… Don’t be the drive-by ‘send a random report with no real understanding’ kind of person.” GitHub senior product security engineer Jarom Brown similarly responded to a wave of AI bug reports recently, saying that while GitHub has “no problem” with AI tools in general, AI-assisted bug reports need to … …
Claude Security uses the Opus 4.7 model to scan a business’s codebase for vulnerabilities and issue a fix. …
… Ars Technica points out this blog post where DevOps engineer Jorijn Schrijvershof explains that what makes Copy Fail “unusually nasty” is the likelihood for it to go unnoticed by monitoring tools: “Page-cache corruption never marks the page dirty. …
… Joshua Saxe, CTO and cofounder of Security Superintelligence Labs, wrote in a blog post that exploits themselves don’t cause cyberattacks, and that adoption of AI vulnerability research tools has been incremental. “There seems to be an implicit mental model where some new adversarial tool becomes a… …
… So as the pressure builds for other companies to turn a profit ahead of potential IPOs, like OpenAI — or to stay in the lead of the ever-intensifying AI race, like Google — AI labs are seeing cybersecurity as a potential key revenue driver. …
… Vercel confirmed in a post on X that a “security incident” had occurred, and that it impacted a “limited subset” of its customers. Vercel said that a compromised third-party AI tool was the avenue for attack, though it did not specify which third party was involved. …
When Microsoft tried to launch Recall, an AI-powered Windows feature that screenshots most of what you do on your PC, it was labeled a “disaster” for cybersecurity and a “privacy nightmare.” After the backlash and a year-long delay to redesign and secure Recall, it’s once again facing security and … …
… Richard Lawler May 13 AI cybersecurity updates for MDASH, Mythos, and GPT-5.5. On Wednesday, the AISI, which evaluates AI models for the British government, said both Anthropic’s Claude Mythos Preview and OpenAI’s GPT-5.5 showed progress well above previous trends on cybersecurity testing. …
… The report also mentions AI as a target for attackers, saying “GTIG has observed adversaries increasingly target the integrated components that grant AI systems their utility, such as autonomous skills and third-party data connectors.” Google’s report also details how hackers are using “persona-dri… …
… Emil Michael, the Defense Department’s chief technology officer, told CNBC on Friday that Anthropic is still a supply chain risk, but called its powerful security model, Mythos, a “separate national security moment,” adding that “we have to make sure that our networks are hardened up, because that …