Recent posts tagged aisecurity

Europe and Asia want AI they control. Governments and enterprises are pushing for models and infrastructure that run locally, under local rules. But putting GPUs in-country doesn't answer the harder question: who controls what happens to the data, th...

A financial crime group active since 2012 just showed developers what their everyday agent stack looks like in the wrong hands. New research from Straiker shows how CyberCartel built a multi-agent attack system called CARLIY0S and aimed it at more ...

Revoking an AI Agent Is Not the Same as Stopping Its Authority When a user revokes an AI agent’s authorization, what happens to the tasks, delegated credentials, and queued operations the agent already created? This question is central to my resear...

As artificial intelligence systems transition from isolated proof-of-concept models to deeply integrated production architectures, their attack surface has undergone a fundamental shift. Conventional software security paradigms—which focus primarily ...

Why It Matters Apple’s dominance in the personal computing and mobile markets has made its ecosystem a prime target for attackers. The company’s Security Bounty Program rewards researchers for discovering vulnerabilities, but the sheer volume of co...

Ask an IT leader how many AI agents are running in their company and you'll usually get a pause. Ask which of those agents can delete data and the pause gets longer. That's not negligence. Agents don't arrive through one front door. A team turns on ...

A technology columnist recently installed Meta's new Muse AI agent, explicitly revoking all permissions - including access to Messages and Full Disk Access. A few days later, the agent referenced a private text conversation and an editor’s deadli...

In April 2014, when HBO premiered the first season of "Silicon Valley", audiences assumed they were watching a lighthearted situational comedy about socially awkward programmers crammed into a Palo Alto incubator, living on instant noodles and dreami...

Christian Posta asked an AI agent to fix a problem on his machine. It fixed the problem. It also signed him up for AWS services he never requested, and he wasn't sure what else it had touched. Posta is Solo.io's VP and Global Field CTO. He's one of ...

Backup vendors built their entire industry around two ways a company loses data: ransomware attacking from outside, and a person making a mistake from inside. At an IT Press Tour stop in Lake Bled and Ljubljana this month, HYCU argued a third cause h...

"9 Seconds. Zero Backups." drew more engagement on Coder Legion than anything we've published here, and the sharpest part of it wasn't in the piece. It was in the comments. Two readers, Mike Dabydeen and sibasispadhi, raised questions specific enough...

In April, a Cursor agent running on Claude Opus was working through a routine task at a startup called PocketOS. Somewhere in the codebase it was scanning, it found an AWS key. It used the key to reach the production database. Then it deleted it. The...

Every AI security vendor ships a benchmark chart these days. Most of them don't survive a second phone call. On September 1, Cycode launched Agentic Code Scanning, a fourth layer that sits on top of its existing rule-based scanner and decides, code ...

I went to the Cyber / AI Expo in Munich a couple of days ago expecting a sales floor. There was one. The thing I came away thinking about, though, wasn't on any booth. The expo was predictable enough: wall-to-wall vendors, each with a product to mov...

Ask Amy Chang, Head of AI Threat Intelligence & Security Research at Cisco, what a model's country-of-origin label actually tells you, and her answer cuts against how most procurement conversations still work. "Country of origin classifiers" aren't s...