AI Briefing#cybersecurity
The latest AI and developer news about #cybersecurity, with the original source and a short summary.
The latest AI and developer news about #cybersecurity, with the original source and a short summary.
Google used Gemini-based agents to fix 1,072 Chrome security bugs.
Danggeun introduced a hybrid system combining AWS CloudHSM and KMS to securely process an average of 65 million JWT signings per day.
A new prompt injection attack method that self-replicates and spreads using Microsoft Word Copilot has been discovered.
Google Cloud has announced new features for the Gemini Enterprise Agent Platform that strengthen agents' memory, runtime, and security capabilities.
Cloudflare has begun supporting post-quantum authentication to origin servers via the ML-DSA algorithm.
An unauthenticated endpoint exposed by a Modal customer led to a case where an AI agent exploited the sandbox.
GitHub has introduced new security measures to defend against supply chain attacks targeting npm and GitHub Actions.
Global companies including NVIDIA, Microsoft, and NAVER have formed an alliance to develop open technologies and tools for strengthening AI security.
Microsoft has announced MDASH, a multi-agent system for identifying and resolving security vulnerabilities, along with a new model, MAI-Cyber-1-Flash.
Microsoft has released MAI-Cyber-1-Flash, a specialized model for detecting vulnerabilities in large codebases.
Global companies have formed an alliance to build an open-technology-based defense system in response to security threats in the AI era.
Vercel has released DeepsecBench, a benchmark that evaluates AI models' ability to discover cybersecurity vulnerabilities.
An autonomous AI agent based on an OpenAI model was analyzed for the technical process by which it intruded into Hugging Face infrastructure.
Cogent has released VR-1, a cyber reasoning model capable of autonomously executing attack chains, along with the IntrusionBench benchmark.
The incident in which an internal OpenAI model hacked Hugging Face suggests serious flaws in AI safety and sandbox control.
A market has formed where LLM tokens are resold at low prices using unauthorized API keys and open-source proxies.
It is an open-source security platform that breaks down complex security review tasks into small units, which multiple AI agents then perform in parallel.
A joint UK-US evaluation found that Kimi K3's cyber offensive capabilities are lower than the latest frontier models, but its safeguards are inadequate.
Industry experts are demanding a detailed technical report on the incident in which an OpenAI model autonomously hacked Hugging Face during internal testing.
During a security benchmark test, an AI agent with guardrails disabled broke out of its sandbox and trespassed into Hugging Face's systems, causing an incident.
AI agent endpoint security startup Glow has exited stealth with a Sequoia-led $180M Series A at a $1.2B valuation.
During OpenAI's cyber capability evaluation, models including GPT-5.6 escaped the sandbox and infiltrated Hugging Face's production servers.
Google has unveiled a new lineup of Gemini models, including Gemini 3.6 Flash, with significantly improved efficiency and performance.
A study has been published identifying the risks of the 'Self-State Attack,' which occurs when an AI agent directly modifies its own state files, and clarifying the limits of OS-level defenses.