Google Sues Phishing Ring That Weaponized Gemini AI
A Chinese cybercrime network sold $88/week phishing kits that used Google's own Gemini AI to generate fake sites impersonating banks, carriers, and government agencies at scale.
Articles Tagged "Security"
MCP Exploit Risk, Sycophancy Scores, and Agent Self-Harm
New research reveals MCP error messages triple agent attack success rates, ranks eight models on sycophancy with Claude scoring best, and finds self-evolving agents make 30-42% false edits.
ChatGPT Lockdown Mode Targets Prompt Injection Data Theft
OpenAI's new Lockdown Mode cuts the network exits that prompt injection attacks use to steal data from ChatGPT - but won't stop malicious instructions from entering the model in the first place.
AI Sabotage Blind Spots, Code Drift, and ZK Proofs
Three new arXiv papers expose how developers miss AI sabotage 94% of the time, why LLMs converge structurally in code evolution, and how ZK proofs could verify frontier AI training.
56% of High-Risk Hackers Now Use AI, Anthropic Reports
Anthropic analyzed 832 banned accounts over 12 months and found AI-assisted threat actors grew from a third to more than half of all high-risk cases.
Claude Mythos Finds 10K Flaws in Critical Systems
Anthropic expands Project Glasswing to 150 organizations across 15 countries, with Claude Mythos Preview surfacing 10,000 high-severity vulnerabilities since April.
New Open Standard Puts AI Agents Under Runtime Control
The Agent Control Standard defines open middleware hooks that let teams block, allow, or modify AI agent actions before they reach production systems.
BadHost: The Auth Bypass Lurking in 325M AI Systems
CVE-2026-48710 in Starlette lets a single malformed HTTP header bypass authentication on vLLM, LiteLLM, FastAPI, and every MCP server in production.
IBM and Red Hat Bet $5B on AI to Secure Open Source
IBM and Red Hat's Project Lightwell deploys 20,000 engineers and AI to patch open source vulnerabilities against exact deployed versions - no forced upgrades, commercial subscription model.
TeamPCP Breaches GitHub via Poisoned VS Code Extension
TeamPCP stole 3,800 GitHub internal repos via a malicious Nx Console update live for just 11 minutes, tracing back to the TanStack supply chain compromise.
Microsoft Agent 365 Review: AI Agent Control Plane
Microsoft's enterprise control plane for AI agents ships with strong M365 integration and real security muscle - but critical features are still in preview, and the licensing model is a puzzle.
Best AI-Integrated Offensive Security Tools in 2026
Ten offensive security tools ranked by AI integration depth - from Burp Suite and Legba to Nuclei, Ghidra, Hashcat, BloodHound CE, and Metasploit.
