Articles Tagged “AI Security”
58 articles found
Pwn2Own Ireland 2026 Results: 98 Zero-Days, AI Tools Tested
Pwn2Own Ireland 2026 paid researchers $1,262,000 for 98 zero-days in phones, smart home gear and AI tools, all reported to vendors under a 90-day deadline.
GitHub AI Secret Detection: How Push Protection Gets Smarter
GitHub is adding a ModernBERT classifier to push protection that spots unstructured passwords in under 2 ms and could more than double blocked secrets.
Anthropic Cyber Verification Program: Which Tier Fits You?
Anthropic split its Cyber Verification Program into 3 tiers, Defense, Red Team and Specialized, giving vetted defenders broader Claude access for security.
SailPoint Autonomous Agents: Identity Security for AI Agents
SailPoint launched Autonomous Agents and just-in-time access at Navigate 2026, citing a survey where 79% of firms run AI agents but only 2% govern them.
Thales Sentinel Envelope Plus: Shielding Code From AI Agents
Thales Sentinel Envelope Plus hardens compiled apps against AI reverse engineering. In tests, an AI agent found 0 of 10 bugs after using 970x more tokens.
Google AI Memory: How Private Cloud Storage Will Work
Google’s private AI memory design keeps cloud data encrypted with device-held keys. Here is how secure enclaves would preserve context across devices.
Gurucul AI Risk and Response: What Is Available Now?
Gurucul launches AI Risk and Response for security teams on September 24. Detection is generally available, while runtime prevention stays in preview.
Scan for Good: Wiz's AI Pentester Helps Hospitals and Rail
Wiz and Google DeepMind's Scan for Good offers AI-powered security scans to hospitals, transit and nonprofits, with every finding checked by humans first.
Lookout Social Engineering Protection Targets AI Scams
Lookout Social Engineering Protection scans SMS, RCS, calls and voicemail on iOS and Android to flag AI voice clones and scam links before users bite.
Arcjet Agent Runtime Security Adds Audit Trails
Arcjet's agent runtime security uses Open Policy Agent to enforce controls on AI agents and keep replayable audit evidence for compliance reviews.
OpenAI and AARP Help Older Adults Spot Online Scams
More than 1,000 older adults across 10 US cities joined free AI Skills Jam workshops on using ChatGPT safely and recognising attempted scams.
Kiteworks Buys Bonfy.AI for Runtime AI Data Control
Kiteworks is buying Bonfy.AI to classify and enforce policy on sensitive data the moment it moves, across human workflows and AI-agent traffic.
Cylake Raises $245M for On-Prem AI Security Platform
Palo Alto Networks founder Nir Zuk's new startup Cylake raised $245 million, taking its total to $290 million six months after leaving stealth.
Invisible Unicode Phishing: How to Spot and Block It
Microsoft tracked 2.37 million daily messages hiding invisible Unicode inside words. Normalizing tag characters before filtering stops the trick.
OpenAI Puts $1 Billion Behind Frontline Cyber Defenders
OpenAI committed $1 billion in Daybreak credits to water utilities, grid operators, community banks, nonprofits and open-source maintainers.
Claude Session Theft: How to Protect Your AI Account
Anthropic is signing out users whose Claude sessions were stolen by infostealer malware, refunding charges and removing saved cards. Here is the fix.
Self-Hosted LLM Security: Locking Down Your Server
A practical hardening guide for self-hosted LLM servers: why Ollama and vLLM ship without auth, and the seven layers that keep your endpoint private.
Fortinet Buys Virtue AI to Red-Team Your AI Agents
Fortinet acquired Virtue AI on August 17, adding agentic red-teaming across 50 sandboxed environments and 1,000 risk categories to its security fabric.
Stealthium Watches the GPU Layer Most Tools Miss
Stealthium launched a security control plane for GPUs and AI accelerators, turning kernel traces and VRAM telemetry into detections for neo-cloud workloads.
OpenAI Model Security Adds Sandboxes and 30-Min Alerts
OpenAI published a new internal security bar: hard sandboxing, activation classifiers on sampled tokens, and a 30-minute alert-or-pause rule.
OT Vulnerability Triage Drops From Weeks to Minutes
Fortress and Industrial Defender integrated asset intelligence with AI vulnerability correlation, cutting OT vulnerability-to-asset triage to minutes.
OpenAI Daybreak Splits Into Blue and Red Defender Tiers
OpenAI restructured Daybreak into Blue and Red tiers on August 10 and added GPT-5.6-Cyber, a purpose-trained model gated to vetted security partners.
CrowdStrike Offers $100K to Red-Team Rogue AI Agents
CrowdStrike and AWS opened a $100,000 AI security challenge running August 31 to September 29, teaching defenders prompt injection and agent hijacking.
Open Secure AI Alliance Unites 40+ Firms on Defense
NVIDIA, Microsoft, IBM and 40+ others launched the Open Secure AI Alliance on July 27, pooling five open-source projects to defend AI agents.
Druva AI Resilience Adds Backup for Claude Code Work
Druva launched AI Resilience on July 21, adding backup, rollback, and governance for Claude Code projects and Microsoft Copilot activity logs.
Microsoft Dusseldorf Brings Open-Source OAST to Your Servers
Microsoft open-sourced Dusseldorf, a self-hosted OAST platform catching 4 blind bug classes while keeping callback data on your own servers.
VulnHunter Open-Sources Capital One's AI Bug Hunting
Capital One released VulnHunter under Apache 2.0 — an agentic security tool that traces exploit paths and tries to disprove its own findings first.
Prompt Injection Becomes a Defense With Context Bombs
Tracebit's 'context bombs' plant text in cloud decoys that trip an AI attacker's own guardrails — cutting attack success from 91% to 15%.
GPT-Red: OpenAI's AI Red-Teamer Cuts Injection Fails
OpenAI built GPT-Red, an automated red-teaming model, then used it to harden GPT-5.6 Sol to 6x fewer prompt-injection failures than GPT-5.5.
AgentMon 3 Gives AI Agents Self-Refining Guardrails
Codenotary's AgentMon 3, out July 7, learns each org's normal AI-agent behavior and auto-tunes runtime policies, cutting manual upkeep up to 80%.
Sophos Fusion Unifies Security Tools With Agentic AI
Sophos launched Fusion on July 15 — an AI-native platform that unifies endpoint, SIEM, identity, and network tools with shared threat intel.
Microsoft Secure Future Initiative Hits New Milestones
Microsoft's July 2026 Secure Future Initiative report: phishing-resistant MFA on 99.97% of accounts, 732K+ resources locked down, and AI-driven defense.
SkillDetonate Catches Malicious AI-Agent Skills That Slip Past Scanners
Researchers released SkillDetonate on July 6, 2026 — a runtime auditor that sandboxes AI-agent skills and caught 97% of malicious ones static scanners miss.
cURL 8.21.0 Ships a Record 18 Fixes, Including a 25-Year-Old Bug
cURL 8.21.0 patched a record 18 vulnerabilities on June 24, 2026, including a 25-year-old flaw surfaced by AI-assisted code analysis, before any exploitation.
New Open-Source Tools Give Defenders Guardrails for AI Agents
A June 2026 wave of free, open-source security tools — including OWASP Agent Memory Guard and DockSec — gives defenders practical guardrails for the AI-agent era.
DarkMoon Is a New Open-Source AI Pentesting Platform Built Around Evidence
Featured June 29, 2026, DarkMoon is a free, open-source AI security-testing platform that separates planning from action and only reports findings backed by real evidence.
Responsible Disclosure Helps Secure Dify, an AI Platform Powering 1M+ Apps
Security researchers responsibly disclosed the DifyTap flaws in the popular Dify AI platform on June 22, 2026 — and fixes shipped quickly, protecting more than a million AI apps.
Check Point Brings OpenAI's Frontier Cyber AI Into Customer Defenses
Check Point joined OpenAI's Daybreak Cyber Partner Program on June 22, 2026, embedding frontier AI directly into its security products to sharpen threat prevention and speed up remediation.
AI-Assisted Research Helps Fix a 29-Year-Old Squid Proxy Flaw Before Attackers Found It
Researchers used AI to help uncover and responsibly disclose Squidbleed, a memory-leak flaw lurking in the Squid web proxy since 1997 — and the coordinated fix shipped before any known exploitation.
Google's New AI Agents Defend the Security Operations Center
Google added defensive AI agents to Security Operations that auto-write detection rules and triage alerts, cutting 30-minute reviews to about 60 seconds.
Microsoft Wires Defender Into GitHub to Secure AI-Generated Code
At Build 2026, Microsoft detailed native Defender and GitHub Code Security integration to protect AI-written code and agents across the development lifecycle.
Cisco's Cloud Control Puts AI Security Agents and No-Downtime Patching in One View
Cisco's new Cloud Control platform unites human operators and AI security agents in a single view, with runtime 'Live Protect' patching and quantum-safe defenses.
depthfirst's Dependency Firewall Blocks Malicious Packages Before They Install
Launched June 1, 2026, depthfirst's Dependency Firewall vets every open-source package before install — approving safe ones, quarantining the suspicious, and blocking the malicious.
Microsoft's MDASH Sends 100+ AI Agents to Find and Prove Bugs — Now Wired Into Defender
At Build 2026 on June 2, Microsoft expanded MDASH, its 100-plus-agent vulnerability hunter, integrating it with Defender after a 96.55% score on the CyberGym benchmark.
Cortex XSIAM Meets NVIDIA DOCA Argus: Agentless Security for AI Factories
Palo Alto Networks integrates Cortex XSIAM with NVIDIA DOCA Argus to deliver agentless, silicon-level security monitoring for agentic AI factories.
Project Lightwell: IBM and Red Hat's $5B AI Open-Source Security Push
IBM and Red Hat launch Project Lightwell, a $5B AI-powered open-source security effort that validates fixes at scale and feeds patches upstream.
Palo Alto Networks' May Patch Wednesday Goes AI-Native — 26 CVEs Found by Frontier Models in a Single Sweep
Palo Alto Networks disclosed 26 CVEs across 75 issues on May 14, 2026 — the first Patch Wednesday where the majority of findings came from frontier AI models scanning the company's own code.
Microsoft Unveils MDASH — A Multi-Model Agentic Scanning Harness That Tops the Vulnerability Benchmark
Microsoft announced MDASH on May 12, 2026 — a multi-model agentic scanning harness that delivers state-of-the-art results on a leading industry vulnerability discovery benchmark and orchestrates frontier models for defensive cybersecurity.
Palo Alto Networks Launches Frontier AI Defense — Autonomous Remediation Against Machine-Speed Attacks
Palo Alto Networks unveiled Frontier AI Defense on May 7, 2026 — a platform pairing AI-native security with Unit 42 expertise and a partner alliance to remediate machine-speed AI attacks in real time.
OpenAI Launches GPT-5.5-Cyber for Vetted Defenders — A Specialized AI Security Model
OpenAI's new GPT-5.5-Cyber, announced May 7, 2026, gives vetted cybersecurity defenders a specialized AI model for red teaming, penetration testing, and bug discovery via the Trusted Access for Cyber program.
Operant Launches Endpoint Protector to Defend Every AI Tool, Agent, and MCP Workflow
Operant AI's new Endpoint Protector, launched May 8, 2026, gives security teams a single endpoint surface for discovering and defending AI tools, coding agents, and Model Context Protocol workflows.
Five Eyes Agencies Release First Joint Guidance for Securing Agentic AI Systems
On May 1, 2026, CISA, NSA, and four allied cybersecurity agencies published the first joint Five Eyes guidance on safely deploying agentic AI — a 30-page playbook organized around five risk categories for autonomous AI agents.
Google Gemini Blocked 8.3 Billion Harmful Ads in 2025 and Is Expanding in 2026
Google's annual ad safety report reveals Gemini AI blocked 8.3 billion harmful ads in 2025, catching 99%+ of violations before serving — and plans to expand to more ad formats this year.
Cynomi's CISO Intelligence Agents Give Every MSP a Full Virtual Security Team
Cynomi launched four AI co-worker agents on April 8 that act as a virtual CISO team — handling strategy, compliance, execution, and board reporting for MSPs.
Microsoft Releases Zero Trust for AI: A Security Framework Built for the Age of AI Deployment
Microsoft's new Zero Trust for AI initiative delivers reference architectures, assessment tools, and governance workshops specifically designed to secure AI systems in enterprise environments.
The 1H 2026 AI Security Report: The Era of Agentic Security Has Arrived
The 1H 2026 AI and API Security Report finds enterprises racing to secure AI agents as agentic architectures reshape the enterprise attack surface.
ISC2 Weaves AI Security Into All Its Cybersecurity Certifications
ISC2 published AI security exam guidance on April 2, mapping AI concepts across 50+ domains in its entire certification portfolio for 265,000 members.
CSA's 2026 AI Cybersecurity Survey: 92% of Security Leaders Are Concerned About AI Agents
The Cloud Security Alliance surveyed 1,500+ security leaders for its 2026 report, finding near-universal concern about AI agent security alongside meaningful year-over-year progress in AI-powered defenses.