Security briefing · Archive
AI & security · Archive
Browse collected headlines by topic and follow links to the original publishers.
AI & security
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Open-Sourcing ModelAudit: Security Scanner for ML Model Files ↗ (opens in a new tab)
From Automation to Infection: How OpenClaw AI Agent Skills Are Being Weaponized ↗ (opens in a new tab)
UEFI Vulnerability Analysis Using AI Part 3: Scaling Understanding, Not Just Context ↗ (opens in a new tab)
AI-Native SARIF ↗ (opens in a new tab)
Task Injection – Exploiting agency of autonomous AI agents ↗ (opens in a new tab)
Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads ↗ (opens in a new tab)
ServiceNow report highlights rising risks in agentic AI security ↗ (opens in a new tab)
Nvidia picks OpenShell to tame AI gents ↗ (opens in a new tab)
US bans DeepSeek across federal agencies, putting AI supply chains under scrutiny ↗ (opens in a new tab)
Close Identity Gaps in Software Development Before Unleashing AI ↗ (opens in a new tab)
‘Reverse-Engineer Anything’ Is the New Wild West of AI ↗ (opens in a new tab)
AI Agent Adoption Creates Risk as Oversight Struggles to Keep Pace, Splunk Finds ↗ (opens in a new tab)
Over Half of Financial Service Leaders Miss Spoofed AI Traffic ↗ (opens in a new tab)
How one hacker used AI agents and a few thousand dollars to break into scores of sites ↗ (opens in a new tab)
Microsoft targets the ‘agentic insider’ with new controls for rogue AI agents ↗ (opens in a new tab)
Your Security Stack Knows Who Logged In. But Does It Know What AI Agents Do Next? ↗ (opens in a new tab)
Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack ↗ (opens in a new tab)
How To Vet An MCP Server Before Your AI Agent Uses It ↗ (opens in a new tab)
Zero Trust for Artificial Intelligence ↗ (opens in a new tab)
Introducing Evo Agentic AppSec: Security That Keeps Up With AI Development ↗ (opens in a new tab)
AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds ↗ (opens in a new tab)
How Governments Are Turning AI Infrastructure Into Strategic Power ↗ (opens in a new tab)
Starling Bank claims first banking AI trained on UK sovereign cloud ↗ (opens in a new tab)
Sonar joins OpenAI Daybreak Cyber Partner Program, deepening collaboration on agentic security ↗ (opens in a new tab)
UK's AI minister promises greater safeguards in the face of advanced AI threats ↗ (opens in a new tab)
AI Is Getting Really Good at Messing With Cybercriminals ↗ (opens in a new tab)
Feed Your AI without Creating Data Leaks ↗ (opens in a new tab)
The OWASP Top 10 for LLM Applications (2026): What Changed and Why It Matters ↗ (opens in a new tab)
Apple Will Require Explicit User Action to Grant Full Disk Access in macOS, Citing AI Agents ↗ (opens in a new tab)
Top AI agent security resources — October 2026 ↗ (opens in a new tab)