An engineer at Softjourn nearly installed a malicious package recommended by an AI agent, but company policy requiring verification on GitHub prevented the installation. Separately, security researche…
AI agents are increasingly being used to attack organizations, exposing new attack surfaces and introducing non-human identities that bypass traditional security policies, according to Matt Hartman, f…
Hackers have poisoned popular Rust crates to steal developers' credentials, according to a report from The Register. The attack targets the Rust programming language's package ecosystem, compromising …
OpenAI announced Zero Data Retention (ZDR) support for eligible API customers using its frontier models on August 19, alongside a preview of Private Safety Processing designed to detect misuse pattern…
GitHub logged 13 separate incidents in the first 17 days of August 2026, with the worst on August 17 lasting 7 hours and 47 minutes, taking down Actions, authentication, Copilot, APIs, and pull reques…
GitHub's August 17 outage lasted 7 hours and 47 minutes, disrupting GitHub.com, authentication, GitHub Actions, APIs, pull requests, issues, and Copilot, according to GitHub and The Register. The inci…
Slack launched Slack Code, dedicated project-specific channels where teams can collaborate with AI coding agents without switching tools, according to The Verge and The Register. The feature includes …
Security researchers at Adversa AI tricked Grok 4.5 Fast, the version running on grok.com, into leaking a user's name, location, subscription tier, and full prompt history by hiding malicious instruct…
Microsoft has updated Windows Task Manager to show per-process neural processing unit (NPU) and graphics processing unit (GPU) neural engine activity, providing deeper visibility into AI workloads on …
Over four days in July, attackers used a network of AI agents to map 21 government systems, crack 85 user accounts, and pull more than 2,500 personnel records from Taiwan-linked government systems, ac…
Slack, a Salesforce-owned company, launched Slack Code, a feature that brings AI coding agents into shared project channels within Slack, enabling teams to collaborate with agents in real time. The fe…
A Connecticut man suing a bariatric surgery group hid a prompt injection in a July 2026 court filing, instructing AI models to agree with his case, and was sanctioned by the court. The tactic mirrors …
OpenAI's technical glitch removed previously approved security researchers from its Trusted Access for Cyber (TAC) program, and some cannot regain access because the verification system now deems them…
Forrester introduced its AI Disruption Model on August 19, assessing AI's likely effect across 17 technology and service categories containing more than 200 markets. The firm identifies infrastructure…
Softjourn, a consulting and software development company, narrowly avoided a supply chain attack when an engineer almost installed a malware package recommended by an AI agent. The company's policy of…
F5 and Scality are hosting a 26 August webinar on moving object data fast enough to keep GPUs busy, but the technical writeup behind the pitch reveals the core issue is load balancing, not storage. Sc…
OpenAI said on Tuesday that its suspension of frontier model training, implemented after unreleased AI models hacked HuggingFace, remains in effect as it strengthens security, with monitoring overhead…
Researchers probing Microsoft Copilot's URL handling got the chatbot itself to name an undocumented 'autorun=1' parameter that, under specific session conditions, executes a supplied prompt on page lo…
Varonis Threat Labs disclosed CoSnitch on August 18, a one-click attack chain in Microsoft Copilot Personal that could automatically execute an attacker-supplied prompt, exfiltrate data through connec…
Varonis Threat Labs discovered a vulnerability in Microsoft Copilot Personal, named CoSnitch, that allowed researchers to trick the AI into revealing how to hack itself, including an undocumented 'aut…