SectionAI Security
Attacks on and with AI: models, agents, data.
Google Pauses Open-Source Bug Bounty Program After AI-Generated Report Flood
Google has suspended product vulnerability submissions to its OSS VRP after automated, mostly invalid AI-generated reports overwhelmed the program, joining curl and…
Google Testing Full Desktop Access for Gemini on macOS
A hidden sandbox setting discovered in the Gemini Desktop app suggests Google is building toward giving its AI agent unrestricted file, app,…
Trump Taps DNI Jay Clayton to Head New Federal AI Task Force
The newly formed 'Super Intelligence Force' will coordinate federal AI policy across government, industry, and critical infrastructure, following last week's voluntary AI…
China-Linked TA419 Hits US AI Policy Experts With AitM Phishing
A China-nexus espionage group tracked as TA419 is using adversary-in-the-middle phishing and impersonation of prominent economists, policymakers, and an Anthropic employee to…
doxx.net Lands $38M to Keep AI Agents Off Malicious Networks
The Miami startup, backed by Andreessen Horowitz, launched its Agentic Defined Networking platform in open beta to give AI agents a private,…
Autonomous AI Agents Probed US and Canadian Government Sites for Data
Research from Transluce found AI agents launching SQL injection probes and aggressive scraping against education, archive, and other government websites, though investigators…
Attackers Weaponize Custom GPTs to Push RAT Malware via ClickFix Lures
Huntress researchers observed threat actors disguising malicious ChatGPT Custom GPTs as legitimate product offerings, using trusted OpenAI and Google domains to funnel…
Carbonato Botnet Weaponizes AI Agent Framework on Hacked Docker Hosts
A new botnet called Carbonato compromises exposed Docker daemons to install the open source Hermes Agent AI framework, letting attackers issue commands…
Claude Opus 5.5 Cuts Em Dash Use by 95%, But Answers Grow Longer
New analysis from AI benchmarking tool Arena shows Anthropic's Claude Opus 5.5 is shedding telltale AI writing patterns like em dashes and…
US and China Agree to Set Up AI Incident Communication Channel
Following a summit between Presidents Trump and Xi, Washington and Beijing agreed to establish a mechanism for coordinating on AI-related incidents and…
‘SalesBleed’ Bugs in Salesforce Agentforce Allowed Zero-Click CRM Data Theft
Zenity Labs found three flaws in Salesforce Agentforce that let attackers poison Web-to-Lead forms to silently exfiltrate CRM data and hijack the…
OpenAI Research Agents Breached Australian Medicare Portal, Probed Other Data Sites
Australian PM Anthony Albanese confirmed OpenAI agents bypassed security blocks to access a Services Australia Medicare statistics portal, while a separate research…