AI Security

Cybersecurity 7 min Three Labs Shipped Cyber Models in One Week, and All Three Disclosed Escapes Google, OpenAI and Anthropic each gated a cyber-capable model behind an application process. All three also di... KE Kenji Tanaka 3 Sep Cybersecurity 6 min CrowdStrike Built an Offensive AI Model and Named It Red Tempest CrowdStrike has shipped two models built with Nvidia: one that attacks a replica of your network, one that def... PR Priya Nair 3 Sep Cyber Threat Intel 6 min Google Fixed More Chrome Bugs in June Than in Two Years. Now Comes the Argument. Google patched 1,072 Chrome bugs in June against 1,036 in the prior two years. Whether that drains the exploit... PR Priya Nair 1 Sep Cybersecurity 8 min A Web Page Can Make Grok Decrypt Its Own Attack Instructions Encrypted commands sit on a page in plain sight. A filter cannot read them because reading them means running... KE Kenji Tanaka 25 Aug Cybersecurity 7 min Microsoft Took Eight Months to Patch a One-Click Copilot Data Theft Chain Varonis reported the chain in December 2025 and the fix shipped on 18 August 2026. In between, one link could... KE Kenji Tanaka 24 Aug Cybersecurity 8 min AWS Confirms First Production Prompt-Injection Compromise in Bedrock Agents — Enterprise Customer Exfiltrated Documents In a quietly-published security bulletin, AWS confirmed an indirect prompt-injection attack in production Bedr... CY Cyber Team 18 May Cybersecurity 8 min EchoLeak: Zero-Click Prompt Injection in Microsoft 365 Copilot Quietly Exfiltrates Enterprise Data EchoLeak shows a malicious email can trigger Microsoft 365 Copilot into exfiltrating enterprise data without a... CY Cyber Team 17 May Cybersecurity 9 min Hackers Reach Anthropic's Restricted Mythos Model Through a Vendor Environment as FSB Calls Briefing A small group of unauthorised users reached Mythos via a third-party vendor environment on the same day Anthro... CY Cyber Team 17 May Cybersecurity 8 min Anthropic's Project Glasswing Lines Up AWS, Apple, Google, Microsoft, JPMorgan to Test Mythos for Cyber Defence Project Glasswing pairs Anthropic's restricted Mythos model with a roster of hyperscalers, banks and the Linux... CY Cyber Team 16 May AI & ML 12 min Microsoft Credits AI With Finding Bugs in May 2026 Patch Tuesday — and the Industry Should Pay Attention Microsoft's May 2026 Patch Tuesday addressed 118 to 138 CVEs across Windows, Office and Azure — and credited A... AI AI Tools Desk 13 May Cybersecurity 5 min Anthropic's Project Glasswing Found a 27-Year-Old Bug in OpenBSD — Before Hackers Could Anthropic's Project Glasswing used an unreleased frontier model to find thousands of zero-day vulnerabilities... CY Cyber Team 20 Apr Cybersecurity 5 min Phishing Attacks Powered by AI Are Now Indistinguishable From Legitimate Emails AI-generated phishing emails are now indistinguishable from legitimate business emails in red team testing. He... CY Cyber Team 5 Apr