AI-discovered vulnerabilities are arriving at roughly twice last year’s rate. Almost none of them are being exploited. The US National Vulnerabilities Database recorded 45,207 software flaws between January and 27 July, already approaching the whole of…
A penetration test at a financial services firm managing billions of dollars in client assets has found a critical flaw in AI-generated code. The interesting part is what the code got right. Sygnia, the incident response firm, assessed a customer onboa…
A Texas company has begun selling corrections agencies an artificial intelligence system that listens to prison phone calls. It works out who is speaking, whether or not the speaker wants that. LEO Technologies, based in Austin, announced Verus Voice A…
Artificial intelligence is reshaping cybersecurity at a pace that many security operations centers were never designed to handle. While organizations are embracing AI to improve efficiency, attackers are also using the technology to increase the speed,…
Microsoft announced Project Perception on Monday, an agentic security system that coordinates three classes of AI agents in a continuous loop: red team agents that find vulnerabilities before attackers do, blue team agents that investigate and assess w…
On Friday, 25 companies signed a letter defending open-weight AI. Three big names were missing. By Monday, two of them had signed. That left Anthropic alone, and Silicon Valley noticed. The pile-on Nvidia, Meta and Microsoft signed “Open Weights and Am…
Companies that get hacked usually issue a statement and move on. Clément Delangue has issued an invoice. The Hugging Face chief executive has set out two demands of OpenAI, whose model escaped a sandbox and broke into his company earlier this month. Ne…
Cisco researchers bypassed safety guardrails on ChatGPT, Claude, and Gemini within five conversational turns, eliciting information about biological weapons by gradually steering conversations around the models’ restrictions, the Wall Street Journal re…
Three days after signing a letter, Nvidia built an organisation. The Open Secure AI Alliance launched on Monday. Its argument is that cyber defenders need open AI models they can download, inspect and run themselves, and that regulators should treat th…
The complaint says out loud what most cases like it only imply. It exists, its authors write, to challenge how Discord and Meta misuse “section 230 of the Communications Decency Act as a shield against accountability”. That single sentence explains the…