Cybersecurity

Twitter

Facebook

Copy Link

Key Facts

Key PlayersCrowdStrike, Palo Alto Networks, Darktrace

AI AdoptionAdvanced

Use CasesThreat Detection, Incident Response, Vulnerability Scanning

Top News

AI Agents Expose Critical Identity Security Gap as 69% of Enterprises Share Credentials

A new wave of research reveals that 69% of enterprises share credentials across AI agents, creating massive security vulnerabilities. Organizations deploying AI agents report a 43% breach rate compared to 11% among those without significant AI-driven identity expansion. Major security firms including Palo Alto Networks, CrowdStrike, and Cisco have invested over $22 billion in acquisitions to address this emerging threat as machine identities now outnumber humans by 50 to one in many environments.

Technology9 sources

AI Agents Expose Critical Identity Security Gap as 69% of Enterprises Share Credentials

Technology9 sources

GhostApproval vulnerability exposes AI coding agents to remote code execution via symlinks

Security firm Wiz uncovered GhostApproval, a systematic security flaw affecting six major AI coding agents including Amazon Q Developer, Anthropic Claude Code, and Cursor. The vulnerability exploits symbolic links to trick agents into writing malicious code outside sandboxed workspaces, potentially granting attackers remote access to developers' machines. While Amazon, Cursor, and Google have issued patches, Anthropic dismissed the issue as outside its threat model, highlighting a critical debate about AI tool security responsibilities.

Technology5 sources

GhostApproval vulnerability exposes AI coding agents to remote code execution via symlinks

Technology5 sources

Varonis Systems extends AI security coverage to Claude Enterprise Suite and Cursor coding tool

Varonis Systems expanded its Varonis Atlas platform to secure Anthropic's entire Claude Enterprise Suite and Cursor AI-native coding tool. The integration adds runtime enforcement and threat detection for AI agents operating in software development and file-based work environments, addressing growing enterprise concerns about data exposure and prompt manipulation as organizations adopt agentic AI workflows.

Technology5 sources

Varonis Systems extends AI security coverage to Claude Enterprise Suite and Cursor coding tool

Technology5 sources

HalluSquatting attack exploits AI hallucinations to build botnets by tricking coding assistants

Security researchers from Tel Aviv University revealed HalluSquatting, an AI security threat that exploits AI hallucinations to trick AI agents into executing malicious code. The attack targets popular AI coding assistants like Cursor, GitHub Copilot, and Gemini CLI, with hallucination rates reaching 85% for repositories and 100% for trending skills. Attackers register fake resource names predicted by large language models, enabling AI-enabled botnets at unprecedented scale.

Technology5 sources

HalluSquatting attack exploits AI hallucinations to build botnets by tricking coding assistants

Technology5 sources

AI hacking skills outpace testing benchmarks as US federal agencies face August 1 deadline

Frontier AI models now develop hacking capabilities faster than the tests designed to measure them. With US federal agencies facing an August 1 deadline to establish benchmarking standards, existing evaluations already look obsolete. Industry leaders warn that static tests fail to capture what these systems can do in real-world environments, leaving regulators and security teams unable to assess whether AI models pose genuine cybersecurity threats.

Policy3 sources

AI hacking skills outpace testing benchmarks as US federal agencies face August 1 deadline

Policy3 sources

Commvault launches Minutes to Recovery simulation to test defense against AI-driven cyberattacks

Commvault has introduced Minutes to Recovery, a hands-on cyber resilience simulation that lets security and IT teams experience realistic Frontier AI-powered attacks. Participants act as hackers, defenders, and recovery experts in a two-hour session designed to stress test organizational readiness as the window between vulnerability discovery and exploitation has narrowed to just 29 minutes in 2025.

Technology2 sources

Commvault launches Minutes to Recovery simulation to test defense against AI-driven cyberattacks

Technology2 sources

Anthropic removes hidden Claude Code tracker after security researcher exposes AI privacy breach

Anthropic has removed a covert tracking system from Claude Code after security researcher Thereallo discovered spyware-like code collecting user data without disclosure. The company, known for championing ethical AI practices, claimed the tracker was an experiment to prevent account abuse and model distillation but failed to remove it for months.

Technology2 sources

Anthropic removes hidden Claude Code tracker after security researcher exposes AI privacy breach

Technology2 sources

Google Dialogflow CX security flaw let researchers create rogue agent to hijack AI chatbots

Security researchers at Varonis discovered a critical vulnerability in Google Dialogflow CX that could have allowed attackers to hijack AI-powered chatbots, steal sensitive user data, and compromise multiple agents within a single Google Cloud project. The flaw, dubbed Rogue Agent, affected organizations using Code Blocks and Playbooks, enabling attackers to read live conversations and send phishing requests. Google patched the issue between April and June 2026, with no evidence of real-world exploitation.

Technology4 sources

Google Dialogflow CX security flaw let researchers create rogue agent to hijack AI chatbots

Technology4 sources

GitLost Vulnerability Tricks GitHub AI Workflows Into Leaking Private Repository Data

Security researchers at Noma Security discovered GitLost, a prompt injection flaw in GitHub Agentic Workflows that allows attackers to exfiltrate data from private code repositories using nothing but a carefully worded public issue. The vulnerability exploits AI agents with cross-repo access, bypassing GitHub's guardrails with a single word and requiring no stolen credentials or special access.

Technology3 sources

GitLost Vulnerability Tricks GitHub AI Workflows Into Leaking Private Repository Data

Technology3 sources

Bank of England flags AI risks as threat to financial stability amid investor speculation

The Bank of England issued a stark warning about artificial intelligence threatening financial stability as investors pour money into AI companies while cyberattack vulnerabilities mount. The central bank's latest financial stability report highlights concerns about stretched share valuations, heavy borrowing by AI firms, and the rapid growth in AI's capacity for harm, signaling that regulators are watching the sector closely.

Policy3 sources

Bank of England flags AI risks as threat to financial stability amid investor speculation

Policy3 sources

IBM shrinks z17 mainframes into rack-mounted systems to bring enterprise AI to smaller organizations

IBM has introduced compact versions of its z17 mainframes and LinuxONE 5 servers in rack-mounted and single-frame configurations. The new systems pack up to 82 cores and 18TB of memory into standard 19-inch racks, democratizing access to mainframe computing for smaller enterprises. With on-chip AI acceleration and the ability to match x86 server performance while using fewer resources, IBM positions these platforms as solutions for organizations running sensitive AI workloads on-premises.

Technology3 sources

IBM shrinks z17 mainframes into rack-mounted systems to bring enterprise AI to smaller organizations

Technology3 sources

European Central Bank gives banks four months to counter AI cyber threats as regulators warn of systemic risks

The European Central Bank has ordered 110 major eurozone banks to submit comprehensive action plans by end-October to combat AI-driven cyber attacks. Banking regulators warn that frontier AI models like Anthropic's Mythos can exploit vulnerabilities at unprecedented speed, posing systemic risks to the financial system and potentially triggering widespread disruption.

Policy5 sources

European Central Bank gives banks four months to counter AI cyber threats as regulators warn of systemic risks

Policy5 sources

CISA deploys Anthropic Mythos to hunt bugs in government code amid White House tensions

The US Cybersecurity and Infrastructure Security Agency is using Anthropic's AI model Mythos to audit government software for vulnerabilities that could expose systems to foreign spies and cybercriminals. The deployment comes as Anthropic navigates a contentious relationship with the White House over AI safeguards and national security concerns.

Technology2 sources

CISA deploys Anthropic Mythos to hunt bugs in government code amid White House tensions

Technology2 sources

LTM Launches BlueVerse RightLogic to Help Enterprises Tackle AI Era Cyber Risks

LTM unveiled BlueVerse RightLogic, a cybersecurity assessment and risk assurance framework designed to address AI era cyber risks. The framework helps enterprises identify and remediate cyber exposure through a 4 to 6 week engagement, providing unified visibility and continuous risk management as organizations accelerate AI adoption.

Technology2 sources

LTM Launches BlueVerse RightLogic to Help Enterprises Tackle AI Era Cyber Risks

Technology2 sources

Alibaba Bans Claude Code After Anthropic's Hidden Tracker Monitored Chinese Users

Anthropic removed a secret tracker from Claude Code after a researcher exposed hidden code monitoring Chinese users. The discovery prompted Alibaba to ban the AI tool, classifying it as high-risk software. The incident escalates tensions in the US-China AI conflict as both companies accuse each other of security violations and model theft.

Technology17 sources

Alibaba Bans Claude Code After Anthropic's Hidden Tracker Monitored Chinese Users

Technology17 sources

Prev 1…141516…62 Next