Hugging Face has published an anatomy of the attack and OpenAI has shared additional information from its investigation.
The post OpenAI’s Rogue AI Ventured Beyond Hugging Face appeared first on SecurityWeek.
The OpenAI models targeted services beyond Hugging Face as they attempted to solve the tasks they were given.
The post JFrog Zero-Days Exploited in OpenAI-Hugging Face Hack appeared first on SecurityWeek.
The company claims MAI-Cyber-1-Flash tops Anthropic’s Mythos and OpenAI’s GPT-5.6 Sol in CyberGym testing.
The post Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model appeared first on SecurityWeek.
The startup will invest in expanding engineering and sales teams, accelerating ecosystem support, and expanding corporate partnerships.
The post Hush Security Raises $30 Million for AI Agent Governance appeared first on SecurityWeek.
Decades after it appeared in “The Terminator,” Skynet looks more like a forecast of the cyber incident in which a rogue AI system hacked into another AI company on its own.
The post For Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a Startup appeared first on SecurityWeek.
The Nvidia-led coalition aims to give defenders more open tools for testing, auditing and protecting AI models and agents.
The post Nvidia and Tech Giants Launch AI Security Alliance appeared first on SecurityWeek.
KnowBe4 has expanded its AI-powered security awareness training platform with the launch of Custom AI Video Builder, a new capability designed to help organisations rapidly create tailored cybersecurity training videos in response to emerging threats.
The feature, developed as part of KnowBe4’s strategic partnership with AI video platform Synthesia, enables security teams to generate custom training videos in minutes and deploy them directly into their security awareness programmes without leaving the KnowBe4 platform.
The launch comes as cybercriminals ramp up usage of generative AI to create highly targeted social engineering campaigns aimed at specific industries, job roles and regions. According to KnowBe4, organisations need to be able to update awareness training at a similar pace in order to keep employees prepared for evolving attack techniques.
Available through KnowBe4’s ModStore, the new feature includes a prepaid Synthesia Starter licence (worth $250 per year) allowing customers to create up to 120 minutes of AI-generated video annually. Users can choose from more than 120 AI avatars and produce content in over 160 languages and dialects.
The capability integrates directly with KnowBe4’s existing Content Creation Agent, allowing administrators to add studio-quality video to AI-generated text-based training. Alongside the recently launched Deepfake Training Content Agent, the new release forms part of the company’s broader AI-native content customisation suite.
“Generative AI has given attackers the ability to build campaigns around the exact policies, roles and regions where training doesn’t yet exist,” said Greg Kras, Chief Product Officer, KnowBe4. “Custom AI Video Builder closes that window by putting studio-quality video production directly inside the KnowBe4 platform, so customers can go from a new threat to a finished training module without waiting on a production cycle. It’s one more way we’re helping security teams match the speed of the threats they’re defending against.”
Among the key features are automated publishing of completed videos into the ModStore’s Uploaded Content library, removing the need to manually download and upload SCORM packages, and AI-powered dubbing that enables organisations to localise training for employees around the world.
Custom AI Video Builder is available immediately to customers on KnowBe4’s Platinum, Diamond, Training-Only Diamond, SAT Foundation and SAT Advanced subscriptions.
The announcement follows further recognition for KnowBe4, after the company received an award in the email security category earlier this month.
The post KnowBe4 Unveils Custom AI Video Builder appeared first on IT Security Guru.
Industry professionals debate whether it represents a lab containment failure or an unprecedented agentic capability milestone.
The post Industry Reactions to OpenAI Models Hacking Hugging Face: Feedback Friday appeared first on SecurityWeek.
AgentForger allows an attacker to create, insert and remotely control an invisible autonomous AI agent inside a victim organization.
The post OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider appeared first on SecurityWeek.
SentinelOne’s new benchmark, built on the Fast16 case, shows which AI models can sustain a malware investigation and which cannot.
The post Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models appeared first on SecurityWeek.
Analysis found 434 exploitable flaws in AI-generated apps, with denial-of-service, authorization and secrets exposure risks among the most common issues.
The post Vibe-Coded Apps Riddled With Exploitable Security Flaws appeared first on SecurityWeek.
OpenAI says its AI models went rogue, as CISOS call the incident a watershed moment, warning that autonomous AI threat models have officially crossed into production reality.
The post OpenAI Says Its AI Models Broke Loose and Hacked Hugging Face appeared first on SecurityWeek.
The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of larger AI models.
The post Cisco Launches Low-Cost AI Models for Source Code Security appeared first on SecurityWeek.
Neo raised money across seed and Series A funding rounds from Andreessen Horowitz, Bessemer Venture Partners, and others.
The post Neo Emerges From Stealth With $100M to Control and Secure Enterprise AI Software appeared first on SecurityWeek.
(Video) Artificial intelligence is transforming cybersecurity, but are governance, compliance, and security practices evolving fast enough to keep up?
The post Podcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive appeared first on SecurityWeek.
AI infrastructure introduces new security risks that traditional data center designs were never built to handle.
The post AI Data Centers Are Being Built Faster Than They Can Be Secured appeared first on SecurityWeek.
An attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it automatically.
The post Unpatched Cursor Vulnerability Exposes Users to Code Execution appeared first on SecurityWeek.
The new program stems from an AI-focused Executive Order signed by President Trump on June 2.
The post White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative appeared first on SecurityWeek.
A ClaudeBleed-linked vulnerability reportedly persists across eight patches, exposing potentially sensitive data to other extensions.
The post Unpatched Claude for Chrome Flaw Lets Extensions Read Gmail, Calendar appeared first on SecurityWeek.
Researchers demonstrate adversarial hallucination squatting against popular AI assistants to achieve remote code execution.
The post ‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism appeared first on SecurityWeek.
Login