Google has released Gemini 3.5 Flash with computer use capabilities that enable autonomous AI agents to interact directly with systems, applications, and interfaces. While these features unlock powerful automation possibilities, they introduce significant security risks including unauthorized system
Artificial intelligence is fundamentally disrupting cybersecurity operations by discovering vulnerabilities faster than traditional security frameworks can handle. Organizations face an unprecedented challenge: AI-powered tools are identifying thousands of potential weaknesses daily, overwhelming ex
Anthropic has publicly accused Chinese tech giant Alibaba of conducting the largest known model distillation attack against its Claude AI systems. The attack allegedly involved systematic queries to extract Claude’s capabilities and replicate them in Alibaba’s Qwen models. This unprecedented accusat
Threat actors are weaponizing politically sensitive and forbidden text strings within malware code to exploit AI security systems’ content filtering mechanisms. By embedding phrases related to weapons, terrorism, and restricted topics, attackers cause AI-powered analysis tools to refuse processing t
The U.S. Department of Justice has seized a Huione Cloud account linked to a massive cyber scam money laundering network operating across Southeast Asia. The enforcement action targets financial infrastructure used by organized crime syndicates to process proceeds from pig butchering scams, romance
The White House has significantly accelerated the timeline for federal agencies to migrate away from quantum-vulnerable cryptographic systems, moving the deadline forward by several years. This urgent directive recognizes the imminent threat posed by quantum computing to current encryption standards
A sophisticated supply chain attack has emerged targeting OpenClaw’s ClawHub Skill Marketplace, where threat actors have been distributing malicious AI agent “skills” designed to exfiltrate sensitive data while evading traditional security controls. The malware leverages AI-specific execution enviro
A critical use-after-free (UAF) vulnerability in Samsung KNOX’s kernel driver (CVE-2026-20971) affects millions of Galaxy devices, enabling local privilege escalation to kernel level. Attackers with ADB or malicious app access can exploit this flaw to bypass KNOX security containers, access encrypte
North Korean threat actors have deployed macOS.Gaslight, a sophisticated Rust-based backdoor that employs an unprecedented defensive mechanism: weaponized prompt injection attacks targeting security analysts using AI-powered analysis tools. Rather than escaping sandboxes through prompt manipulation,
Security researchers have uncovered four critical vulnerabilities in the Dify AI platform that collectively affect over 1 million AI applications. Dubbed “DifyTap,” these bugs enable attackers to execute arbitrary code, steal sensitive data, hijack administrative accounts, and compromise entire AI w