorization flow in service provider ecosystems, and provides links to detection and remediation strategies for protecting clients cr...

How OpenAI runs Codex securely with sandboxing, approvals, network policies, and agent-native telemetry to support safe and compliant coding agent adoption.

Today, we're excited to launch AI Coverage (insurance for when your AI messes up). Insurance was built for risks that have existed for decades. AI is creating a new category very quickly. Think abou...

Authenticate workloads to the Claude API with short-lived identity tokens from your own identity provider instead of long-lived static API keys.

Turn your agent into an investigative system. Methodology, investigator and fact-checker loops, human review gates, local-first workflows.

AI agents are being handed the "keys to the kingdom," but research shows they can't be trusted to hold them. Learn how agent guardrails can fail.

Anne Robinson would like a word with .github/workflows

Turn your agent into an investigative system. Methodology, investigator and fact-checker loops, human review gates, local-first workflows.

A monetization playbook for the post-browser era

Top security experts warn AI is discovering vulnerabilities exponentially faster than defenders can respond, creating a "perfect storm" for attackers over the next two years.

Let us know if you see more.

I started building Confer because I saw how amazing LLMs are, and as a result, how much of our data is flowing through them. Already, AI chat apps have become some of the largest centralized data lake...

I found a way to make AI tell you lies – and I'm not the only one.

Even as the price of chocolate returns to lower levels, companies are realizing something scary: Americans will buy their fake chocolate.

Imported chips and hardware mean the AI investments are translating into US GDP growth.

What a year of finding zero-days in OpenSSL, curl, and the Linux kernel taught us about AI-driven security research done right.

Substances include chemicals that can cause cancer, neurodevelopmental problems, and the feminisation of males

Commercial AI services are enabling even unsophisticated threat actors to conduct cyberattacks at scale—a trend Amazon Threat Intelligence has been tracking closely. A recent investigation illustrates...

A story about an AI generated article contained fabricated, AI generated quotes.

Personal AI assistants like OpenClaw present interesting new challenges for security teams. Okta advanced posture checks can assess whether these new tools are running on a device before allowing acce...

As LLMs and diffusion models power more applications, their safety alignment becomes critical. Our research shows that even minimal downstream fine‑tuning can weaken safeguards, raising a key question...

Detecting and Monitoring OpenClaw (clawdbot, moltbot), Author: Johannes Ullrich

Learn how Microsoft research uncovers backdoor risks in language models and introduces a practical scanner to detect tampering and strengthen AI security.

Abstract Moltbook is a novel social media platform exclusively populated by autonomous AI agents, with 1.5 million registered accounts and minimal human oversight. This risk assessment analyzes 19,802...