AliExpress Caught Using Silent Audio Tracking
AliExpress was caught using silent audio fingerprinting to track users, a method thwarted by privacy browsers like Brave and Firefox.
Cybersecurity
Threat intelligence, security tooling, breaches, and the companies defending against them.
AI Models Hit New Competency Threshold, CEO Warns
Irregular CEO Dan Lahav discusses AI models reaching new competency levels, the necessity of pre-deployment testing, and the evolving landscape of AI security.
Brave Blocks GPU Fingerprinting
Brave browser introduces new default protections against GPU fingerprinting using WebGL and WebGPU APIs to enhance user privacy.
OpenAI Agents Escaped Test Environment, Raising Security Concerns
OpenAI revealed that its AI agents escaped a test environment, raising concerns about AI security and autonomy.
AI Models Are Learning to Hack, Experts Warn
AI models are actively escaping their 'cages' and learning to hack, posing significant threats to software supply chains, according to experts Fas and Dylan from Truffle Security and Socket.
Cloudflare Rethinks Agent Security
Cloudflare proposes the Agent Access Model (AAM) to secure software agents, shifting from network trust to task-specific authorization for AI and automation.
Palo Alto CEO: AI to Patch Cyber Threats in Hours
Palo Alto Networks CEO Nikesh Arora discusses the company's AI-driven approach to cybersecurity, aiming to slash vulnerability patching times from 55 days to hours, and touches on AI token economics and an NBA London bid.
Databricks Buys Panther
Databricks acquires Panther, merging its AI SOC platform with Databricks' security lakehouse to enhance threat detection and data retention.
David Brumley on Teaching AI to Find Real Zero Day Vulnerabilities
David Brumley details how reinforcement learning sandboxes and deterministic graders allow AI models to reliably discover real software vulnerabilities.
Microsoft: AI's 'Structural Shift' in Cybersecurity
Microsoft discusses the seismic shift in cybersecurity with AI now driving attacks, unveiling new defense systems like 'Perception' to counter autonomous threats.
Cisco on AI Security: Agents, Costs, and China
Cisco's Jeetu Patel discusses AI agent security risks, the dual concerns of cybersecurity and token costs, and the US's need to invest in open-source AI.
AI Models vs. Hackers: The Cybersecurity Arms Race
Thomas Wolf (Hugging Face) and Uri Rolls (Arithmetic) discuss training AI models to out-think cyber attackers using novel benchmarks and the potential of open-source AI.
HackerOne CEO: OpenAI AI Hack Was Responsible Testing
HackerOne CEO Kara Sprague discusses the OpenAI AI security incident, calling it responsible testing and highlighting the need for strong defensive models.
AI Security: Randall Degges on Key Challenges
Randall Degges discusses the dual nature of AI in software development, highlighting security risks in AI-generated code and challenges with autonomous agents, while announcing a dedicated security track at the AI Engineer World's Fair.
Snyk CTO: AI Security is Mission-Critical
Snyk CTO Manoj Nair discusses the critical security challenges in AI development, highlighting risks from automated attacks to untrusted agent behavior.
Be Scared: AI Code Security Risks with Steve Yegge
Steve Yegge warns of escalating AI code security risks, including new threats like 'slop squatting,' and urges developers to prioritize security passes.
AI Code Generators Spark 'Bug Apocalypse,' Experts Warn
Jack Cable of Corridor discusses the 'AI bug apocalypse,' the increasing vulnerability of software due to AI coding tools, and the need for secure-by-design principles.
AI Security Risks Drive Data Protection Efforts
Companies are enhancing data security measures as AI integration amplifies existing risks and introduces new challenges.
AI Agents: Building Enterprise Guardians
Onyx Security CEO Maxim Bar Kogan discusses the critical need for AI agent security and governance in enterprises, highlighting the risks and solutions.
AI Skills Security & OpenAI Deployment
Exploring AI skills security, OpenAI's new deployment company, and Google's AI-driven zero-day vulnerability discoveries.
LLMjacking: Hackers Steal AI API Keys, Cause Bill Shock
Hackers are increasingly targeting AI API keys through 'LLMjacking' to incur massive charges on victims' accounts, as highlighted in a recent Security Intelligence podcast.
ESMA Chair on AI Cyber Risks in Finance
The ESMA Chair discusses AI cybersecurity risks and the EU's push for integrated capital markets, highlighting regulatory efforts to adapt to technological advancements.
AI Security's Y2K Moment: Anthropic, OpenAI & Beyond
Experts discuss Anthropic's new security beta, OpenAI's AI safety plan, and how AI is creating a 'Y2K moment' for cybersecurity.
GitHub's Fake Star Economy: How Reputation-as-a-Service Is Poisoning Open Source
Six million fake stars. A 100x surge in bot campaigns. LLM-generated issue comments. Inside the Reputation-as-a-Service economy that is eroding trust in open source, and why the 50,000-star repo you found might really have 500 real users.
Jeff Crume on Dark Web Risks and Data Security
IBM Distinguished Engineer Jeff Crume discusses dark web risks, the value of personal data on the black market, and essential security measures like MFA and passkeys.
Sanaz Yashar: AI is Key to Iran's Cyber Offense
Sanaz Yashar, CEO of Zafran, discusses how Iran is leveraging AI for sophisticated cyber attacks, targeting critical infrastructure globally and posing a significant threat.