OpenAI pulls the plug on GPT 6.1 Astra as agents keep crossing lines
Aviv Nahum, co-founder and chief executive officer at Above Security, said this incident could be more than an AI being at fault. “If the archive…
Category: CISOOnline
Nvidia releases Open Agent Safety Platform to monitor and govern agentic AI
The Open Agent Safety Platform reference system design features NVIDIA Sentry, an out-of-band watchdog that runs on NVIDIA BlueField-4 DPUs to continuously monitor agent behavior.…
Autonomous agents attack Azure using compromised identities, destroying resources
Jadepuffer, an autonomous AI attacker first identified in July, has expanded into Azure environments, using compromised digital identities to enumerate resources, delete cloud assets and…
OpenAI pauses AI model training after another agent bypasses network restrictions
The incident occurred during a research task in which the model was asked to identify a person using information available on the web. When its…
NetScaler admins told to patch critical zero-days in ADC and Gateway now
NetScaler appliances are an important part of many enterprise networks, providing VPN and remote access, load balancing and other application delivery services. Agnidipta Sarkar, chief…
Stolen AI credentials feed growing LLM proxy economy
Meanwhile researchers from Gambit Security observed a Chinese-speaking threat actor validating 2,975 credentials collected from 1,742 hosts and uploading working keys to an AI API-reselling…
GitLab issue email’s only security is obscurity
“The biggest challenge with the existing design is anyone with an email account can email to that address and act as that GitLab user,” Joseph…
Documentation placeholder domain used in ClickFix attacks
The domain name third-party[.]com is being used to serve malware to users — bad news for those following a little too literally online documentation that…
AI tools help hacker break in for $25 per target
It’s cheap to set yourself up as a hacker these days using AI. Someone attacked 105 online retailers over a period of five days, compromising…
Fixing Flock: The controls needed now that misuse patterns are clear
At Facebook, we learned the same lesson from the other side. Short retention windows made it harder to reconstruct abuse because complaints, patterns and corroborating…
WordPress patches a critical severity security vulnerability
IDC’s Harris noted that Patchstack’s telemetry illustrated the new reality, with attacker reconnaissance occurring within five hours of the patch, and full exploitation within about…
Microsoft integrates SOC capabilities with Defender for enterprises
According to the technical post, Microsoft began rolling out case management, workbooks and natural-language playbook generation to eligible customers’ Defender portals on Sept. 23, with…