Anthropic and OpenAI diverge on who should pull the plug on risky AI
OpenAI and Anthropic agree that frontier AI systems need stronger oversight, but they are proposing sharply […]
Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secrets
Attackers are impersonating AI agents from companies including OpenAI, Anthropic, and Meta in a bid to […]
Vulnerability exploitation rising as the root cause of many breaches
More evidence has emerged that attackers are turning to vulnerabilities rather than phishing as a means […]
Securing MCP servers before the AI rollout outpaces security
Your company’s CTO has a plan to implement your company’s first LLM-based application. The board approved […]
PHP2Shell will persist in enterprise environments for years
Two critical vulnerabilities were announced last week in PHP, the internet’s most widely used web application […]
Cloudflare AI Leak Crossed Customer Boundaries — and Access Controls Couldn’t Stop It
Cloudflare’s AI data leak exposed customer information across sessions, revealing a security gap in shared AI […]
Fake ChatGPT, Claude apps spread malware via signed AI binaries
Attackers are distributing malware through fake ChatGPT and Claude desktop applications, using legitimate, digitally signed executables […]
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious […]
Trusting Unsloth’s trust setting could mean executing malicious code
AI developers may have a security setting enabled and still end up running attacker-controlled code. Pillar […]
When prevention fails: Why cyber resilience is the next big test of trust
Imagine arriving at work on a Monday morning to find employees cannot log in, customer service […]