» Tag
cybersecurity
57 postsEnd-to-End Encryption and the 'Going Dark' Debate
A new paper explores end-to-end encryption and its implications for law enforcement and cybersecurity.
Autonomous AI Intrusions: Lessons from the Hugging Face Incident
Hugging Face revealed an intrusion by an autonomous AI agent. What does this mean for engineers?
Tombstone Reanimation: A BloodHound Attack Path Overview
Explore tombstone reanimation as a BloodHound attack path. Learn how to enumerate deleted objects and who can restore them.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comMicrosoft's GDID Tracker: No Off Switch in Windows 11
Microsoft's GDID tracker in Windows 11 monitors user identities, raising privacy concerns.
Cybersecurity Startup Published Infostealers to NPM
Seven NPM packages typosquatting Anthropic, OpenAI, LangChain and Vercel used postinstall scripts to exfiltrate git, SSH and cloud identity data. The publisher traces back to an Israeli security startup founder.
Investigating Three Real-World Incidents in Cybersecurity Evaluations
Details on three incidents involving the Claude model's unauthorized access during cybersecurity evaluations.
OpenAI's GPT-Red: A Super Hacker LLM for Enhanced Model Security
OpenAI's GPT-Red is a super-hacker LLM that automates security testing, enhancing model defenses against cyber threats.
Prismata: Defending Web Agents Against Prompt Injection Attacks
Prismata introduces a new defense mechanism using dynamic trust labeling and content restriction to protect web agents from cross-site prompt injection attacks.
OpenAI Launches Patch the Planet for Open Source Security
OpenAI and Trail of Bits unveiled Patch the Planet, pairing AI-driven vulnerability discovery in open source with mandatory human expert review before patches ship.
Defensive AI Coding Agents Hijacked via Prompt Injection for RCE
A PoC exploit shows how prompt injections in third-party code hijack Claude Code and Codex CLI to achieve remote code execution during defensive review.