OpenAI's wandering AI agents earn it a California subpoena
Plus: Attorneys-general say investigators should have direct access to AI companies' records when things go wrong
The Register5 min read
security
499 stories
Fortinet sounds the alarm over actively exploited FortiMail zero-day
No login required, exploitation underway, and some admins are still waiting for patches
The Register5 min read
For 25 years, locked cockpits have kept intruders out. The FlyDubai attack exposed the danger inside
The alleged attack is raising questions about pilot screening and a security system largely designed to stop threats from outside the cockpit.
Fortune AI6 min read
Apple changes full-disk access permissions to curb abuse from AI agents
Meta says FDA isn't sufficient to Muse reading messages. Apple begs to differ.
Ars Technica1 min read
US signals potential escalation in the Iran war
The US dispatched another aircraft carrier and thousands more troops to the Middle East, while Tehran is reportedly preparing its own response to any American attacks.
Semafor Tech1 min read
I got targeted: Trying to get your credentials via a git post-checkout hook
Someone targeted me in an attempt to gain access or credentials because of my Open Source and/or consulting roles
Lobsters3 min read
Lightpanda 1.0: Out of Beta and Ready for Production
Lightpanda leaves beta with 1.7 million passing Web Platform Tests and CORS on by default. Here's what changed since November 2024.
Lightpanda Blog9 min read
Follow the thread: a new dashboard to investigate account abuse
Fraudsters are increasingly using AI to bypass stateless security checks. Cloudflare's new Account Abuse Protection dashboard uses stateful analysis and edge-generated Hashed User IDs to help teams investigate and block account abuse.
Moltworker Blog7 min read
Protected Quick Tunnels: simple accountless authentication for your next dev project
Quick Tunnels now support email authentication. Add --allowed-mail to one cloudflared command, and only the addresses or domains you list can reach your local app. No Cloudflare account required on either side.
Moltworker Blog8 min readOpenAI cuts ties with three safety researchers, WSJ reports
OpenAI has parted ways with three safety researchers after an internal investigation found they mishandled sensitive company information, report says.
TechCrunch AI2 min read
AI agents need more than access control — they need identity at runtime
AI agents are forcing enterprises to rethink identity security, moving beyond access control to runtime identity, action-level authorization and continuous verification.
VentureBeat AI6 min read
Kevin Mandia’s new ‘agent swarm’ security startup Armadin raises $255.5M at $2.5B valuation
Kevin Mandia, best known as the founder of Mandiant, has a new startup that is using agent swarms to test and protect enterprises.
TechCrunch2 min read
California governor vetoes bill banning use of ‘pervert glasses’ to secretly record people
The California state bill would have penalized people who secretly recorded people in public with wearables equipped with cameras and microphones.
TechCrunch3 min read
Transform AI from a security blind spot into a roadmap
I used to joke that every new technology came as a three-course CISO dinner: hype for the appetizer, hope for The post Transform AI from a security blind spot into a roadmap appeared first on The New Stack.
The New Stack - AI5 min read
In AI security, there’s no room for a defender’s mindset
In June, the Five Eyes intelligence alliance issued a rare joint statement. Frontier AI models, they warned, are “anticipated to The post In AI security, there’s no room for a defender’s mindset appeared first on The New Stack.
The New Stack - AI4 min read
AI coding agents leaked 13,000 screenshots, and nobody hacked them.
AI coding agents trying to work around a limitation in GitHub’s command-line tool ended up publishing more than 13,000 internal The post AI coding agents leaked 13,000 screenshots, and nobody hacked them. appeared first on The New Stack.
The New Stack - AI5 min read
My agent guardrail only lived on the laptop. So I compiled it into AWS.
For the past few weeks I've been building Aegis-DevOps, an open-source check that sits in front of the shell commands an AI coding agent runs. Before Claude Code, Codex, Copilot, Cursor or Gemini CLI runs kubectl, terraform or aws, a hook hands the command to Aegis, and Aegis blocks it if your…
Dev.to AI5 min read
From AI Finding to Deterministic Guard
An AI reviewer says a parser accepts a malformed document. The comment is plausible. It is not yet a regression test, and it is not yet a policy. Between a model finding and a reliable guard sits a small but essential engineering process: validate the behavior, identify an owner, reproduce the…
Dev.to AI4 min read
Showing 288 of 499 stories
Load more storiesAiByts Weekly Brief
Get the top AI news and tools straight to your inbox every week.
Weekly · AI news
Join 15,000+ AI enthusiasts