Security briefing · Archive
AI & security · Archive
Browse collected headlines by topic and follow links to the original publishers.
AI & security
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
How to Create a Makeshift C2 with Claude Code as the Operator ↗ (opens in a new tab)
Auto reverse-engineering the Hyperliquid risk engine, with some agentic help ↗ (opens in a new tab)
SVD-2026-0614: OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit ↗ (opens in a new tab)
Captured Logs Reveal Hackers Using Claude and Codex to Breach Companies ↗ (opens in a new tab)
Agentic AI Security is moving fast. Here’s where to start. ↗ (opens in a new tab)
Reflections of CDDC 2026 and my thoughts on AI in CTFs ↗ (opens in a new tab)
On the cyber-security implications of current LLMs ↗ (opens in a new tab)
An AI audit of FreeBSD ↗ (opens in a new tab)
Securing AI systems without overconfidence or fear – Part 2: Attack surfaces and the checkpoint flow ↗ (opens in a new tab)
AI-FI: Reproducing adb to root on Google's TV Streamer using Claude in less than 15 minutes ↗ (opens in a new tab)
Benchmarking LLMs for malware triage and static unpacking with Malcat ↗ (opens in a new tab)
AI Vulnerability Research and the Fuzzer Era Déjà Vu: Why the Numbers Are Only Half the Story ↗ (opens in a new tab)
RCEliteLLM – LiteLLM 1.83.14: Chaining an Environment Variable Leak with Jinja2 SSTI for Remote Code Execution ↗ (opens in a new tab)
AI Security Architecture: The Key to Verifiable AI | Uptycs ↗ (opens in a new tab)
Pentagon turns to AI targeting to help troops shoot drones ↗ (opens in a new tab)
OpenClaw and Claude in 2026, risks and retrospectives ↗ (opens in a new tab)
[Deprecated] Break LLM Workflows with Claude's Refusal Magic String ↗ (opens in a new tab)
pyghidra-mcp Meets Ghidra GUI: Drive Project-Wide RE with Local AI ↗ (opens in a new tab)
Enabling privacy-preserving AI training on everyday devices ↗ (opens in a new tab)
Can an AI Write a Working Exploit? ↗ (opens in a new tab)
Bissa Scanner Exposed: AI-Assisted Mass Exploitation and Credential Harvesting ↗ (opens in a new tab)
AI Made Code Cheap. Trust Did Not. ↗ (opens in a new tab)
Scanscope: Visualizing Port Scan Results Using Machine Learning Methods ↗ (opens in a new tab)
On LLMs and vulnerability research ↗ (opens in a new tab)
Observations on AI generated Remote DuckDB via HTTP with mTLS ↗ (opens in a new tab)
Are LLMs Capable Of Spatial Reasoning? A Small Experiment ↗ (opens in a new tab)
AI Exposure and CTEM: The Next Frontier of External Risk ↗ (opens in a new tab)
OpenClaw at Work: Prompt Injection Risks ↗ (opens in a new tab)
Windows and macOS Malware Spreads via Fake “Claude Code” Google Ads ↗ (opens in a new tab)
Kali & LLM: Completely local with Ollama & 5ire ↗ (opens in a new tab)