… Members of OpenAI's Trusted Access for Cyber program, which gives cybersecurity professionals, researchers, and others advanced access to new models, will be required to enable Advanced Account Security beginning on June 1 or submit an alternative attestation that they implement phishing-resistant …
… Among these, Stykas will detail at the Black Hat security conference in Las Vegas today, around 700 to 800 of the impacted organizations have had “really damaging” intrusions. “It’s company access, it’s root access to servers, it’s root access to AWS,” the researcher tells WIRED, referring to Amazo… …
… Some Google competitors, who could benefit from accessing the data, say the plans have less privacy and security impacts than has been suggested. …
… Frontier claims, though, that the incident shows Kimi has fewer cyber safeguards than most other powerful AI models, something that allowed it to go off and use the internet without express permission. “We found a leak in the sandbox,” says Yaron Singer, CEO of Frontier Security. “But we also found… …
… Meta also has also begun offloading some work reviewing programs and features for potential privacy and security risks to artificial intelligence. It wasn't immediately clear whether AI played a role in the access control issue with the MCI data. …
… "This was resolved within 24 hours, and we can confirm there is no evidence of exploitation, ticket impact, or compromise of customer information,” the statement reads. “The issue was identified by a responsible security researcher who used AI-assisted tools to bypass standard firewall security con… …
Security researcher Dor Zvi and his team at the cybersecurity firm he cofounded, RedAccess, analyzed thousands of vibe-coded web applications created using the AI software development tools Lovable, Replit, Base44, and Netlify and found more than 5,000 of them that had virtually no security or auth… …
… A flaw in the apps made it possible for anyone to access the huge troves of information that had been gathered from stalkerware victims and simultaneously exposed millions of Cocospy customer email addresses, TechCrunch reported at the time. “Their malware on Android was full-blown spyware,” says V… …
… OpenAI says that the initiative fits into its broader security efforts, including an application security AI agent launched last month known as Codex Security, a cybersecurity grants program that began in 2023, a recent donation to the Linux Foundation to support open source security, and the “Prep… …
… The records made accessible by this process include senior figures in national security and technology, both current and former. …