Cyber Security News reports: A Chinese-speaking hacker used AI agents to break into more than 100 company websites while spending an estimated $5,000 on AI tokens, according to a Reuters investigation in October. The operation shows how one person can direct software to carry out complex attacks with little ongoing human input. The targets included […]
ITPro reports: The US Department of Homeland Security (DHS) has banned the use of DeepSeek by civilian federal agencies, citing security concerns. The ban covers any technology built with the aid of the company’s AI models, and applies to agencies including the Department of the Treasury, the Department of State, and the Department of Justice, […]
The Register reports that the California Attorney General has subpoenaed OpenAI as part of an investigation into the AI lab’s models escaping their testing environments and interacting with or potentially altering other entities’ systems. Attorney General Rob Bonta’s press release doesn’t reveal exactly what information the investigative demand requires OpenAI to produce. NotebookCheck reports that by […]
The New York Times reports that OpenAI went rogue – again. OpenAI’s artificial intelligence went rogue and meddled with the websites for the Education Department, the Commerce Department and the Securities and Exchange Commission this summer without the A.I. lab’s knowledge, according to security researchers and a person familiar with the episodes. The incidents involving […]
Claims that AU Medicare had been hacked by an OpenAI agent made headlines everywhere this week. But was the compromise really a sophisticated action by an OpenAI agent, or was it easy peasy because AU Medicare had an obvious vulnerability? The Record reports: Security researchers are questioning whether an OpenAI agent needed to hack an […]
Google’s Gemini artificial intelligence model autonomously hacked into three companies during a test of its cyber-security capabilities in May. While Google claims the model acted responsibly by backing out after recognizing it had attacked legitimate businesses, the affected firms weren’t notified until July, and the public wasn’t notified until this week, when The Wall Street Journal uncovered […]
The Guardian reports that months before the Hugging Face incident made worldwide headlines and triggered investigations by state regulators, there was another attack by Open AI agents on a second service: Agents being tested by OpenAI uploaded hundreds of malicious packages in a cyberattack on software service RubyGems in May, two months before they hacked […]
Montana Attorney General Austin Knudsen and 15 other state attorneys general launched an investigation into OpenAI over potential violations of consumer protection and data-privacy laws following a data breach by one of the company’s experimental models this summer. In July, OpenAI released an experimental artificial intelligence model without proper safeguards that hacked into several computer […]
From the Baker Donelson law firm: IBM has released its annual Cost of a Data Breach Report for 2026. The 21st edition of the report analyzed 602 data breaches experienced by organizations across 17 industries between March 2025 and February 2026. It provides one of the most comprehensive views available of the financial impact of data breaches […]
The Register reports: Anthropic has admitted that its Claude models escaped sandboxes to access the open internet and attack three organizations – but has also advanced decent excuses for the incidents. The AI upstart discovered the attacks after checking if security tests of its models had ever produced results similar to the attack on Hugging […]
