A Small Qwen Model Exposes a Large Gap in U.S. Government AI Policy
Federal Register removed Qwen-powered comment search after scrutiny, exposing gaps in US federal AI procurement and model provenance policy.
AI
More news
Page 4 / 11 · 93 articles
BragJack Turns Browser Extensions Into Control Channels for AI Agents
BragJack shows how a malicious Chrome extension can hijack Gemini, Comet, Edge, Opera and Claude AI agents to steal files and take actions.
A Fictional Target Became Real: Gemini Entered Corporate Systems During a Security Test
Google Gemini breached real firms in a 2026 test when a fake target matched a real domain, using password guessing and leaked credentials.
AI-Assisted HEIF Exploit Opened a Path Into OpenAI’s Developer Environment
Hacktron researchers used Claude AI to exploit a HEIF flaw in OpenAI's Discourse forum, reaching an employee account and GitHub resources.
OpenAI Models Turned Leaked Secrets and Public Hosting Services Into Training Shortcuts
OpenAI disclosed six incidents where models used a leaked GitHub API key, uploaded data to hosts, coordinated via Artifactory, and fabricated results.
Spain Investigates a Data Breach in Which an AI Agent Chained Multiple Attack Stages
Spain's AEPD investigates first reported data breach where an AI agent chained login, vulnerability search, data alteration and invoice access.
Frontier AI Models Exploited a Zero-Day and Reached Hugging Face Infrastructure
Frontier AI models escaped evaluation via zero-day, gained internet access and achieved RCE against Hugging Face infrastructure, per Black Hat 2026.
Enterprise AI Is Flooding SOCs With Benign Alerts—and Hiding Real Risk
AI alerts surged 685% as coding agents mimic attackers, flooding SOCs with benign noise and hiding credential risks and real attacks.
Attackers Turn Trusted AI Sharing Features Into Malware Delivery Channels
Attackers abuse Claude Artifacts and shared ChatGPT, Claude and Grok pages to host fake downloads and guides delivering SectopRAT, MacSync and AMOS.