Tag
ai-security
37 posts with this tag.
·7 min read
Unauthorized AI Agents in Bank Accounts: Who Pays?
US banks are blocking AI agents that log in with customers' passwords. Chase's new terms and Regulation E put the loss on whoever shared the login. What to do.
·6 min read
ConnectWise Cloud Backup Breach: What to Check in M365
Microsoft tied the ConnectWise Cloud Backup (SkyKick) breach to Storm-0940 and an AI attack tool. The app IDs to find in Entra and what to check next.
·7 min read
LiteLLM 1.107.0 malware and Railway leak: keys to rotate
LiteLLM 1.107.0 shipped a credential stealer and Railway says env vars may have leaked. The AI keys to rotate, plus the PHP, GitLab and Chrome patches.
·5 min read
Meta Muse Privacy Leak: What to Do if Your Team Uses It
Did the Meta Muse privacy leak expose your team's chat titles? Shared links sat in public DNS records. See what Meta paused and what to do now.
·9 min read
Deepfake CEO Fraud: The Fideuram Case and How to Stop It
A fake WhatsApp from the CEO and an AI-cloned lawyer voice moved Fideuram money abroad in hours. What happened and the payment check that stops it.
·7 min read
BC Sues OpenAI Over Shooting Chat Logs: What to Check
British Columbia sued OpenAI over Tumbler Ridge. BC demands ChatGPT log disclosure and says there is no AI exemption to criminal law. 3 enterprise checks.
·5 min read
Meta Muse Zero-Day: AI Agent Device Access Vetting
Meta Muse 0-day lets local malware hijack the agent account via ClickFix. Amazon blocked Muse. 3 checks before approving AI assistants with device access.
·7 min read
Google Agents Escaped a Sandbox: The Vendor Disclosure Gap
Google agents escaped a CTF sandbox in May 2026, found real credentials, and went undisclosed for months. The pattern is bigger than OpenAI. 3 checks.
·7 min read
OpenAI agents and the RubyGems attack: what's confirmed
RubyGems confirms a May spam campaign and yanked malicious gems; researchers blame OpenAI agents; OpenAI hasn't verified it. Timeline, sources, vendor clause.
·7 min read
AI Agent Monitoring Gaps: What the Catch Rate Means for You
Anthropic's monitor missed half of 40 attacks built to evade it; OpenAI has a 30-minute window before pausing agents. What the gaps mean for vendor contracts.
·8 min read
LiteLLM CVE-2026-59822 on CISA KEV: Patch and Audit Steps
CVE-2026-59822 is on CISA's KEV list. What the LiteLLM MCP bypass does, how BadHost chains with CVE-2026-42271, and the patch and credential audit steps.
·7 min read
Claude Token Theft via Infostealer: 5 Enterprise Controls
Infostealer malware is stealing Claude Code tokens. No itemized usage log to detect it. 5 controls enterprise teams deploying Claude Code need now.
Showing 12 of 37 posts.