Aoki, also known as Aokigahara, is a data-stealing malware that has added credentials for AI tools to its growing list of targets. Recent versions seek…
Tag: AI Security
Backdooring Open-Weight AI Models
This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an…
Threat Actor Abuses Agentic AI Pentesting Framework to Target South Korean Financial Institutions
IntroductionZscaler ThreatLabz analyzed a recently active exploitation campaign in which a threat actor abused ARTEX to target South Korean financial…
CERT-In Warns Hackers Using AI Agents to Launch Cyberattacks in Just Hours
India’s cyber response agency, CERT-In, has warned that hackers are using AI agents to cut the time between gaining access to systems and causing damage…
MITRE ATT&CK v20 Added 9 New Attack Techniques Covering AI Exploits, MFA Bypass, and CAPTCHA Evasion
MITRE released ATT&CK v20 on October 13, adding nine Enterprise techniques that describe how attackers may target AI systems, steal application-specific…
Proofpoint to Acquire Varonis in Massive $6.3 Billion AI Cybersecurity Deal
Proofpoint to acquire Varonis Systems in a $6.3 billion all-cash deal announced October 15, 2026, combining email, data, and AI security to protect…
Hackers Use Hundreds of AI Agents to Exploit PaperCut Servers and Steal Windows Credentials
A likely Russian-speaking threat actor used hundreds of AI agents to exploit PaperCut NG/MF servers, steal Windows credentials and establish reusable…
Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers say
Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community. They are…
Midnight Blizzard-Linked Hackers Use Claude AI to Rebuild Malware and Evade Detection
Hackers linked to Midnight Blizzard used Anthropic’s Claude AI to rebuild malware after security tools detected it, helping them keep espionage operations…
Researchers Use AI to Discover Critical Linux Kernel Flaw That Enables Virtual Machine Escape
Researchers at pwn.ai used an AI-assisted research harness to find a critical Linux kernel networking flaw, tracked as CVE-2026-99999 and nicknamed…
Apate sends AI agents undercover to get scammed so they can gather fraud intelligence
Most companies use AI agents to ship products faster or speed up workflows. Apate.ai sends them undercover to get scammed.
CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential…
Candiru spyware infects Al Jazeera, Senators AI request, Microsoft crashes phishers
CenterPoint Energy reveals data breach numbers https://www.securitymagazine.com/articles/102658-1m-impacted-by-centerpoint-energy-data-breach Zero-Click…
Nearly Half of Organisations Report Unauthorised AI Agent Actions, Research Finds
Nearly half (49.8%) of organisations have confirmed or suspected that an AI agent took an unintended, unexpected or unauthorised action in the past year,…
Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
The Aoki infostealer, also known as Aokigahara, has expanded its collection capabilities to steal credentials and session files from AI coding assistants,…
Stolen AI API keys are paying for hackers’ autonomous scans
A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s…
AI worms could spread across your smart devices, Anthropic warns
Researchers say small AI models could be capable of spreading across vulnerable smart devices within months.
Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
I believe the cybersecurity industry may be approaching AI security the wrong way.
AI Slop Isn’t Just for Social Media; It’s Ruining Cyberattacks, Too
Don’t buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
Android gets AI defenses against messaging scams, fake calls
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. […]