0xBughunter

Closed models refuse to help researcher swat Linux bug

Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps | Microsoft Security Blog

Read how to apply Zero Trust for AI with new assessments, DevSecOps guidance, and practical tools to secure AI agents, code, memory, and cloud environments.

AI-found bugs aren

VulnCheck says fewer than 2% of AI-assisted vulnerability discoveries have been weaponized, casting doubt on claims frontier models are handing attackers a major advantage

Schneier on Security

Measuring LLMs' Ability to Perform Cryptanalysis - Schneier on Security

There’s new benchmark measuring AI’s ability to perform mathematical cryptanalysis. Anthropic’s frontier model actually found new attacks. The benchmark: “CryptanalysisBench: Can LLMs do Cryptanalysis?” The idea is to benchmark the ability of LLMs to discover new mathematical cryptanalytic attacks against a series of historical algorithms. Abstract: Cryptanalysis—the task of finding attacks against cryptographic schemes—its at the intersection of mathematical reasoning and cybersecurity, two are

Microsoft

MDASH stuffed with MAI-Cyber-1-Flash and a side of GPT-5.4

Schneier on Security

Adversarial Clothing Designed to Fool Facial Recognition Systems - Schneier on Security

There are many companies manufacturing adversarial clothing designed to confuse facial recognition systems. It’s a cool idea, but I worry that it’s mostly security theater: “Our patterns play with that chaos, confuse algorithms and make it way harder to pin you down,” he said. Bell, however, said “none of these products are tried and tested, and a lot of these surveillance technologies can deal with a little resistance … [but] even if the designs don’t necessarily work perfectly, fashion is also

How a global investment firm reduced security surprises

Organization also surprised by ease of deployment and effectiveness of continuous validation.

Cybersecurity and Infrastructure Security Agency CISA

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

CISA has added two new vulnerabilities to its KEV Catalog, based on evidence of active exploitation.

Stop depending on heroics and start operationalizing third-party risk

When security enters the purchasing timeline too late, everyone loses.

Certighost haunts Microsoft Active Directory Certificate Services

The Certighost vulnerability exploits a little-known AD CS fallback mechanism to trick certificate authorities into issuing trusted credentials.

Headteacher had the most guessable username-password combo you could imagine

Schools often don

Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge

Researchers say an unauthenticated vulnerability enables code execution, credential theft, AI memory poisoning, and persistent compromise.

Schneier on Security

Long-Lived Vulnerability in Microsoft Secure Boot - Schneier on Security

Microsoft’s Secure Boot has had a serious vulnerability for most of its existence. An industry-wide standard Microsoft invented to protect Windows, and later Linux, devices from firmware infections has been trivial to bypass for 13 of its 14 years of existence. The discovery was made by researchers at security firm ESET after identifying 11 firmware images, at least one from 2013, that were known to be defective but remained signed by the software company anyway. The images are known as shims, w

Are we human?

CISA unveils a six-step blueprint for isolating critical infrastructure during cyberattacks

A new guide from CISA and allied cybersecurity agencies says organizations should build dedicated isolation points into operational technology to contain attacks and continue delivering essential services.

Schneier on Security

Cognyte Sells a Mobile Cell Surveillance Van - Schneier on Security

Yet another Israeli mass surveillance company: Made by Israeli surveillance company Cognyte, the tech simulates a mobile phone tower, which forces nearby phones to connect to it. That enables cops to keep tabs on any phones in the vicinity ­ whether they’re owned by a suspect in a case or not. Cognyte’s contract with the state of Texas reveals that the simulator, called FalcoNet, can be concealed within the vehicles, hidden in a backpack for on-foot missions or attached to a helicopter. It’s the

After OpenAI, Anthropic finds Claude breached three organizations during cyber tests

Anthropic says a review triggered by OpenAI’s recent disclosure found three real-world intrusions caused by a misconfigured AI testing environment.

AI is making cybersecurity fundamentals more important than ever

As AI increasingly accelerates and individualizes cyberattacks, cracks in security leaders’ foundational defensive strategies are only becoming easier to find.

Cybersecurity and Infrastructure Security Agency CISA

CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs | CISA

AI agents gain access to financial workflows amid growing governance gaps

A Pathlock report found that 53% of organizations cannot fully verify what AI agents do across business systems, even as they gain authority over finance, HR, procurement, and supply chain workflows.

How to detect OAuth client ID spoofing in Microsoft Entra ID before account takeover

Two campaigns created 4M+ fake identities to enumerate Microsoft Entra ID accounts — without logins. Learn how to detect the behavior, not the threat.

Schneier on Security

More on the OpenAI Agent's Attack on Hugging Face - Schneier on Security

Hugging Face has published a detailed timeline of the attack. From the summary: The agent was running an internal OpenAI cyber-capability evaluation based on the ExploitGym benchmark, which tasks an AI agent with finding and exploiting software vulnerabilities. OpenAI ran this on its own infrastructure, and the ExploitGym maintainers and their infrastructure had no involvement in the deployment or operation of that evaluation environment. As far as we were able to infer, across the course of bei

Are we human?

Schneier on Security

Axon Is Another License Plate Surveillance Company - Schneier on Security

Governments are switching, but I’m not sure it makes a difference: …some municipalities, including Denver, Colorado, are ditching their Flock arrays. But keep in mind that if they’re only switching from Flock to another brand of license-plate readers, like Axon, it’s like a gambling addict trying to kick the habit by switching from FanDuel to DraftKings. […] Despite what you may read on the Flock website, Axon cameras are pretty effective when it comes to hoovering up personal details that can g

From Input to Impact: Secure AI Where It Runs | SentinelOne

Defend the entire AI agentic stack across endpoints, identities, cloud, and apps with SentinelOne's unified platform.

Feds get 3 days to patch N-able God mode flaw under active exploit

Experts warn hotfix not optional. MSPs warned attacker gains

Iran-linked CyberAv3ngers suspected in attacks on Minnesota water systems

More than 30 facilities disrupted in

For Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a Startup

Decades after it appeared in “The Terminator,” Skynet looks more like a forecast of the incident when a rogue AI system hacked into another AI company on its own.

Are we human?

Zero Networks puts a wall behind existing AI guardrails

The company has introduced a capability that applies OWASP’s emerging Least Agency principle by using identity and network-level controls to contain compromised AI agents.

Risk-based patching is the future. AI made it table stakes

AI changed the game. Smart security isn't about patching everything — it's about stopping the attack paths that matter most.

N-able God mode flaw: Vendor confirms attackers reached customer networks as second hotfix lands

Attackers turned admin access into a route downstream, while N-able tells N-central customers to patch – again

Cybersecurity and Infrastructure Security Agency CISA

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

Schneier on Security

Some Claude Chats Are Searchable on Google - Schneier on Security

And it’s personal information (alternate link): The exposed data includes an AI-powered therapy app that someone appears to have vibe-coded, notes on meetings, and a dashboard someone made apparently to analyze medical billing data. Exposed chats reportedly include private cryptocurrency wallet keys and personal information like peoples’ addresses. What seems to be the issue is a user setting about data sharing. Anthropic’s position is that it’s not their problem: “We give people control over sh

Are we human?

Google dev kit spurs first-ever agent-on-agent violence

Poisoned pull requests contain prompt injection that allows one to control another

Are we human?

Are we human?

​​Better security starts with better questions | Microsoft Security Blog

Learn how better questions, trusted AI, and human judgment help security leaders make confident decisions and build resilient systems.

Practical lessons from deploying AI securely at scale

The biggest challenges weren’t prompt injection or model vulnerabilities. They emerged after the AI already had permission to act.

Infoblox joins crowded EASM market with DNS-centric approach

The company is combining DNS expertise with external attack surface management and supply chain intelligence to help organizations identify exploitable internet-facing assets before attackers do.

Schneier on Security

Iran Cyberattacks Against Minnesota Water Systems - Schneier on Security

Attribution is preliminary, and so far it seems no real damage. And it seems like this is a campaign that has targeted at least seven states. And, because this is where the US is right now, Trump doesn’t believe it’s Iran and thinks Minnesota…I guess…hacked itself. “I think I blame it on Minnesota because they’re grossly incompetent,” Trump said. “I would blame it on Minnesota and the governor, the corrupt governor of Minnesota. They like to say, ‘Oh, it’s Iran.’ Iran should be so lucky. Iran’s

Schneier on Security

Measuring the Tendency of AI Agents to Go Rogue - Schneier on Security

This essay was written with Barath Raghavan, and originally appeared in The Guardian. In July, Hugging Face, a company that hosts much of the world’s AI software and open-source AI models, was hacked. A malicious dataset had been used to run code on one of its servers. Whoever was behind it captured internal security credentials and moved through systems over a weekend, running thousands of actions from a swarm of temporary server environments. It looked like the work of a sophisticated criminal

Security leaders’ rogue AI confidence could actually be disastrous

IT and security leaders believe they can detect when an AI agent malfunctions or operates out of scope, but few can quickly trace and contain the cascading impact.

Cybersecurity and Infrastructure Security Agency CISA

CISA Adds Three Known Exploited Vulnerabilities to Catalog | CISA

Fortinet’s new FortiGate platform converges firewall, SASE technologies

Fortinet has expanded its firewall family with new high-speed boxes that, when combined with the vendor’s FortiSASE Outpost software, extend cloud-based SASE (secure access service edge) capabilities and policy enforcement to customer-controlled environments, such as on-premises sites, private data centers, or colocation facilities.

Enhancing AI security through global AI red teaming | Microsoft Security Blog

Microsoft's External Red Team Alliance (EXTRA) is a global AI security initiative designed to advance AI safety research and red teaming. By partnering with universities, researchers, and regional experts, EXTRA helps identify emerging AI risks, improve security testing, and strengthen the resilience of frontier AI systems.