EqualAI CEO: Your AI assistant is acting in your name. Who signed off?
Fortune — AI agents need permission rules before they act.
Model Security
Model security involves protecting machine learning models and digital artifacts against theft, manipulation, and compromise. Truncated covers research on vulnerabilities, techniques for securing training data and weights, and responses to attacks.
Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims
WIRED — Named “Volta-Autodoxer,” the recently uncovered malware uses AI tools to collect troves of data about victims, from login credentials and credit card numbers to Discord sessions and UberEats receipts.
Broadcom bashes bounty of ‘novel vulnerabilities’
sdxcentral.com — Its TrueSource Spring Enterprise users gained early fix access
Hackers Weaponize OpenAI API in NIK C2 Framework for Credential Theft and Remote System Control
Cyber Security News — NIK C2 abuses OpenAI's API to power Windows malware that steals passwords, logs keystrokes, and enables remote access.
AI Forces Organizations To A Higher Security Testing Maturity
Forbes — The skill that once separated a script kiddie from a serious threat actor is thinning out, but many organizations are still operating on an older cadence.
Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data
Cyber Security News — A grey market service hijacks Codex and Claude Code settings, routing company data and credentials through its servers across 12 orgs.
Ghost in the PHP2Shell: Why coordinated disclosure and patching will start moving faster
aikido.dev — PHP2Shell showed how fast AI turns a bug into an exploit. Here’s why the disclosure should never happen this way again, and why it will anyway.
No quarantine for Bedrock Mantle
Plerion — AWS's compromised key quarantine policy denies five bedrock actions, but Project Mantle's bedrock-mantle:CreateInference is not one of them. A look at the LLMjacking gap and how to detect it.
Bitcoin Core Discloses Three AI-Found Bugs Under New Fast-Track Rules
tftc.io — Three vulnerabilities found by an AI code scanner hit Bitcoin Core's new fast-track disclosure tier for the first time. One can crash Windows, macOS, and BSD nodes. Fixes are live.
Dismiss email signup
Subscribe to 
The top AI news in your email delivered each morning. Choose categories