Google has paused its Open Source Vulnerability Rewards Program due to a flood of AI submissions
Tag: AI Security
OpenAI will show visual ads in ChatGPT while you generate images
OpenAI is expanding ads in ChatGPT, and one of the first new formats will show visual ads while you’re generating images. […]
MediaTek Fixes 31 Security Flaws Affecting Modem, Video and AI Components
MediaTek has released its October 2026 Product Security Bulletin, which addresses 31 vulnerabilities across modem, video, AI processing, display, trusted…
Google’s AI Hacker Finds 500+ XSS Flaws and Builds Working Exploit Chains
Google has revealed an internal AI security agent that found more than 500 verified cross-site scripting, or XSS, flaws across its own web applications.…
AWS Fixes AI Agent Flaws Enabling Authentication Bypass and Credential Theft
AWS released security updates for three vulnerabilities in its open-source Loom platform, used for AI agent orchestration. These vulnerabilities could…
Modernizing data security with DSPM, AI and fewer tools
For organizations, the proper safeguards—such as controls or restrictions—must be put in place.
Google halts open-source bug bounty program amid AI spam surge
Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports. […]
Apple tightens macOS disk access as AI agents become more powerful
Apple plans to introduce additional controls for Full Disk Access in macOS, citing growing privacy risks as AI agents become more capable and autonomous.…
Autonomous AI Agent Chains Two Zammad Zero-Days in Machine-Speed Cyberattack
An autonomous AI agent breached the Dutch Institute for Vulnerability Disclosure (DIVD) after chaining two previously undisclosed vulnerabilities in the…
One hidden Meta Muse setting could let attackers turn the AI assistant into a backdoor
Meta Muse is designed to act as a personal AI assistant across a Mac and connected devices – much like the new Siri AI released with…
Another OpenAI Safety Expert Quits and Raises New AI Safety Concerns
OpenAI safety veteran David Robinson resigns, warning that the company’s culture and fast AI development model could create bigger risks. OpenAI safety…
AI slop submissions force Google to freeze its open-source bug bounty
Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP), after a wave of…
Warlock continues SharePoint exploits, ShinyHunters member flips China’s AI espionage
Warlock ransomware continues to exploit year-old SharePoint flaws ShinyHunters member detained in Jordan China-aligned espionage group targets American AI…
Anthropic Asks Claude Users to Share Voice Recordings for AI Training With a New Opt-In Setting
Anthropic has started asking Claude users to share their voice conversations so the company can use them to train and improve its AI models. Thank you for…
Google PageBreak AI Agent Finds Over 500 XSS Vulnerabilities Across Its Web Applications
Google has disclosed that PageBreak, an internal AI security agent developed by its Product Security team, has identified and validated more than 500…
Apple Will Require Explicit User Action to Grant Full Disk Access in macOS, Citing AI Agents
Apple will introduce additional controls for Full Disk Access in macOS, so that users can grant an app access to the entire system only through “very…
Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions
AI slop seems to be overwhelming bug bounty programs.
Trump Names National Intelligence Director Jay Clayton to Lead a New Federal AI Task Force
The announcement comes after Trump hosted top executives of AI companies at the White House last week.
Anthropic asks Claude users to share voice data for AI model training
Anthropic has started asking Claude users to voluntarily share their voice conversations to help train and improve its AI models. […]
China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence…