A hidden line of text in a Word document can quietly halve the numbers in your financial report. Then it can smuggle a copy of itself into the clean file you send on. And 144 days after a researcher warned Microsoft, it still works. Håkon Måløy, a Norw…
The U.S. federal consumer watchdog said Hims & Hers, which prescribes for sexual wellness and mental health conditions, used website trackers to share customers’ information with advertisers.
A security team approving an open-source model for production today starts with a repository page. The page lists the model name, the license, and a tag identifying the base model it descended from. That tag is a string the uploader typed. Hugging Face…
For decades, protecting privacy has meant one thing: stop personal data from leaking out. Gartner thinks that idea is about to break. By 2029, most privacy incidents will come not from leaked personal data but from what AI infers about people, the rese…
Enterprises are handing more of their work to AI agents. Onyx Security just raised $113m to make sure a human can still say no. The Israeli startup’s Series B, led by Bessemer Venture Partners, values it at about $640m, Calcalist reported. That is a se…
AppSec must shift from finding every single vulnerability to prioritizing exploitable risks, and human expertise is in hot demand.
If the generative AI giant had followed well-known security best practices, it’s likely that its AI agent would never have escaped to the open internet and hacked multiple companies.
If the generative AI giant had followed well-known security best practices, it’s likely that its AI agent would never have escaped to the open internet and hacked multiple companies.
Researchers pitted a person against a Claude agent and found that, after a week of texting, the AI chatbot was more effective at creating “exploitable trust” with others.