Hot Topic

A new study from Beacom College shows that all automation scripts produced by top AI models like ChatGPT, Microsoft Copilot, and Google Gemini have security flaws that can be exploited. Researchers wanted to check how safe AI-generated code is, without bias from the prompts. They used the same prompts for …

A new free tool is adding AI helpers into security work. PentestCode is a version of OpenCode made just for penetration testing. It uses security tools, checks the results, and makes smart choices all from a terminal, needing very little help from people. The main idea of the tool is …

A major AWS attack shows how attackers with AI can connect known cloud strategies to go from first access to complete control in about 72 hours, not with new tools, but with very fast and organized actions. According to Sygnia’s investigation, the threat actor got access to an AWS account …

A new cybercrime ad is catching attention in the security world. It talks about a botnet that doesn’t just get into computers; it makes them rented AI tools for other criminals to use. The system named Mycelium is sold on a hidden website as a bundle for hacking into computers …

CrowdStrike has shared five new ways to inject prompts, showing the rising danger to AI agents as more organizations use autonomous AI systems. Early risks were mainly about simple chatbot misuse. Now, AI agents can look at websites, access internal data, and carry out commands. This has greatly increased the areas …

Thousands of Model Context Protocol (MCP) servers have serious security flaws like file access issues, command injection, server-side request forgery (SSRF), and SQL injection. This raises big worries about the safety of AI supply chain security. A big study of 9,695 MCP servers from well-known sites like GitHub, Glama, Lobehub, …

Security experts found what they think is the first time an AI carried out a cyber attack all by itself. The complete automated campaign used an AI to carry out a ransomware attack. Victims have to pay money to get their data back. A team from the cloud security company …

Alibaba is said to be getting ready to ban the use of Anthropic’s Claude Code in its own systems starting July 10. This choice follows claims that the AI coding helper has a hidden detection method that acts like a backdoor. The news, first reported by the Chinese financial outlet …

The Indian government issued a notice WhatsApp planned to roll out its new ‘username’ feature. They are worried about fake accounts and fraud. The company must discuss the issue before moving forward. This week, WhatsApp said it will let users pick a username and hide their phone numbers when they …

Two Asian AI companies have released new models this week that compete with Anthropic’s recently limited Mythos and Fable models, as a U.S. export ban on those technologies reaches its third week. These actions show an increasing effort in the region to cover gaps left by U.S. export ban. New …