DevOps
fromInfoQ
20 hours agoCNCF Warns Kubernetes Alone Is Not Enough to Secure LLM Workloads
Kubernetes lacks the capability to manage the unique risks posed by large language models in AI deployments.
#ai-security
#ai-security
[ follow ]
#cybersecurity #vulnerabilities #prompt-injection #data-protection #claude-code #vulnerability-detection
fromTheregister
1 day agoGit identity spoof fools Claude into giving bad code the nod
In a blog published this week, Manifold Security showed how an AI-powered code reviewer built on Claude accepted changes that appeared to come from a legitimate maintainer. By setting a fake author name and email in Git, the team made a commit appear to originate from a trusted source, then passed it through an automated review flow where the model approved it.
Information security
#prompt-injection
Information security
fromTNW | Anthropic
2 days agoAnthropic, Google, and Microsoft paid AI agent bug bounties, then kept quiet about the flaws
Aonan Guan exploited prompt injection attacks to hijack AI agents from Anthropic, Google, and Microsoft, stealing sensitive API keys and tokens.
Information security
fromTheregister
2 days agoAnthropic, Google, Microsoft paid AI bug bounties - quietly
Security researchers exploited prompt injection attacks on AI agents to steal sensitive data without vendor disclosure of vulnerabilities.
#vulnerability-detection
Information security
fromThe Hacker News
1 month agoOpenAI Codex Security Scanned 1.2 Million Commits and Found 10,561 High-Severity Issues
OpenAI launched Codex Security, an AI-powered security agent that identifies, validates, and fixes vulnerabilities in code, now available in research preview with free access for one month.
Information security
from24/7 Wall St.
1 week agoThe "SaaS-Pocalypse" Continues: Cloudflare, ServiceNow, CrowdStrike Under Fire as Anthropic Rewrites the Rules
The release of Anthropic's AI security product has significantly impacted investor confidence in enterprise software companies, leading to sharp stock declines.
Venture
fromwww.businessinsider.com
3 weeks agoThis startup just raised $6 million from 8VC and Marc Benioff to find the hidden security flaws in AI code
Enclave, a startup focused on identifying dangerous AI-generated security flaws, has launched with $6 million in seed funding and a $33 million valuation.
fromTechCrunch
3 weeks agoDatabricks bought two startups to underpin its new AI security product | TechCrunch
Lakewatch leverages Databricks' data storage capabilities to perform essential SIEM tasks, such as threat detection and investigation, enhanced by AI agents from Anthropic's Claude.
Information security
Software development
fromThe Hacker News
4 weeks agoHow Ceros Gives Security Teams Visibility and Control in Claude Code
AI coding agents like Claude Code operate outside existing enterprise security controls, requiring new machine-level security infrastructure to provide visibility, policy enforcement, and audit trails.
Information security
fromTechRepublic
1 month agoResearchers Uncover New Phishing Risk Hidden Inside Microsoft Copilot
Attacker-controlled text in emails can manipulate Microsoft Copilot summaries through cross-prompt injection attacks, inserting deceptive alerts into trusted AI interfaces that users find more convincing than suspicious emails.
Information security
fromDevOps.com
1 month agoHarness Extends AI Security Reach Across Entire DevOps Workflow - DevOps.com
Harness launched AI security capabilities including automatic code securing during AI-assisted development and a module discovering, testing, and protecting AI components within applications.
Information security
fromTechzine Global
1 month agoHarness secures AI code and AI apps with two new modules
Harness launches AI Security and Secure AI Coding modules to detect, test, and protect AI components throughout the application lifecycle while scanning AI-generated code for vulnerabilities in real time.
Information security
fromTechzine Global
1 month agoCato Networks claims to be the first SASE platform with native AI security
Cato Networks launches GPU-powered SASE platform with native AI security, integrating Nvidia GPUs into its global backbone for real-time traffic inspection and AI governance capabilities.
Information security
fromThe Hacker News
1 month agoAI is Everywhere, But CISOs are Still Securing It with Yesterday's Skills and Tools, Study Finds
Security leaders lack adequate tools and skills to defend AI systems, with visibility gaps and skills shortages creating critical vulnerabilities in AI infrastructure security.
Privacy professionals
fromWIRED
1 month agoSears Exposed AI Chatbot Phone Calls and Text Chats to Anyone on the Web
Sears Home Services exposed 3.7 million chat logs and 1.4 million audio files containing customer personal information through unsecured databases housing conversations with AI chatbot Samantha.
Software development
fromTNW | Launch
1 month agoNvidia turns OpenClaw into an enterprise platform with NemoClaw
Nvidia launched NemoClaw to add enterprise-grade security and privacy controls to OpenClaw, an open-source AI agent, enabling safe autonomous operation with sandboxed process-level enforcement and policy-based access controls.
fromTechzine Global
1 month agoNetskope adds AI security to Netskope One
Netskope One AI Security is integrated into the Netskope One platform and designed to protect various components of the AI ecosystem. These include AI applications, AI agents, datasets, and users in both public SaaS environments and private or internally hosted AI systems. Workflows in which autonomous AI agents communicate with other systems are also covered by the security.
Information security
#openclaw-vulnerabilities
Information security
fromTheregister
1 month agoChina's CERT warns OpenClaw can inflict nasty wounds
China's CERT warns that OpenClaw agentic AI tool has severe security vulnerabilities including weak default configurations, malicious instruction injection risks, and credential theft potential, requiring isolated deployment and strict access controls.
Information security
fromTheregister
1 month agoChina's CERT warns OpenClaw can inflict nasty wounds
China's CERT warns that OpenClaw agentic AI tool has severe security vulnerabilities including weak default configurations, malicious instruction injection risks, and credential theft potential, requiring isolated deployment and strict access controls.
Information security
fromTheregister
1 month agoAI agent hacked McKinsey chatbot for read-write access
An AI agent breached McKinsey's internal AI platform Lilli in two hours, gaining full read and write access to millions of chat messages and confidential client data, demonstrating agentic AI's growing effectiveness in cyberattacks.
fromSecurityWeek
1 month agoReclaim Security Raises $20 Million to Accelerate Remediation
Security tools are excellent at explaining why something is risky. What they don't do is make remediation safe and practical. The real breakthrough isn't more prioritization, it's removing risk without breaking the business. Reclaim does exactly that, and that's why it matters.
Venture
#ai-governance
DevOps
fromThe Hacker News
1 month agoNew RFP Template for AI Usage Control and AI Governance
Organizations have AI security budgets but lack clear requirements for AI governance solutions, requiring a structured evaluation framework focused on interaction-level control rather than application cataloging.
fromExchangewire
1 month agoDigest: Meta Trials AI Shopping Tool; Google to Fill 150 Tech Roles in Singapore; eBay Cuts 800 Jobs
Meta Platforms is piloting a shopping research capability within its Meta AI chatbot, signalling a deeper move into ecommerce as competition intensifies with ChatGPT and Gemini. The feature, currently rolling out to select users in the US via the Meta AI web interface, enables consumers to request product recommendations. In response, the chatbot displays a carousel of images featuring brand names, pricing and merchant links, alongside bullet-point summaries explaining the reasoning behind each suggestion.
E-Commerce
#cyberattacks
Information security
fromSecurityWeek
1 month agoHackers Weaponize Claude Code in Mexican Government Cyberattack
Attackers exploited Claude Code to compromise ten Mexican government bodies and a financial institution, exfiltrating 150GB of data affecting 195 million identities by bypassing AI safety guardrails through social engineering.
Information security
fromSecurityWeek
1 month agoHackers Weaponize Claude Code in Mexican Government Cyberattack
Attackers exploited Claude Code to compromise ten Mexican government bodies and a financial institution, exfiltrating 150GB of data affecting 195 million identities by bypassing AI safety guardrails through social engineering.
Information security
fromThe Hacker News
1 month agoClawJacked Flaw Lets Malicious Sites Hijack Local OpenClaw AI Agents via WebSocket
OpenClaw fixed a high-severity vulnerability allowing malicious websites to hijack locally running AI agents through password brute-forcing and unauthorized device registration.
Information security
fromFortune
1 month agoNearly two-thirds of companies have lost track of their data just as they're letting AI in through the front door to wander around | Fortune
Only 34% of organizations know where their data resides, creating critical security vulnerabilities as AI systems gain broad access to enterprise networks without adequate controls.
[ Load more ]