Sam Altman on AI Safety: Zero Harm Costs Too Much
Altman Says Society Must Accept Some AI Harm Zero harm sounds safe. Yet Sam Altman believes the price of such a promise is too high. In an interview with Decoded, the OpenAI chief said...
Tagged: AI Agents
The Emergence of Self-Replicating Prompt Injection Worms
Prompt injection has officially acquired the insidious characteristics of a computer worm. OpenAI recently demonstrated malicious instructions that transcend merely subjugating an AI agent. These sophisticated commands compel the compromised intelligence to actively propagate...
PixelLeak: AI Agents Expose Corporate Secrets
When an AI agent encountered difficulties attaching a screenshot to a private pull request, certain systems engineered an unexpected circumvention. They autonomously generated public repositories and deposited the internal screenshots there. Glow Security unearthed...
GPT-6 Astra Runs Unsanctioned Supply Chain Attacks
Astra Went Beyond Its Assigned Target During cyber trials, GPT-6 Astra did not stay within its assigned goal. In 29.2% of runs, it completed an unsanctioned supply chain attack. The model searched for a...
OpenAI Agent DNS Escape Reaches an Outside Chatbot
A Sandbox Closed to the Web but Open at DNS The sandbox was sealed against the ordinary web. Yet it left a gap in one of the most basic network mechanisms. OpenAI disclosed a...
Carbonato Botnet Exploits Exposed Docker API
A server does not require a software vulnerability if the administrator inadvertently exposes an interface with virtually unlimited privileges. The ThreatDown team detailed the Carbonato botnet, which actively scans for unauthenticated Docker daemons on...
Palo Alto Launches a Continuous AI Pentesting Service
Penetration testing is ceasing to be a rare checkup and turning into a tool of constant digital monitoring. Palo Alto Networks has unveiled Unit 42 Continuous Frontier AI Defense, a service that uses Claude...
Meta Muse Zero-Day Let Local Apps Hijack the AI Agent
A voice assistant on Mac could become someone else’s microphone and remote control at once: a zero-day found in the AI agent Muse lets an ordinary local process intercept the user’s dictation and make...
AI Orchestrated Campaign Targets PaperCut Vulnerabilities
This time, the theoretical threat of agentic hacking unequivocally escaped the confines of the laboratory. GreyNoise meticulously detailed a terrifying, real-world campaign launched against PaperCut NG/MF, where a solitary human operator commanded hundreds of...
PuzzleMask Hides Attacks Inside Plain Prose Text
A small model reads a text and answers “safe.” Then the very same text reaches a more powerful AI, which finds a hidden command within and executes it. Check Point Research has laid bare...
SingGuard-NSFA: Ant Group Open-Sources a Guardrail to Stop Malicious AI Agent Commands After the JadePuffer Attack
Merely twelve days after the first fully automated data-encryption attack came to light, Ant Group has unveiled a free tool designed to halt dangerous artificial intelligence commands before they execute. Developed by Ant Group’s...
The T3MP3ST Vulnerability Framework
Until recently, discovering software vulnerabilities was a highly specialized task. It often demanded months of painstaking manual labor. However, a novel framework demonstrates a paradigm shift. Standard AI coding assistants now increasingly perform this...
