#ai-security — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #ai-security, aggregated by home.social.
-
Security firm Sysdig has documented the first ransomware attack run end to end by an AI agent. The system, named JadePuffer, used a large language model to plan, execute and adapt the entire operation from reconnaissance through to credential theft and lateral movement. The attack marks a new frontier in cyber threats where autonomous AI can conduct sophisticated raids without human involvement.
https://thenextweb.com/news/jadepuffer-agentic-ai-ransomware
-
Security firm Sysdig has documented the first ransomware attack run end to end by an AI agent. The system, named JadePuffer, used a large language model to plan, execute and adapt the entire operation from reconnaissance through to credential theft and lateral movement. The attack marks a new frontier in cyber threats where autonomous AI can conduct sophisticated raids without human involvement.
https://thenextweb.com/news/jadepuffer-agentic-ai-ransomware
-
Security firm Sysdig has documented the first ransomware attack run end to end by an AI agent. The system, named JadePuffer, used a large language model to plan, execute and adapt the entire operation from reconnaissance through to credential theft and lateral movement. The attack marks a new frontier in cyber threats where autonomous AI can conduct sophisticated raids without human involvement.
https://thenextweb.com/news/jadepuffer-agentic-ai-ransomware
-
Security firm Sysdig has documented the first ransomware attack run end to end by an AI agent. The system, named JadePuffer, used a large language model to plan, execute and adapt the entire operation from reconnaissance through to credential theft and lateral movement. The attack marks a new frontier in cyber threats where autonomous AI can conduct sophisticated raids without human involvement.
https://thenextweb.com/news/jadepuffer-agentic-ai-ransomware
-
Security firm Sysdig has documented the first ransomware attack run end to end by an AI agent. The system, named JadePuffer, used a large language model to plan, execute and adapt the entire operation from reconnaissance through to credential theft and lateral movement. The attack marks a new frontier in cyber threats where autonomous AI can conduct sophisticated raids without human involvement.
https://thenextweb.com/news/jadepuffer-agentic-ai-ransomware
-
Here is an #AiSecurity #Dataleak vector heads up for the young players.
Unless you explicitly advise your model not to reference log files in the context, it will happily piss away all your sensitive data into a public model context.
In fact, if you have ANY sensitive data on the machine you are running CLI #Ai tool, its super good idea to sanitise context by explicit, affirmation boundaries in your configuration.
With claude, that would be CLAUDE.md
-
Here is an #AiSecurity #Dataleak vector heads up for the young players.
Unless you explicitly advise your model not to reference log files in the context, it will happily piss away all your sensitive data into a public model context.
In fact, if you have ANY sensitive data on the machine you are running CLI #Ai tool, its super good idea to sanitise context by explicit, affirmation boundaries in your configuration.
With claude, that would be CLAUDE.md
-
Here is an #AiSecurity #Dataleak vector heads up for the young players.
Unless you explicitly advise your model not to reference log files in the context, it will happily piss away all your sensitive data into a public model context.
In fact, if you have ANY sensitive data on the machine you are running CLI #Ai tool, its super good idea to sanitise context by explicit, affirmation boundaries in your configuration.
With claude, that would be CLAUDE.md
-
First documented case of "agentic ransomware" — malware that uses AI agents to autonomously adapt its behavior during an attack. The shift: less scripted execution, more goal-directed decision-making. The threat model changes when malware can reason about its environment, not just execute predefined steps. Worth watching closely. #infosec #ransomware #AIsecurity
https://www.securitymagazine.com/articles/102408-researchers-discover-first-documented-case-of-agentic-ransomware -
Excited to be speaking at @wearedevelopers.bsky.social in Berlin! 🚀 Join my session, The Sound of Your Secrets: Teaching Your Model to Spy, So You Can Learn to Defend, to explore AI-powered acoustic side-channel attacks. 🔐 Details are in the comments below! #AISecurity
-
🛡️ This week in cybersecurity: AI Orchestration risks take center stage. We analyze a critical RCE in Open-Agent-Orchestrator and the emerging threat of model-based sandbox escapes. Keep your AI stack secure with our weekly breakdown. Full analysis here: https://cvedatabase.com/blog/weekly-cve-roundup-ai-orchestration-risks-and-the-shift-toward-model-based-rce-j-2026-06-14 #CVE #Cybersecurity #AISecurity #Infosec #PatchTuesday #TechNews
-
🛡️ This week in cybersecurity: AI Orchestration risks take center stage. We analyze a critical RCE in Open-Agent-Orchestrator and the emerging threat of model-based sandbox escapes. Keep your AI stack secure with our weekly breakdown. Full analysis here: https://cvedatabase.com/blog/weekly-cve-roundup-ai-orchestration-risks-and-the-shift-toward-model-based-rce-j-2026-06-14 #CVE #Cybersecurity #AISecurity #Infosec #PatchTuesday #TechNews
-
Coding-Agents dürfen lokal fast alles, was auch du darfst: nützlich, aber riskant.
Michael Krämer zeigt im neuen Blogpost, wie Docker Sandboxes (sbx) die Kontrolle out of the box liefern: MicroVM-Isolation, Dateizugriff nur aufs Projektverzeichnis, Netzwerk-Policies und ein Credential-Proxy. So läuft sogar der YOLO-Modus in der VM statt auf dem eigenen Laptop.
📖 Jetzt lesen: https://www.innoq.com/ch/blog/2026/07/trust-but-sandbox/
-
Coding-Agents dürfen lokal fast alles, was auch du darfst: nützlich, aber riskant.
Michael Krämer zeigt im neuen Blogpost, wie Docker Sandboxes (sbx) die Kontrolle out of the box liefern: MicroVM-Isolation, Dateizugriff nur aufs Projektverzeichnis, Netzwerk-Policies und ein Credential-Proxy. So läuft sogar der YOLO-Modus in der VM statt auf dem eigenen Laptop.
📖 Jetzt lesen: https://www.innoq.com/ch/blog/2026/07/trust-but-sandbox/
-
Coding-Agents dürfen lokal fast alles, was auch du darfst: nützlich, aber riskant.
Michael Krämer zeigt im neuen Blogpost, wie Docker Sandboxes (sbx) die Kontrolle out of the box liefern: MicroVM-Isolation, Dateizugriff nur aufs Projektverzeichnis, Netzwerk-Policies und ein Credential-Proxy. So läuft sogar der YOLO-Modus in der VM statt auf dem eigenen Laptop.
📖 Jetzt lesen: https://www.innoq.com/ch/blog/2026/07/trust-but-sandbox/
-
Coding-Agents dürfen lokal fast alles, was auch du darfst: nützlich, aber riskant.
Michael Krämer zeigt im neuen Blogpost, wie Docker Sandboxes (sbx) die Kontrolle out of the box liefern: MicroVM-Isolation, Dateizugriff nur aufs Projektverzeichnis, Netzwerk-Policies und ein Credential-Proxy. So läuft sogar der YOLO-Modus in der VM statt auf dem eigenen Laptop.
📖 Jetzt lesen: https://www.innoq.com/ch/blog/2026/07/trust-but-sandbox/
-
Coding-Agents dürfen lokal fast alles, was auch du darfst: nützlich, aber riskant.
Michael Krämer zeigt im neuen Blogpost, wie Docker Sandboxes (sbx) die Kontrolle out of the box liefern: MicroVM-Isolation, Dateizugriff nur aufs Projektverzeichnis, Netzwerk-Policies und ein Credential-Proxy. So läuft sogar der YOLO-Modus in der VM statt auf dem eigenen Laptop.
📖 Jetzt lesen: https://www.innoq.com/ch/blog/2026/07/trust-but-sandbox/
-
https://winbuzzer.com/2026/07/06/alibaba-reportedly-bars-claude-code-moves-staff-to-qoder-xcxwbn/
Alibaba is banning employee the use of Anthropic's Claude Code starting July 10 and shifts staff to its own Qoder platform over alleged user-identification security risks.
#AI #ClaudeCode #Alibaba #Anthropic #Claude #Qwen #AICoding #AIAgents #AISecurity #ChinaAI
-
https://winbuzzer.com/2026/07/06/alibaba-reportedly-bars-claude-code-moves-staff-to-qoder-xcxwbn/
Alibaba is banning employee the use of Anthropic's Claude Code starting July 10 and shifts staff to its own Qoder platform over alleged user-identification security risks.
#AI #ClaudeCode #Alibaba #Anthropic #Claude #Qwen #AICoding #AIAgents #AISecurity #ChinaAI
-
https://winbuzzer.com/2026/07/06/alibaba-reportedly-bars-claude-code-moves-staff-to-qoder-xcxwbn/
Alibaba is banning employee the use of Anthropic's Claude Code starting July 10 and shifts staff to its own Qoder platform over alleged user-identification security risks.
#AI #ClaudeCode #Alibaba #Anthropic #Claude #Qwen #AICoding #AIAgents #AISecurity #ChinaAI
-
https://winbuzzer.com/2026/07/06/alibaba-reportedly-bars-claude-code-moves-staff-to-qoder-xcxwbn/
Alibaba is banning employee the use of Anthropic's Claude Code starting July 10 and shifts staff to its own Qoder platform over alleged user-identification security risks.
#AI #ClaudeCode #Alibaba #Anthropic #Claude #Qwen #AICoding #AIAgents #AISecurity #ChinaAI
-
https://winbuzzer.com/2026/07/06/alibaba-reportedly-bars-claude-code-moves-staff-to-qoder-xcxwbn/
Alibaba is banning employee the use of Anthropic's Claude Code starting July 10 and shifts staff to its own Qoder platform over alleged user-identification security risks.
#AI #ClaudeCode #Alibaba #Anthropic #Claude #Qwen #AICoding #AIAgents #AISecurity #ChinaAI
-
AI-powered ransomware just automated a full attack. Patch your LLM integrations now.
#AISecurity #Ransomware -
AI-powered ransomware just automated a full attack. Patch your LLM integrations now.
#AISecurity #Ransomware -
AI-powered ransomware just automated a full attack. Patch your LLM integrations now.
#AISecurity #Ransomware -
AI-powered ransomware just automated a full attack. Patch your LLM integrations now.
#AISecurity #Ransomware -
Alibaba Bans Claude Code as Anthropic Blocks Chinese Access
Alibaba’s headquarters in Beijing, China. AP-Yonhap News Chinese e-commerce company Alibaba has issued a company-wide ban on Anthropic’s…
#EuropeSays #Korea #KR #Seoul #AIsecurity #Alibaba #AntGroup #Anthropic #ChinaAIrestrictions #ClaudeCode #distillationattack #USexportcontrols
https://www.europesays.com/korea/74191/ -
Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity
-
Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity
-
Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity
-
Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity
-
Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity
-
https://winbuzzer.com/2026/07/03/chinas-cheap-claude-tokens-run-through-proxy-markets-xcxwbn/
Chinese users are buying cheaper Claude access through unofficial proxy markets, exposing prompts to intermediaries, resulting in privacy, fraud and safety risks.
#AI #Claude #Anthropic #China #ChinaAI #AISafety #AISecurity #AIPrivacy #Cybersecurity
-
https://winbuzzer.com/2026/07/03/chinas-cheap-claude-tokens-run-through-proxy-markets-xcxwbn/
Chinese users are buying cheaper Claude access through unofficial proxy markets, exposing prompts to intermediaries, resulting in privacy, fraud and safety risks.
#AI #Claude #Anthropic #China #ChinaAI #AISafety #AISecurity #AIPrivacy #Cybersecurity
-
https://winbuzzer.com/2026/07/03/chinas-cheap-claude-tokens-run-through-proxy-markets-xcxwbn/
Chinese users are buying cheaper Claude access through unofficial proxy markets, exposing prompts to intermediaries, resulting in privacy, fraud and safety risks.
#AI #Claude #Anthropic #China #ChinaAI #AISafety #AISecurity #AIPrivacy #Cybersecurity
-
https://winbuzzer.com/2026/07/03/chinas-cheap-claude-tokens-run-through-proxy-markets-xcxwbn/
Chinese users are buying cheaper Claude access through unofficial proxy markets, exposing prompts to intermediaries, resulting in privacy, fraud and safety risks.
#AI #Claude #Anthropic #China #ChinaAI #AISafety #AISecurity #AIPrivacy #Cybersecurity
-
https://winbuzzer.com/2026/07/03/chinas-cheap-claude-tokens-run-through-proxy-markets-xcxwbn/
Chinese users are buying cheaper Claude access through unofficial proxy markets, exposing prompts to intermediaries, resulting in privacy, fraud and safety risks.
#AI #Claude #Anthropic #China #ChinaAI #AISafety #AISecurity #AIPrivacy #Cybersecurity
-
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4 -
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4 -
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4 -
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4 -
📩 Send me a message or visit shehackspurple.ca to learn more about training, workshops, and speaking opportunities.
tanya AT shehackspurple DOT ca
#SecurityAwarenessMonth #AppSec #SecureCoding #ThreatModeling #AISecurity #CyberSecurity
4/4 -
Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity
-
Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity
-
Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity
-
Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity
-
Watch this video to hear key take aways, insights, and observations from my attendance at OWASP Global AppSec EU in Vienna, Austria, 2026. #OWASP #AppSec #aisecurity
-
https://winbuzzer.com/2026/07/01/us-lifts-anthropic-fable-5-and-mythos-5-export-controls-xcxwbn/
The US has lifted export controls on Anthropic's Claude Fable 5 and Mythos 5 AI models, restoring Fable access while keeping Mythos tied to approved partners and government review.
#AI #ExportControls #Anthropic #Fable5 #Mythos5 #Claude #AIRegulation #AISecurity #AISafety #AIModels
-
https://winbuzzer.com/2026/07/01/us-lifts-anthropic-fable-5-and-mythos-5-export-controls-xcxwbn/
The US has lifted export controls on Anthropic's Claude Fable 5 and Mythos 5 AI models, restoring Fable access while keeping Mythos tied to approved partners and government review.
#AI #ExportControls #Anthropic #Fable5 #Mythos5 #Claude #AIRegulation #AISecurity #AISafety #AIModels
-
https://winbuzzer.com/2026/07/01/us-lifts-anthropic-fable-5-and-mythos-5-export-controls-xcxwbn/
The US has lifted export controls on Anthropic's Claude Fable 5 and Mythos 5 AI models, restoring Fable access while keeping Mythos tied to approved partners and government review.
#AI #ExportControls #Anthropic #Fable5 #Mythos5 #Claude #AIRegulation #AISecurity #AISafety #AIModels
-
https://winbuzzer.com/2026/07/01/us-lifts-anthropic-fable-5-and-mythos-5-export-controls-xcxwbn/
The US has lifted export controls on Anthropic's Claude Fable 5 and Mythos 5 AI models, restoring Fable access while keeping Mythos tied to approved partners and government review.
#AI #ExportControls #Anthropic #Fable5 #Mythos5 #Claude #AIRegulation #AISecurity #AISafety #AIModels
-
https://winbuzzer.com/2026/07/01/us-lifts-anthropic-fable-5-and-mythos-5-export-controls-xcxwbn/
The US has lifted export controls on Anthropic's Claude Fable 5 and Mythos 5 AI models, restoring Fable access while keeping Mythos tied to approved partners and government review.
#AI #ExportControls #Anthropic #Fable5 #Mythos5 #Claude #AIRegulation #AISecurity #AISafety #AIModels
-
AI browsers can be tricked into entering a fake reality where their safety guardrails fail. Researchers demonstrated an attack called BioShocking that bypasses security measures in browsers like ChatGPT Atlas and Claude Chrome. Once lulled into the alternate reality, all 6 AI agents tested failed to detect credential theft. https://arstechnica.com/security/2026/06/ai-browsers-can-be-lulled-into-a-dream-world-where-guardrails-no-longer-apply/ #AIagent #AI #GenAI #AISecurity
-
AI browsers can be tricked into entering a fake reality where their safety guardrails fail. Researchers demonstrated an attack called BioShocking that bypasses security measures in browsers like ChatGPT Atlas and Claude Chrome. Once lulled into the alternate reality, all 6 AI agents tested failed to detect credential theft. https://arstechnica.com/security/2026/06/ai-browsers-can-be-lulled-into-a-dream-world-where-guardrails-no-longer-apply/ #AIagent #AI #GenAI #AISecurity
-
AI browsers can be tricked into entering a fake reality where their safety guardrails fail. Researchers demonstrated an attack called BioShocking that bypasses security measures in browsers like ChatGPT Atlas and Claude Chrome. Once lulled into the alternate reality, all 6 AI agents tested failed to detect credential theft. https://arstechnica.com/security/2026/06/ai-browsers-can-be-lulled-into-a-dream-world-where-guardrails-no-longer-apply/ #AIagent #AI #GenAI #AISecurity
-
AI browsers can be tricked into entering a fake reality where their safety guardrails fail. Researchers demonstrated an attack called BioShocking that bypasses security measures in browsers like ChatGPT Atlas and Claude Chrome. Once lulled into the alternate reality, all 6 AI agents tested failed to detect credential theft. https://arstechnica.com/security/2026/06/ai-browsers-can-be-lulled-into-a-dream-world-where-guardrails-no-longer-apply/ #AIagent #AI #GenAI #AISecurity
-
AI browsers can be tricked into entering a fake reality where their safety guardrails fail. Researchers demonstrated an attack called BioShocking that bypasses security measures in browsers like ChatGPT Atlas and Claude Chrome. Once lulled into the alternate reality, all 6 AI agents tested failed to detect credential theft. https://arstechnica.com/security/2026/06/ai-browsers-can-be-lulled-into-a-dream-world-where-guardrails-no-longer-apply/ #AIagent #AI #GenAI #AISecurity
-
📰 "GuardFall" Flaw Lets Old Bash Tricks Bypass Modern AI Agent Security
New 'GuardFall' vulnerability shows how decades-old Bash tricks can fool modern AI coding agents into executing malicious commands. 🤖💥 This exposes developers to severe supply chain attacks. #AISecurity #DevSecOps #CyberSecurity #Vulnerability
🌐 cyber[.]netsecops[.]io
-
IronCurtain + GLM 5.2 found QEMU memory-corruption primitives from scratch, then almost autonomously chained the public EDU teaching device into a reproducible guest/host escape.
EDU is not production attack surface, which is why I can show the full chain. Findings in real configurations stay withheld.
What I want to highlight is that open-weight models, with orchestration and evidence gates, can now do serious vulnerability discovery and long-horizon exploit engineering.
-
IronCurtain + GLM 5.2 found QEMU memory-corruption primitives from scratch, then almost autonomously chained the public EDU teaching device into a reproducible guest/host escape.
EDU is not production attack surface, which is why I can show the full chain. Findings in real configurations stay withheld.
What I want to highlight is that open-weight models, with orchestration and evidence gates, can now do serious vulnerability discovery and long-horizon exploit engineering.