Salt Labs, the research arm of Salt Security, discovered a now-fixed vulnerability in agentic AI platform Manus that let a single malicious email hijack an AI agent and potentially reach a user's conn…
Exabeam unveiled a broad set of updates on October 1 designed to push its "Agentic SOC" into both cloud and on-premises deployments while keeping human analysts in the loop, according to IT Security G…
Threat actors are abusing ChatGPT's Custom GPT feature to deliver a remote access trojan (RAT) through an eight-stage ClickFix chain, according to new research from Huntress. The attackers created a C…
Salt Security expanded its Agentic Security Platform with native AI Detection and Response (AI-DR) capabilities that link attacks on large language models to subsequent activity across MCP servers, to…
AI agents are moving from experimentation into everyday business operations, and their ability to access systems, process information, communicate with applications and complete tasks autonomously int…
Research from KnowBe4 ThreatLabs demonstrated how an AI assistant embedded in workplace email systems can be hijacked by an email the user never reads, creating an attack surface that does not rely on…
Salt Security expanded its integration with CrowdStrike to give security teams visibility into how AI agents connect to enterprise systems, use APIs and exercise their permissions. The expanded partne…
Two in five organisations — 40% — experienced an AI-related compliance or governance failure in the past 12 months, according to new research from process automation firm Camunda. The study found proc…
Security teams should manage AI agents with the same identity discipline applied to human users rather than banning them, according to IT Security Guru, which outlined six ways to reduce non-human ins…
Anthropic CEO Dario Amodei published a weekend essay, "We Must Pace the Frontier," on Saturday, and co-founder Jack Clark followed days later by suggesting AI "kill switches" may need to become mandat…
Anthropic disclosed a fourth incident in which a Claude model breached genuine third-party systems during a contained cybersecurity evaluation, an episode the company said dates back to January 2026 a…
AI agents embedded across business operations are creating a new category of insider risk, according to IT Security Guru, because non-human identities can act at machine speed, operate continuously an…
The UK's National Cyber Security Centre (NCSC) warned that 'shadow AI'—the use of unapproved AI tools by employees—is creating new security blind spots for UK businesses, according to guidance publish…
Black Duck, a provider of AI-powered application security solutions, has joined Anthropic's Project Glasswing, an industry-wide initiative to protect critical software infrastructure through defensive…
Check Point Software Technologies announced it is integrating OpenAI's Daybreak frontier AI models across its security platform to accelerate threat validation and remediation, building on a partnersh…
OpenSSL reports that AI-driven vulnerability discovery has increased its monthly security reports from nine to about 70 in a year, raising concerns about funding for the security teams expected to add…
Viasat has used an AI-assisted platform from Atalanta to test whether its satellite communications links can meet operational thresholds under interference and adversarial jamming, announced this mont…
Black Duck has launched its Signal vulnerability scanning engine as an MCP server in the Claude Directory, enabling developers using Anthropic's Claude Desktop to scan code for security flaws without …
Forescout's Vedere Labs research demonstrated that AI can lower barriers to developing sophisticated cyberattacks against industrial systems, specifically testing whether AI can adapt a remote code ex…
IT Security Guru reports that when choosing an AI threat hunting solution in 2026, investigation quality is not the most important metric, despite being the focus of most vendor marketing. The article…