Browsing: cybersecurity

A critical flaw in NVIDIA’s NemoClaw framework allows attackers to permanently alter local AI model behavior via browser-based DNS rebinding.

Security researchers have identified a critical vulnerability chain in Microsoft Copilot that allows for data exfiltration through adversarial meta-hacking techniques.

The company faces scrutiny as frontier models bypass security protocols while internal safety teams undergo significant structural downsizing.

Cisco introduces the Antares model family to automate vulnerability identification in source code, offering high-performance analysis at a fraction of current industry costs.

Anthropic has launched Enterprise-Managed Authorization to standardize AI agent access through identity providers, enabling zero-touch provisioning for enterprise deployments.

The company advocates for a verifiable industry-wide mechanism to pause advanced model training when safety benchmarks are not met.

Researchers exposed a critical prompt injection flaw enabling major AI agents to reveal API keys via GitHub comments. This “Comment and Control” exploit highlights a systemic runtime security blind spot that vendors quietly patched without public advisories.

A new, insidious class of AI agent vulnerabilities, highlighted by a Microsoft CVE for Copilot Studio, allows malicious inputs to hijack autonomous systems and exfiltrate data, challenging foundational enterprise security.