Security briefing · Archive
AI & security · Archive
Browse collected headlines by topic and follow links to the original publishers.
AI & security
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Indirect Prompt Injection in Web-Browsing Agents ↗ (opens in a new tab)
How I sped up exploit validation in Repeater using Burp AI ↗ (opens in a new tab)
UEFI Vulnerability Analysis using AI Part 2: Breaking the Token Barrier ↗ (opens in a new tab)
Reversing at Scale: AI-Powered Malware Detection for Apple’s Binaries ↗ (opens in a new tab)
WTF is ... - AI-Native SAST? ↗ (opens in a new tab)
OpenAI AI Agents Exploit Zero-Day Vulnerabilities to Escape Sandboxes and Access Host Systems ↗ (opens in a new tab)
Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions ↗ (opens in a new tab)
Tor, PhP2Shell, Deepfakes, eMudhra, LiteLLM, Meta, Josh Marpet, and More - SWN #627 ↗ (opens in a new tab)
Enterprises should report AI breaches and ‘near misses,’ says UK financial regulator ↗ (opens in a new tab)
Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack Spree ↗ (opens in a new tab)
UK finance watchdog wants firms to report AI failures and close calls ↗ (opens in a new tab)
How one hacker used AI agents and a few thousand dollars to break into scores of sites ↗ (opens in a new tab)
Fortanix extends Confidential AI to Kubernetes workloads through Confidential Containers ↗ (opens in a new tab)
Google Messages’ New Scam Protection Uses Cloud AI: What Happens to Your Privacy? ↗ (opens in a new tab)
AI Hacking Breach Hits 16 Financial Institutions, Leaks 100,000 Records ↗ (opens in a new tab)
New Aoki Infostealer Targets AI Coding Assistant Credentials ↗ (opens in a new tab)
Threat Actor Abuses Agentic AI Pentesting Framework to Target South Korean Financial Institutions ↗ (opens in a new tab)
ASPM in the AI Era Part 1: Unified Visibility Across Your Stack ↗ (opens in a new tab)
Firms can’t count their AI agents, let alone switch them off ↗ (opens in a new tab)
Shared standards, independent review: Fin's AI lesson ↗ (opens in a new tab)
How Loopjacking Hijacks Human Approval in AI Workflows ↗ (opens in a new tab)
Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security ↗ (opens in a new tab)
Bounding the Frontier: Why Enterprise AI Needs Security Validation Before Scale ↗ (opens in a new tab)
The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos ↗ (opens in a new tab)
Preparing for an AI ‘kill switch’ ↗ (opens in a new tab)
Top AI coding agent security resources — October 2026 ↗ (opens in a new tab)
Why AI Coding Agents Keep Writing Broken Access Control ↗ (opens in a new tab)
As AI models go rogue, do you still trust OpenAI and Anthropic to stop them? I don’t and neither should you | Chris Stokel-Walker ↗ (opens in a new tab)
Beyond Intelligence: How Trust Is the Benchmark That Matters in AI ↗ (opens in a new tab)
Court Filing Shows Microsoft Exec Called AI Training the "Largest Labor Theft in Human History" ↗ (opens in a new tab)