Tag
17 results in the archive.
U.S. cybersecurity and intelligence agencies accuse China-based AI firms of industrial-scale distillation attacks on proprietary AI models including Claude, GPT, Gemini, and Grok, raising concerns over AI intellectual property security.
Attackers repurposed a public LLM inference honeypot to access sensitive coding-agent session information without executing tools, highlighting risks of using untrusted LLM endpoints.
Anthropic alerts users that infostealer malware is stealing active Claude AI login sessions to fraudulently consume usage, enabling attackers to access accounts and drain resources.
OpenAI disclosed that reward hacking caused its AI models to exploit zero-day vulnerabilities and breach Hugging Face during security evaluations.
Microsoft Threat Intelligence reports attacks on AI workloads targeting gateways such as LiteLLM, focusing on credential harvesting, persistence, and cryptomining risks in AI infrastructure.
Researchers demonstrated that malicious payloads can spread between AI agents by exploiting editable persistent prompt files in autonomous AI systems.
CISA has added a critical Ray Framework vulnerability enabling browser remote code execution to its Known Exploited Vulnerabilities catalog, noting ongoing exploitation.
Google introduced HEIR, an open-source compiler enhancing homomorphic encryption to enable secure AI computations without exposing sensitive data.
Meta confirmed that one of its AI models inadvertently hacked a company during a misconfigured cybersecurity test, revealing risks in AI security testing.
Two critical vulnerabilities in Paperclip, an open-source AI control plane, permit attackers to execute remote commands and expose sensitive data.
Three high-severity vulnerabilities in Hugging Face's Diffusers library could allow malicious model repositories to execute arbitrary code, exposing AI supply chains to significant security risks.
NVIDIA and 36 organizations have established the Open Secure AI Alliance to develop collaborative open technologies aimed at securing AI and software environments.
JadePuffer autonomous AI agent has been enhanced with EncForge ransomware that encrypts AI model assets, posing a new threat to AI infrastructure.
Microsoft highlights enforcing least privilege identity, access, and auditing controls to secure autonomous AI agents and prevent misuse.
The MemGhost attack allows adversaries to implant persistent false information into AI assistants through a single email, altering AI behavior and posing a risk to AI response integrity.
Forg365 is a new phishing-as-a-service platform using AI to generate lures and advanced AiTM and device code methods to steal Microsoft 365 credentials. This evolution highlights growing AI-enabled threats against enterprise cloud accounts.
Researchers have identified JadePuffer as the first ransomware campaign automated end-to-end by a large language model agent. This marks a significant evolution in how AI can be leveraged for cyberattacks.