AI & security · Archive

AI & security

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Recent AI-Assisted Cyber Attacks in Japan: Investigating Attack Infrastructure and Techniques ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-10-21 · First collected 2026-10-24

• LiteLLM attacked again: Malicious 1.107.0 wheels on PyPI and Docker Hub (October 2026) ↗ (opens in a new tab)

  Chainguard: Unchained · Published 2026-10-21 · First collected 2026-10-24

• LiteLLM supply chain compromise: What you need to know ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-10-21 · First collected 2026-10-24

• New OpenSSF Guide: Finding and Fixing Vulnerabilities Using AI ↗ (opens in a new tab)

  Open Source Security Foundation · Published 2026-10-20 · First collected 2026-10-24

• A-HUNT: Autonomous and AI-Enhanced Cyber Threat Hunting Framework ↗ (opens in a new tab)

  Krypt3ia · Published 2026-10-20 · First collected 2026-10-24

• Talking enterprise AI vulnerabilities, jailbreaks, and active threat intelligence with Amy Chang ↗ (opens in a new tab)

  Cisco Newsroom: Security · Published 2026-10-20 · First collected 2026-10-24

• Introducing a new AI chapter in the NCSC research problem book ↗ (opens in a new tab)

  UK NCSC blogs · Published 2026-10-20 · First collected 2026-10-24

• US Homeland Security Orders Federal Civilian Agencies to Stop Using and Remove DeepSeek AI Products ↗ (opens in a new tab)

  Cybersecurity News: Threats, Vulnerabilities & Privacy Updates - gHacks · Published 2026-10-20 · First collected 2026-10-24

• Between Two Nerds: Why AI will mean infinite bugs ↗ (opens in a new tab)

  Risky Bulletin · Published 2026-10-19 · First collected 2026-10-24

• The AI Exchange: Innovators in Payment Security Featuring AuditSafe ↗ (opens in a new tab)

  PCI Perspectives · Published 2026-10-19 · First collected 2026-10-24

• Backdooring Open-Weight AI Models ↗ (opens in a new tab)

  Schneier on Security · Published 2026-10-16 · First collected 2026-10-24

• Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th) ↗ (opens in a new tab)

  SANS Internet Storm Center · Published 2026-10-16 · First collected 2026-10-24

• Everybody is losing their minds about cryptography because of AI ↗ (opens in a new tab)

  Closure on David Adrian · Published 2026-10-15 · First collected 2026-10-24

• MCP Tool Exposure is a Privilege Grant: A Two-Gate Authorization Model for Agentic AI ↗ (opens in a new tab)

  Cloud Security Alliance · Published 2026-10-15 · First collected 2026-10-24

• [tl;dr sec] #350 - Reverse Engineer Anything, Tracking AI-integrated Malware, Test-driving Jev ↗ (opens in a new tab)

  tl;dr sec · Published 2026-10-15 · First collected 2026-10-24

• AI Noise Is the New Development Bottleneck ↗ (opens in a new tab)

  Sonatype Blog · Published 2026-10-15 · First collected 2026-10-24

• AI Security is more than the model ↗ (opens in a new tab)

  Berryville Institute of Machine Learning · Published 2026-10-15 · First collected 2026-10-24

• Detection engineering meets AI-driven adversary emulation ↗ (opens in a new tab)

  Blog on 1Password Blog · Published 2026-10-15 · First collected 2026-10-24

• Sophos ITDR expands identity protection for the AI era ↗ (opens in a new tab)

  Sophos Blogs · Published 2026-10-15 · First collected 2026-10-24

• Texas HB 3834 Cybersecurity & AI Training Requirements ↗ (opens in a new tab)

  Huntress Blog · Published 2026-10-14 · First collected 2026-10-24

• Be the Architect: Intentional AI Engagement for Cybersecurity Engineering ↗ (opens in a new tab)

  SpecterOps · Published 2026-10-14 · First collected 2026-10-24

• Analysis of the Infrastructure of ARTEX, a Chinese AI Penetration Testing Tool #4 – The Birth of Copy Cat ↗ (opens in a new tab)

  ASEC · Published 2026-10-14 · First collected 2026-10-24

• Anthropic warns small AI models could self-replicate through IoT devices ↗ (opens in a new tab)

  Security - Ars Technica · Published 2026-10-14 · First collected 2026-10-24

• Fake AI Tools Put US Companies at Risk: Inside Counterfeit Claude, ChatGPT, and Copilot ↗ (opens in a new tab)

  ANY.RUN Cybersecurity Blog · Published 2026-10-14 · First collected 2026-10-24

• ONEKEY AI Agent: AI-Powered Firmware Security ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-10-14 · First collected 2026-10-24

• What the cyber age teaches about AI risk: Insights from David Sanger ↗ (opens in a new tab)

  The Bitwarden Blog · Published 2026-10-14 · First collected 2026-10-24

• Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572) ↗ (opens in a new tab)

  Embrace The Red · Published 2026-10-13 · First collected 2026-10-24

• Navigating the Waves of AI-Powered Identity Attacks: Lessons From One Year of Identity Exposure Management ↗ (opens in a new tab)

  Blog Archives - Flare | Identity First Threat Intelligence | Unmatched Visibility into Cybercrime · Published 2026-10-13 · First collected 2026-10-24

• AI coding agents expose developer screenshots on GitHub repos ↗ (opens in a new tab)

  ReversingLabs Blog · Published 2026-10-13 · First collected 2026-10-24

• OWASP Machine Learning Top 10 Risks: How to Secure ML Models ↗ (opens in a new tab)

  Archives - SecureLayer7 - Offensive Security, API Scanner & Attack Surface Management · Published 2026-10-13 · First collected 2026-10-24