<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>AISECP Radar — unreviewed</title><description>Machine-filtered AI security sources. Classified by software, not reviewed, and carrying no evidence grade. For graded analysis see the reports feed at /rss.xml.</description><link>https://aisecp.com</link><language>en-us</language><lastBuildDate>Fri, 16 Oct 2026 00:33:08 GMT</lastBuildDate><ttl>60</ttl><item><title>AI-Powered Espionage Campaign Targets Government Linux Infrastructure</title><link>https://unit42.paloaltonetworks.com/ai-campaign-targets-linux-infrastructure</link><guid isPermaLink="true">https://unit42.paloaltonetworks.com/ai-campaign-targets-linux-infrastructure</guid><description>[AI in cybersecurity] Unit 42. Matched because: Incident report; AI-powered espionage attack on infrastructure</description><pubDate>Thu, 15 Oct 2026 22:00:09 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Unit 42</category></item><item><title>Frontier-Level Red-Teaming From a Self-Hostable Open-Weight Model: Testing NVIDIA Nemotron 3.5 Super</title><link>https://orca.security/resources/blog/frontier-level-red-teaming-from-a-self-hostable-open-weight-model-testing-nvidia-nemotron-3-5-super</link><guid isPermaLink="true">https://orca.security/resources/blog/frontier-level-red-teaming-from-a-self-hostable-open-weight-model-testing-nvidia-nemotron-3-5-super</guid><description>[Securing AI] Orca Security. Matched because: Original research on AI attack surfaces; AI agents as attack vectors in security context</description><pubDate>Thu, 15 Oct 2026 15:15:00 GMT</pubDate><category>SECURING_AI</category><category>Orca Security</category></item><item><title>VulnBump: Can AI Agents Fix Vulnerable Dependencies Without Breaking the Build?</title><link>https://snyk.io/blog/vulnbump</link><guid isPermaLink="true">https://snyk.io/blog/vulnbump</guid><description>[AI in cybersecurity] Snyk. Matched because: Original research on AI-driven dependency fixing; AI used defensively to secure software supply chains</description><pubDate>Thu, 15 Oct 2026 04:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Snyk</category></item><item><title>What Cybersecurity Leaders Must Prioritize in 2027</title><link>https://www.huntress.com/blog/what-does-the-future-hold-for-todays-cybersecurity-leaders</link><guid isPermaLink="true">https://www.huntress.com/blog/what-does-the-future-hold-for-todays-cybersecurity-leaders</guid><description>[AI in cybersecurity] Huntress. Matched because: Strategic analysis; AI-powered attacks are central to the security story</description><pubDate>Wed, 14 Oct 2026 16:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Huntress</category></item><item><title>Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)</title><link>https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution</link><guid isPermaLink="true">https://embracethered.com/blog/posts/2026/visual-studio-copilot-remote-code-execution</guid><description>[AI in cybersecurity] Embrace The Red. Matched because: Vulnerability disclosure; AI (Copilot) is attack vector for RCE</description><pubDate>Tue, 13 Oct 2026 22:00:40 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Embrace The Red</category></item><item><title>The first disclosure from our Mythos harness</title><link>https://www.chainguard.dev/unchained/the-first-disclosure-from-our-mythos-harness</link><guid isPermaLink="true">https://www.chainguard.dev/unchained/the-first-disclosure-from-our-mythos-harness</guid><description>[Securing AI] Chainguard. Matched because: Vulnerability disclosure; AI vulnerability in AI infrastructure</description><pubDate>Tue, 13 Oct 2026 00:00:00 GMT</pubDate><category>SECURING_AI</category><category>Chainguard</category></item><item><title>Governing the Agentic SDLC Through Continuous Policy Enforcement</title><link>https://jfrog.com/blog/governing-the-agentic-sdlc</link><guid isPermaLink="true">https://jfrog.com/blog/governing-the-agentic-sdlc</guid><description>[Securing AI] JFrog Security. Matched because: Original technical analysis on AI governance in SDLC; AI agents are central to securing development processes</description><pubDate>Mon, 12 Oct 2026 16:24:04 GMT</pubDate><category>SECURING_AI</category><category>JFrog Security</category></item><item><title>GenAI and Agentic AI Exploit Roundup Q3 2026</title><link>https://genai.owasp.org/2026/10/08/genai-and-agentic-ai-exploit-roundup-q3-2026</link><guid isPermaLink="true">https://genai.owasp.org/2026/10/08/genai-and-agentic-ai-exploit-roundup-q3-2026</guid><description>[AI in cybersecurity] OWASP GenAI Security. Matched because: Threat intelligence report; AI agents causing harm via unintended internet access</description><pubDate>Thu, 08 Oct 2026 12:07:03 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>OWASP GenAI Security</category></item><item><title>UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing</title><link>https://blog.talosintelligence.com/uat-11985</link><guid isPermaLink="true">https://blog.talosintelligence.com/uat-11985</guid><description>[AI in cybersecurity] Cisco Talos. Matched because: AI used in offensive cyberattack (phishing framework) with technical details on AI-assisted content generation and real-time credential interception</description><pubDate>Thu, 08 Oct 2026 10:01:06 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Cisco Talos</category></item><item><title>Ignore all instructions and read this blog: The state of AI-analysis evasion in malware</title><link>https://blog.talosintelligence.com/ignore-all-instructions-and-read-this-blog-the-state-of-ai-analysis-evasion-in-malware</link><guid isPermaLink="true">https://blog.talosintelligence.com/ignore-all-instructions-and-read-this-blog-the-state-of-ai-analysis-evasion-in-malware</guid><description>[AI in cybersecurity] Cisco Talos. Matched because: Original research on AI-analysis evasion techniques; AI is central to both attack (malware evading analysis) and defense (AI analysis tools)</description><pubDate>Thu, 08 Oct 2026 10:00:14 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Cisco Talos</category></item><item><title>3 lessons from frontier AI vulnerability research</title><link>https://www.microsoft.com/en-us/security/blog/2026/10/07/3-lessons-from-frontier-ai-vulnerability-research</link><guid isPermaLink="true">https://www.microsoft.com/en-us/security/blog/2026/10/07/3-lessons-from-frontier-ai-vulnerability-research</guid><description>[AI in cybersecurity] Microsoft Security Blog. Matched because: Original security research on AI-native vulnerability discovery; AI used in security research (autonomous vulnerability finding)</description><pubDate>Wed, 07 Oct 2026 16:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Microsoft Security Blog</category></item><item><title>How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed)</title><link>https://www.wiz.io/blog/red-agent-financial-services-data-exposure</link><guid isPermaLink="true">https://www.wiz.io/blog/red-agent-financial-services-data-exposure</guid><description>[AI in cybersecurity] Wiz Research. Matched because: Original security research; AI tool (Red Agent) used in defensive security operations</description><pubDate>Wed, 07 Oct 2026 14:53:27 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Wiz Research</category></item><item><title>One breach, please, and make no mistakes</title><link>https://blog.talosintelligence.com/one-breach-please-and-make-no-mistakes</link><guid isPermaLink="true">https://blog.talosintelligence.com/one-breach-please-and-make-no-mistakes</guid><description>[AI in cybersecurity] Cisco Talos. Matched because: AI agents executing cyber attacks are central to the security threat discussed</description><pubDate>Wed, 07 Oct 2026 10:00:25 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Cisco Talos</category></item><item><title>Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance</title><link>https://www.crowdstrike.com/en-us/blog/unknown-threat-actor-uses-artex-to-target-south-korean-finance</link><guid isPermaLink="true">https://www.crowdstrike.com/en-us/blog/unknown-threat-actor-uses-artex-to-target-south-korean-finance</guid><description>[AI in cybersecurity] CrowdStrike. Matched because: Threat report; AI used offensively in attack</description><pubDate>Wed, 07 Oct 2026 05:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>CrowdStrike</category></item><item><title>Frontier models found the vulnerabilities. Only the attacker found the chains.</title><link>https://snyk.io/blog/frontier-models-vulnerabilities-attacker-chains</link><guid isPermaLink="true">https://snyk.io/blog/frontier-models-vulnerabilities-attacker-chains</guid><description>[AI in cybersecurity] Snyk. Matched because: Original security research on AI model vulnerability discovery; AI models used to find and chain vulnerabilities into breaches</description><pubDate>Wed, 07 Oct 2026 04:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Snyk</category></item><item><title>OpenAI “rogue” agent activities found on Wikimedia projects</title><link>https://simonwillison.net/2026/Oct/7/openai-rogue-agents-wikimedia</link><guid isPermaLink="true">https://simonwillison.net/2026/Oct/7/openai-rogue-agents-wikimedia</guid><description>[AI in cybersecurity] Simon Willison. Matched because: Original security research on rogue AI agents; AI used offensively in unauthorized bot activities</description><pubDate>Wed, 07 Oct 2026 00:16:45 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Simon Willison</category></item><item><title>Securing Agent-to-Agent Communication: The Next Identity Frontier</title><link>https://www.rapid7.com/blog/post/ai-securing-agent-to-agent-communication-next-identity-frontier</link><guid isPermaLink="true">https://www.rapid7.com/blog/post/ai-securing-agent-to-agent-communication-next-identity-frontier</guid><description>[Securing AI] Rapid7. Matched because: Original research on AI agent security; AI central to securing agent-to-agent communication challenges</description><pubDate>Tue, 06 Oct 2026 14:11:03 GMT</pubDate><category>SECURING_AI</category><category>Rapid7</category></item><item><title>Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers</title><link>https://www.crowdstrike.com/en-us/blog/how-attackers-can-bypass-llm-safety-classifiers</link><guid isPermaLink="true">https://www.crowdstrike.com/en-us/blog/how-attackers-can-bypass-llm-safety-classifiers</guid><description>[Securing AI] CrowdStrike. Matched because: Technical analysis of evasion techniques; LLM safety classifiers are core to securing AI systems</description><pubDate>Tue, 06 Oct 2026 05:00:00 GMT</pubDate><category>SECURING_AI</category><category>CrowdStrike</category></item><item><title>Another Historic Cipher Falls to AI</title><link>https://www.schneier.com/blog/archives/2026/10/another-historic-cipher-falls-to-ai.html</link><guid isPermaLink="true">https://www.schneier.com/blog/archives/2026/10/another-historic-cipher-falls-to-ai.html</guid><description>[AI in cybersecurity] Schneier on Security. Matched because: Original research on AI breaking historic cipher; AI used to break cryptographic system</description><pubDate>Mon, 05 Oct 2026 11:04:47 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Schneier on Security</category></item><item><title>Huntress Tragic Quadrant: Top Cyber Threats Wrecking Businesses</title><link>https://www.huntress.com/blog/huntress-tragic-quadrant-cyber-threats</link><guid isPermaLink="true">https://www.huntress.com/blog/huntress-tragic-quadrant-cyber-threats</guid><description>[AI in cybersecurity] Huntress. Matched because: Threat ranking report; AiTM is AI-driven cyber threat</description><pubDate>Thu, 01 Oct 2026 13:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Huntress</category></item><item><title>Why AI Coding Agents Keep Writing Broken Access Control</title><link>https://snyk.io/blog/ai-coding-agents-broken-access-control</link><guid isPermaLink="true">https://snyk.io/blog/ai-coding-agents-broken-access-control</guid><description>[Securing AI] Snyk. Matched because: Original research on AI-generated security flaws; AI coding agents causing broken access control in security systems</description><pubDate>Thu, 01 Oct 2026 04:00:00 GMT</pubDate><category>SECURING_AI</category><category>Snyk</category></item><item><title>From SELECT to SYSADMIN with SQL Copilot (CVE-2026-65669)</title><link>https://embracethered.com/blog/posts/2026/from-select-to-sysadmin-sql-copilot-bluehat-asia</link><guid isPermaLink="true">https://embracethered.com/blog/posts/2026/from-select-to-sysadmin-sql-copilot-bluehat-asia</guid><description>[Securing AI] Embrace The Red. Matched because: Vulnerability disclosure; AI tool (SQL Copilot) is the system under attack</description><pubDate>Wed, 30 Sep 2026 21:00:40 GMT</pubDate><category>SECURING_AI</category><category>Embrace The Red</category></item><item><title>What Is Agentic AppSec?</title><link>https://snyk.io/blog/what-is-agentic-appsec</link><guid isPermaLink="true">https://snyk.io/blog/what-is-agentic-appsec</guid><description>[Securing AI] Snyk. Matched because: Technical explainer; AI agents used in application security defense</description><pubDate>Wed, 30 Sep 2026 04:00:00 GMT</pubDate><category>SECURING_AI</category><category>Snyk</category></item><item><title>The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub</title><link>https://www.wiz.io/blog/blue-agent-data-exfiltration-investigation</link><guid isPermaLink="true">https://www.wiz.io/blog/blue-agent-data-exfiltration-investigation</guid><description>[AI in cybersecurity] Wiz Research. Matched because: Original investigation report; AI agent used to investigate cyber attacks</description><pubDate>Tue, 29 Sep 2026 12:42:40 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Wiz Research</category></item><item><title>Building Agents Backwards from Evaluation</title><link>https://www.sentinelone.com/blog/building-agents-backwards-from-evaluation</link><guid isPermaLink="true">https://www.sentinelone.com/blog/building-agents-backwards-from-evaluation</guid><description>[AI in cybersecurity] SentinelOne. Matched because: Original research on evaluating agentic systems; AI central to security analysis of SOC tools</description><pubDate>Tue, 29 Sep 2026 00:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>SentinelOne</category></item><item><title>Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix</title><link>https://www.huntress.com/blog/chatgpt-custom-gpts-clickfix-rat</link><guid isPermaLink="true">https://www.huntress.com/blog/chatgpt-custom-gpts-clickfix-rat</guid><description>[AI in cybersecurity] Huntress. Matched because: Original security research; AI used in attack vector (ChatGPT GPTs delivering malware)</description><pubDate>Mon, 28 Sep 2026 20:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Huntress</category></item><item><title>How we found 24 Android vulnerabilities using our open source AI security agent</title><link>https://github.blog/security/how-we-found-24-android-vulnerabilities-using-our-open-source-ai-security-agent</link><guid isPermaLink="true">https://github.blog/security/how-we-found-24-android-vulnerabilities-using-our-open-source-ai-security-agent</guid><description>[Securing AI] GitHub Security Lab. Matched because: Original research on AI-driven vulnerability discovery; AI used as security tool to find Android vulnerabilities</description><pubDate>Mon, 28 Sep 2026 19:00:00 GMT</pubDate><category>SECURING_AI</category><category>GitHub Security Lab</category></item><item><title>Athena&apos;s disclosures begin</title><link>https://www.chainguard.dev/unchained/athenas-disclosures-begin</link><guid isPermaLink="true">https://www.chainguard.dev/unchained/athenas-disclosures-begin</guid><description>[AI in cybersecurity] Chainguard. Matched because: Vulnerability disclosure with original AI findings; AI used in vulnerability discovery</description><pubDate>Mon, 28 Sep 2026 00:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Chainguard</category></item><item><title>The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments</title><link>https://www.wiz.io/blog/infostealer-incursion-cloud-ai-credentials</link><guid isPermaLink="true">https://www.wiz.io/blog/infostealer-incursion-cloud-ai-credentials</guid><description>[Securing AI] Wiz Research. Matched because: AI environments targeted by credential theft, breach material to security story</description><pubDate>Fri, 25 Sep 2026 14:51:15 GMT</pubDate><category>SECURING_AI</category><category>Wiz Research</category></item><item><title>AI-powered fuzzing with the GitHub Security Lab Taskflow Agent</title><link>https://github.blog/security/application-security/ai-powered-fuzzing-with-the-github-security-lab-taskflow-agent</link><guid isPermaLink="true">https://github.blog/security/application-security/ai-powered-fuzzing-with-the-github-security-lab-taskflow-agent</guid><description>[AI in cybersecurity] GitHub Security Lab. Matched because: Original technical findings on AI-driven fuzzing pipeline; AI used in defensive security process for vulnerability discovery</description><pubDate>Thu, 24 Sep 2026 18:26:12 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>GitHub Security Lab</category></item><item><title>The Closed Quorum: Inside the first reported autonomous AI C2 implant</title><link>https://blog.talosintelligence.com/the-closed-quorum-inside-the-first-reported-autonomous-ai-c2-implant</link><guid isPermaLink="true">https://blog.talosintelligence.com/the-closed-quorum-inside-the-first-reported-autonomous-ai-c2-implant</guid><description>[AI in cybersecurity] Cisco Talos. Matched because: Original security research on AI-driven malware; AI enables autonomous C2 in offensive operations</description><pubDate>Tue, 22 Sep 2026 10:00:58 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Cisco Talos</category></item><item><title>Introducing CAIRN: Frontier tracking for AI-integrated malware</title><link>https://blog.talosintelligence.com/introducing-cairn-frontier-tracking-for-ai-integrated-malware</link><guid isPermaLink="true">https://blog.talosintelligence.com/introducing-cairn-frontier-tracking-for-ai-integrated-malware</guid><description>[AI in cybersecurity] Cisco Talos. Matched because: Original research on AI malware detection methodology; AI artifacts in attack vectors and defense mechanisms</description><pubDate>Tue, 22 Sep 2026 10:00:25 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Cisco Talos</category></item><item><title>Auditing in the age of (good enough) AI</title><link>https://blog.trailofbits.com/2026/09/18/auditing-in-the-age-of-good-enough-ai</link><guid isPermaLink="true">https://blog.trailofbits.com/2026/09/18/auditing-in-the-age-of-good-enough-ai</guid><description>[AI in cybersecurity] Trail of Bits. Matched because: Original security research on AI-assisted audit tools; AI used to find zero-knowledge VM vulnerabilities</description><pubDate>Fri, 18 Sep 2026 11:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Trail of Bits</category></item><item><title>A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity</title><link>https://unit42.paloaltonetworks.com/securing-aws-agentcore-harness-credentials</link><guid isPermaLink="true">https://unit42.paloaltonetworks.com/securing-aws-agentcore-harness-credentials</guid><description>[Securing AI] Unit 42. Matched because: Original security research on AI agent vulnerabilities; Prompt injection in AI infrastructure security</description><pubDate>Fri, 18 Sep 2026 10:00:36 GMT</pubDate><category>SECURING_AI</category><category>Unit 42</category></item><item><title>Building an AI Detection Engine That Understands Agent Intent</title><link>https://www.wiz.io/blog/building-an-ai-detection-engine-for-agent-intent</link><guid isPermaLink="true">https://www.wiz.io/blog/building-an-ai-detection-engine-for-agent-intent</guid><description>[Securing AI] Wiz Research. Matched because: Original research on AI detection engine; AI agents&apos; malicious intent in security context</description><pubDate>Thu, 17 Sep 2026 14:04:47 GMT</pubDate><category>SECURING_AI</category><category>Wiz Research</category></item><item><title>Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin&apos;s AI use</title><link>https://blog.talosintelligence.com/ransomware-incidents-in-japan-in-the-first-half-of-2026</link><guid isPermaLink="true">https://blog.talosintelligence.com/ransomware-incidents-in-japan-in-the-first-half-of-2026</guid><description>[AI in cybersecurity] Cisco Talos. Matched because: Original security research on ransomware groups; AI used offensively by Qilin in cyber operations</description><pubDate>Thu, 17 Sep 2026 10:00:43 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Cisco Talos</category></item><item><title>1Password&apos;s AI patching benchmark is misleading</title><link>https://blog.trailofbits.com/2026/09/15/1passwords-ai-patching-benchmark-is-misleading</link><guid isPermaLink="true">https://blog.trailofbits.com/2026/09/15/1passwords-ai-patching-benchmark-is-misleading</guid><description>[AI in cybersecurity] Trail of Bits. Matched because: Original research on AI patching flaws; Critiques AI&apos;s role in vulnerability remediation</description><pubDate>Tue, 15 Sep 2026 11:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Trail of Bits</category></item><item><title>Why the SOC Can&apos;t Run on Vibes</title><link>https://www.sentinelone.com/blog/why-the-soc-cant-run-on-vibes</link><guid isPermaLink="true">https://www.sentinelone.com/blog/why-the-soc-cant-run-on-vibes</guid><description>[Securing AI] SentinelOne. Matched because: Original research on AI safety bypass; AI security of models under attack</description><pubDate>Tue, 15 Sep 2026 00:00:00 GMT</pubDate><category>SECURING_AI</category><category>SentinelOne</category></item><item><title>Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection</title><link>https://unit42.paloaltonetworks.com/behavioral-clustering-map-to-cloud-identities</link><guid isPermaLink="true">https://unit42.paloaltonetworks.com/behavioral-clustering-map-to-cloud-identities</guid><description>[AI in cybersecurity] Unit 42. Matched because: Original technical research on behavioral clustering model; AI-driven threat detection method in cybersecurity</description><pubDate>Mon, 14 Sep 2026 10:00:01 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Unit 42</category></item><item><title>GuardBreaker: Derailing AI-assisted malware analysis with a code comment</title><link>https://www.welivesecurity.com/en/business-security/guardbreaker-derailing-ai-assisted-malware-analysis-code-comment</link><guid isPermaLink="true">https://www.welivesecurity.com/en/business-security/guardbreaker-derailing-ai-assisted-malware-analysis-code-comment</guid><description>[AI in cybersecurity] ESET WeLiveSecurity. Matched because: Original research on evading AI analysis; AI used offensively to bypass security tools</description><pubDate>Thu, 10 Sep 2026 09:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>ESET WeLiveSecurity</category></item><item><title>Is prevention essentially a solved problem?</title><link>https://snyk.io/blog/is-prevention-solved</link><guid isPermaLink="true">https://snyk.io/blog/is-prevention-solved</guid><description>[Securing AI] Snyk. Matched because: Technical explainer; AI in securing code generation controls</description><pubDate>Thu, 10 Sep 2026 04:00:00 GMT</pubDate><category>SECURING_AI</category><category>Snyk</category></item><item><title>Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise</title><link>https://www.wiz.io/blog/off-guard-breaking-litellm-from-authentication-bypass-to-cloud-compromise</link><guid isPermaLink="true">https://www.wiz.io/blog/off-guard-breaking-litellm-from-authentication-bypass-to-cloud-compromise</guid><description>[Securing AI] Wiz Research. Matched because: Original security research on AI infrastructure vulnerabilities; SECURING_AI - cloud AI infrastructure exposed through authentication bypass and IAM theft</description><pubDate>Wed, 09 Sep 2026 16:06:00 GMT</pubDate><category>SECURING_AI</category><category>Wiz Research</category></item><item><title>A “proof” of Fermat’s Last Theorem that fits the margin</title><link>https://blog.trailofbits.com/2026/09/09/a-proof-of-fermats-last-theorem-that-fits-the-margin</link><guid isPermaLink="true">https://blog.trailofbits.com/2026/09/09/a-proof-of-fermats-last-theorem-that-fits-the-margin</guid><description>[AI in cybersecurity] Trail of Bits. Matched because: Vulnerability disclosure in Lean; AI used in code review process to discover bug</description><pubDate>Wed, 09 Sep 2026 11:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Trail of Bits</category></item><item><title>Attackers Expose Ongoing AI Tool Use Targeting Organizations in Latin America</title><link>https://unit42.paloaltonetworks.com/ai-tool-use-targeting-latam-orgs</link><guid isPermaLink="true">https://unit42.paloaltonetworks.com/ai-tool-use-targeting-latam-orgs</guid><description>[AI in cybersecurity] Unit 42. Matched because: Threat intelligence report; AI used in offensive operations (data exfiltration)</description><pubDate>Thu, 03 Sep 2026 10:00:58 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Unit 42</category></item><item><title>Inside Knight Office, a New M365 AiTM Phishing Kit</title><link>https://www.huntress.com/blog/inside-knight-office-m365-aitm-attack</link><guid isPermaLink="true">https://www.huntress.com/blog/inside-knight-office-m365-aitm-attack</guid><description>[AI in cybersecurity] Huntress. Matched because: Original security research on AI-driven phishing kit; AI (AiTM) is central to the attack method</description><pubDate>Wed, 02 Sep 2026 13:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Huntress</category></item><item><title>Every Release Needs a Chain of Custody. AI Agents Just Made That Harder.</title><link>https://jfrog.com/blog/prompt-to-release-traceability</link><guid isPermaLink="true">https://jfrog.com/blog/prompt-to-release-traceability</guid><description>[Securing AI] JFrog Security. Matched because: Technical analysis of compliance risks from AI agents; AI agents directly impact audit trails and regulatory compliance</description><pubDate>Wed, 02 Sep 2026 11:56:45 GMT</pubDate><category>SECURING_AI</category><category>JFrog Security</category></item><item><title>DevGovOps: How the AI Era Dictates That Governance Lives Inside the Pipeline</title><link>https://jfrog.com/blog/devgovops-to-prove-compliance</link><guid isPermaLink="true">https://jfrog.com/blog/devgovops-to-prove-compliance</guid><description>[Securing AI] JFrog Security. Matched because: Technical explainer on AI governance; AI central to security story about governance in DevOps pipelines</description><pubDate>Wed, 02 Sep 2026 11:56:10 GMT</pubDate><category>SECURING_AI</category><category>JFrog Security</category></item><item><title>An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation</title><link>https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation</link><guid isPermaLink="true">https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation</guid><description>[AI in cybersecurity] Unit 42. Matched because: Original incident report on AI-driven attack; AI used offensively in breach</description><pubDate>Wed, 02 Sep 2026 10:00:46 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Unit 42</category></item><item><title>VMs won&apos;t contain cyber-capable agents</title><link>https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents</link><guid isPermaLink="true">https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents</guid><description>[AI in cybersecurity] Trail of Bits. Matched because: Original research on agent sandbox escape; AI used offensively to escape VMs</description><pubDate>Wed, 26 Aug 2026 11:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Trail of Bits</category></item><item><title>How we use /goal to find bugs in Patch the Planet</title><link>https://blog.trailofbits.com/2026/07/28/how-we-use-goal-to-find-bugs-in-patch-the-planet</link><guid isPermaLink="true">https://blog.trailofbits.com/2026/07/28/how-we-use-goal-to-find-bugs-in-patch-the-planet</guid><description>[AI in cybersecurity] Trail of Bits. Matched because: Original security research on AI-assisted bug hunting; AI (Codex) used to find vulnerabilities in open-source software</description><pubDate>Tue, 28 Jul 2026 11:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Trail of Bits</category></item><item><title>GPT-5.5-Cyber built a zlib fuzzing lab in a day</title><link>https://blog.trailofbits.com/2026/07/02/field-reports-from-patch-the-planet</link><guid isPermaLink="true">https://blog.trailofbits.com/2026/07/02/field-reports-from-patch-the-planet</guid><description>[AI in cybersecurity] Trail of Bits. Matched because: Original research on AI-driven vulnerability discovery; AI used to find security bugs in zlib</description><pubDate>Thu, 02 Jul 2026 11:00:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Trail of Bits</category></item><item><title>Introducing Patch the Planet</title><link>https://blog.trailofbits.com/2026/06/22/introducing-patch-the-planet</link><guid isPermaLink="true">https://blog.trailofbits.com/2026/06/22/introducing-patch-the-planet</guid><description>[AI in cybersecurity] Trail of Bits. Matched because: Original research on AI-driven vulnerability discovery; AI used to find security flaws in open-source projects</description><pubDate>Mon, 22 Jun 2026 16:50:00 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>Trail of Bits</category></item><item><title>The sorry state of skill distribution</title><link>https://blog.trailofbits.com/2026/06/03/the-sorry-state-of-skill-distribution</link><guid isPermaLink="true">https://blog.trailofbits.com/2026/06/03/the-sorry-state-of-skill-distribution</guid><description>[Securing AI] Trail of Bits. Matched because: AI skills are central to the security story; malicious skills attack agentic systems, scanners defend them; Original research on scanner evasion techniques</description><pubDate>Wed, 03 Jun 2026 11:00:00 GMT</pubDate><category>SECURING_AI</category><category>Trail of Bits</category></item><item><title>AI threats in the wild: The current state of prompt injections on the web</title><link>http://security.googleblog.com/2026/04/ai-threats-in-wild-current-state-of.html</link><guid isPermaLink="true">http://security.googleblog.com/2026/04/ai-threats-in-wild-current-state-of.html</guid><description>[Securing AI] Google Security Blog. Matched because: AI is central to the security story about prompt injection vulnerabilities in AI systems</description><pubDate>Thu, 23 Apr 2026 21:38:00 GMT</pubDate><category>SECURING_AI</category><category>Google Security Blog</category></item><item><title>Google Workspace’s continuous approach to mitigating indirect prompt injections</title><link>http://security.googleblog.com/2026/04/google-workspaces-continuous-approach.html</link><guid isPermaLink="true">http://security.googleblog.com/2026/04/google-workspaces-continuous-approach.html</guid><description>[Securing AI] Google Security Blog. Matched because: Technical explainer; AI system security against prompt injection</description><pubDate>Thu, 02 Apr 2026 16:00:00 GMT</pubDate><category>SECURING_AI</category><category>Google Security Blog</category></item><item><title>From AIxCC to OpenSSF: Welcoming OSS-CRS to Advance AI Driven Open Source Security</title><link>https://openssf.org/blog/2026/04/02/from-aixcc-to-openssf-welcoming-oss-crs-to-advance-ai-driven-open-source-security</link><guid isPermaLink="true">https://openssf.org/blog/2026/04/02/from-aixcc-to-openssf-welcoming-oss-crs-to-advance-ai-driven-open-source-security</guid><description>[AI in cybersecurity] OpenSSF AI Security. Matched because: Original findings on CRS frameworks; AI systems finding and patching bugs</description><pubDate>Thu, 02 Apr 2026 14:45:26 GMT</pubDate><category>AI_IN_CYBERSECURITY</category><category>OpenSSF AI Security</category></item><item><title>Architecting Security for Agentic Capabilities in Chrome</title><link>http://security.googleblog.com/2025/12/architecting-security-for-agentic.html</link><guid isPermaLink="true">http://security.googleblog.com/2025/12/architecting-security-for-agentic.html</guid><description>[Securing AI] Google Security Blog. Matched because: Technical explainer on agentic security; Securing AI systems against prompt injection</description><pubDate>Mon, 08 Dec 2025 18:03:00 GMT</pubDate><category>SECURING_AI</category><category>Google Security Blog</category></item><item><title>Mitigating prompt injection attacks with a layered defense strategy</title><link>http://security.googleblog.com/2025/06/mitigating-prompt-injection-attacks.html</link><guid isPermaLink="true">http://security.googleblog.com/2025/06/mitigating-prompt-injection-attacks.html</guid><description>[Securing AI] Google Security Blog. Matched because: Original security research on prompt injection mitigation; AI is the target of attack vectors</description><pubDate>Fri, 13 Jun 2025 16:03:00 GMT</pubDate><category>SECURING_AI</category><category>Google Security Blog</category></item></channel></rss>