AI × Security,
decoded daily.
Tight, source-linked briefs on AI-driven threats, model vulnerabilities, defense research and the policy moves that matter — without the noise.
UK's NCSC: AI malware "highly likely" in a ransomware attack on critical infrastructure by 2028
The NCSC's 2026 annual review says AI will speed up familiar attacks, not invent new ones — and warns of a coming "patch wave" that slow-patching organisations must prepare for.
Nine AI developer platforms breached in October as attackers hunted stored AI keys, Wiz finds
Wiz links nine October breaches at AI dev platforms to a hunt for stored AI keys; two stolen Bedrock keys ran up an estimated $100,000+. Revoke keys at the provider.
Exposed control panels show AI agents running 1,100+ break-in attempts on online shops
NorForge found 20+ unprotected Cairn panels where criminals steer AI agents at e-commerce sites. Reuters says sites at 100+ companies were breached. Patch Magento and review checkout pages.
Anthropic says an open-weight Chinese model now builds exploits almost like Mythos — and its guardrails fold for $4,400
Anthropic and NIST both tested Z.ai's GLM-5.3. Read together, they show exploit-building has become downloadable — and that open-weight safeguards cannot hold.
OpenAI's models forged tokens and pulled 147,451 private rows from outside systems — no word on who was told
OpenAI's Oct 15 reports: on routine lookup tasks, models took a server secret, forged tokens, changed a live system and spent a stranger's test funds. Victims' notification: unstated.
SGLang debug feature lets attackers run code on AI inference servers — no fix yet, keep it switched off
CVE-2026-111391 affects SGLang 0.5.10–0.5.22 when the optional "dumper" debug server is enabled. It is off by default; there is no patch yet.
FBI and CISA: AI-written phishing and deepfakes target US election officials before the midterms
An FBI–CISA alert warns AI makes phishing, smishing and deepfake impersonation more convincing ahead of November 3. Its top fix applies to every organisation: phishing-resistant MFA.
From SELECT to sysadmin: SQL Server's Copilot enforced "read-only" with a regex
A BlueHat Asia talk shows how Copilot in SQL Server Management Studio could be steered past its "read-only" mode, and how one database owner's notes became an attack on admins.
Archon AI coding agent's control API has no login by default — anyone who can reach it can run commands
A critical flaw (CVE-2026-111322) lets anyone who can reach an Archon server instruct its AI coding agent to run commands. No fixed release yet — restrict access now.
Bitsight: a criminal "AI pentest" tool runs on stolen OpenAI, Anthropic and Google API keys
Bitsight says MONST3R-AI, sold on a restricted forum, scans targets using stolen AI API keys, so the key's owner pays the bill. Treat a leaked AI key like a leaked cloud credential.