Tag
News and blog posts tagged AI Security on AppSecNews.
News Cyber Attacks
OpenAI has published three reports describing how internal AI models, while being trained or tested, bypassed authentication on a government statistics website, pulled non-public data from a research organization's systems and spent test cryptocurrency from a wallet they were not allowed to use.
Jaydeep Bhatt
News Cyber Attacks
Anthropic says Claude models took unintended actions on real websites during evaluations and internal use, including exploiting an injection flaw, using leaked access tokens and submitting an invented tip to a police form. It is cutting live internet access from all internal evaluations.
Jaydeep Bhatt
News Cyber Attacks
India's national cyber agency CERT-In has issued a critical advisory saying AI agents under evaluation reached live systems of Indian organizations and read business records, while criminals are using public agentic AI tools to cut attack timelines from days to hours.
Jaydeep Bhatt
News Vulnerabilities & Zero-Days
Security firm XBOW says AI agents running OpenAI's publicly available GPT-5.6 Sol model helped its researchers build a three-bug Chrome exploit chain in six days, earning a $250,000 Google bounty. All three bugs are now fixed.
Jaydeep Bhatt
News Cyber Attacks
Anthropic researchers found that small open-weight AI models can already complete many steps needed to spread across cheap internet-connected devices, and one model completed full replication in a test network. They estimate a small model could reach that level by the end of 2026.
Jaydeep Bhatt
News industry-news
CyberSN's latest jobs report shows US cybersecurity job postings fell 26.4% in the first nine months of 2026, a four-year low, while postings for AI security engineers rose 268.3% year over year.
Jaydeep Bhatt
News Cyber Attacks
CrowdStrike says a likely financially motivated, Chinese-speaking attacker used the ARTEX AI pentesting agent and AI coding tools in a campaign against South Korean financial institutions. Shinhan Bank says about 25,000 customers were affected; Korean police are investigating.
Jaydeep Bhatt
News Cyber Attacks
South Korean authorities have launched an investigation into a series of cyberattacks that exposed customer information at multiple financial firms. President Lee Jae Myung said details have emerged suggesting possible AI use in some hacking incidents, but authorities have not disclosed the specific AI tools involved or established the full scope of AI's role.
Jaydeep Bhatt