CrowdStrike is reportedly making one of its largest bets yet on the security of artificial intelligence, with plans to acquire Fiddler AI and Dreadnode in transactions valued at nearly $500 million combined. The proposed deals would give CrowdStrike technology spanning two…
Downloads folder attacks boast a 90% success rate If you run AI coding agents like Claude Code, OpenAI Codex, or Cursor CLI on your local machine, a single plain-text Markdown file is enough to compromise your environment. No memory corruption bug,…
On 2026-11-02, VIDRAFT's FINAL-Bench authors published "The Sleeper in the Weights" on Hugging Face, a two-part technical post that: Demonstrates trigger generalization using a LoRA fine-tune on Qwen3-0.6B — not claiming to replicate web-scale pretraining poisoning, but reproducing the pattern of how triggers…
/PRNewswire/ -- Endor Labs, the leader in agentic development security, today announced that it has been named a Leader in The Forrester Wave™: Agentic... The company receives highest possible scores across seven evaluation criteria as AI coding agents reshape enterprise application…
The official ChatGPT Live voice feature is amazing, isn't it? It's like it's alive! This is incredible! It's at a level where you'd think it's a person, right? It even clears its throat naturally. That's when I had a thought.
Hi, I built RepoXray (https://github.com/Ra9mirez11/repoxray) to audit repositories before running npm install or attaching AI coding agents. Why I built it: AI slopsquatting: LLMs regularly hallucinate plausible package names. If a package returns 404 on npm today, an attacker can register…
AI coding agents like Cursor, Claude Code, Windsurf, Copilot, and Bolt have fundamentally changed software engineering. We are shipping features 10x faster by prompt-coding and "vibecoding." However, this massive velocity leap has introduced two severe bottlenecks that almost every AI developer…
The email from OpenAI's bug bounty program landed at 2:47 AM. $5,000 for a vulnerability letting a malicious ChatGPT share link execute arbitrary code in any logged-in session. Patched fast. Clean disclosure. But the sleep didn't come back. I've spent fifteen years…
For years, "AI-powered hacking" mostly meant better phishing emails. October 2026 brought two reports of something different: AI agents doing the actual intrusion work, chaining bugs and moving through networks while a human mostly watched. One campaign was run by a…
Going inside the security ‘dark ages’ with Alex Stamos. Today, I’m talking with Alex Stamos, chief security officer at Cognition and longtime cybersecurity expert, about what a mess cybersecurity is right now. This episode is part one of a special…
Hackers using AI: AI-run intrusion campaigns, AI-written malware and phishing, and state hackers using Claude, Gemini or ChatGPT.
An article joins this feed when it matches these terms. Each one is also a search of its own.