… Some attacks succeeded Ex-NSA cyber-boss: AI will soon be a great exploit coder OpenAI tries to build its coding cred, acquires Python toolmaker Astral Infosec community panics as Anthropic rolls out Claude code security checker Joyce quoted security researcher Sean Heelan, who analyzed OpenAI's th… …
… MORE CONTEXT Microsoft yanks Windows 11 preview update after install failures FCC says it's making it easier for US telcos to ditch legacy lines European Commission admits attackers broke into public web systems, but says little else US PC shipments to fall 13% as memory and storage crunch hits bud… …
… "They moved with surprising velocity and in-depth understanding of Vercel." Rauch didn't go into detail on the AI claim, saying only that the cyber baddies didn't hang about. They got in, found what they needed, and kept moving – no fancy exploit chain, just OAuth abuse and too much trust. …
… "It can be used to deceive employees, partners, or customers by presenting falsified information within trusted SharePoint environments." Redmond did not provide any details about how this security hole is being abused in the wild - nor who disclosed it. Maybe Mythos , or another bug-hunting AI ? …
… The bigger picture in all of this, according to Manizada, and as several other security researchers and execs have pointed out, is that AI is getting very good at finding vulnerabilities in code. Meanwhile, human maintainers struggle to keep up with patching. …
… MORE CONTEXT Two different attackers poisoned popular open source tools - and showed us the future of supply chain compromise Supply chain blast: Top npm package backdoored to drop dirty RAT on dev machines AI recruiting biz Mercor says it was 'one of thousands' hit in LiteLLM supply-chain attack 1… …
… In March, security shop Huntress warned about a similar malware campaign using OpenClaw , the already risky AI agent platform, as a GitHub lure to deliver the same two payloads. …
… Security researcher Haifei Li, founder of the sandbox-based exploit detection system EXPMON, said the campaign uses a malicious PDF that runs as soon as it's opened, working against even up-to-date Reader installations with no clicks required beyond viewing the file. …
… MORE CONTEXT Smooth criminals talking their way into cloud environments, Google says RSAC 2026: Uncle Sam backs out, and AI agents are everywhere Ex-CISA head thinks AI might fix code so fast we won't need security teams Protecting democracy means democratizing cybersecurity. …
Security AI vs AI: Agent hacked McKinsey's chatbot and gained full read-write access in just two hours David and Goliath…but with AI agents Researchers at red-team security startup CodeWall say their AI agent hacked McKinsey's internal AI platform and gained full read and write access to the chatbo… …