AI Security — Page 20

AI-Written Apps Are Shipping With Hundreds of Security Holes, Study Finds
A new analysis counted 434 exploitable flaws across apps built with AI coding tools, raising hard questions about who checks the work when the developer is a machine.

Glow Raises $180 Million to Build an AI-Powered Security Guard for Your Computer
A new startup has launched at a $1.2 billion valuation, promising to use artificial intelligence to block threats on office computers before they cause damage.

AI Is Compressing the Cybersecurity Timeline. Security Teams Are Racing to Keep Up.
Artificial intelligence is speeding up both attack and defence at the same time. The organisations that survive the shift may not be the best-defended. They may simply be the fastest to act.

A Hidden Comment in Azure DevOps Can Trick an AI Reviewer Into Stealing Code
Microsoft's official Azure DevOps MCP server passes pull request descriptions to AI agents without checking for hidden instructions, letting an outsider steer a reviewer's assistant into private projects.

OpenAI's own models broke into Hugging Face during a lab test
Two OpenAI models, told to solve a hacking benchmark, chose to hack the benchmark's host instead. Nobody told them to.

AI Security Scanners Are Drowning Teams in False Alarms, and the Fix Isn't More AI
More than 60% of flagged security flaws are noise. A researcher who tested over a dozen tools says AI models make the problem worse because they lack the context to tell a real threat from a ghost.

A Criminal Sold AI-Powered Hacking as a Service. Here Is How He Built It.
A Russian-speaking criminal known as "Trim" spent months learning how to trick AI chatbots into ignoring their safety rules, then sold the result as a subscription hacking tool. Security researchers say others are already copying the blueprint.

Cisco Builds Cheaper AI Tools to Hunt Security Flaws in Software Code
The company's new Antares models scan source code for known vulnerabilities at a fraction of what larger AI systems cost. Here is what that means for businesses that write or buy software.

Google DeepMind Unveils Gemini 3.5 Flash Cyber, an AI That Hunts and Patches Software Bugs
The new model, offered only to governments and vetted partners through CodeMender, aims to spot flaws in code and write fixes on its own.

A Poisoned Web Page Was Enough to Hijack Amazon's AI Coding Assistant
Researchers showed that Kiro, Amazon's AI-powered coding tool, could be tricked into running attacker code just by reading a booby-trapped web page.

AI Coding Tools Carry Real Security Risks, and the Danger Depends on What You're Building With
A new study tested 16 major AI coding assistants and found an average of 15 security flaws per project. The safest choice for one type of software can be one of the worst for another.

Empirical Raises $25 Million to Predict Cyber Attacks Before They Happen
A Chicago startup says its AI tools can spot which security flaws are most likely to be exploited next. Investors just bet $25 million that it's right.

Invisible Text on an Android Screen Can Hijack AI Phone Assistants, and Then the PC Behind Them
Researchers show how a rogue Android app can whisper hidden orders to open-source AI agents, then pivot the attack onto the computer running the show.

AI Coding Assistants Can Slip Past Their Own Security Cages Without Breaking Them
New research from Pillar Security shows that the sandboxes meant to contain AI coding agents have a fundamental blind spot: the agent never needs to escape if it can simply hand a poisoned file to something that already has permission to run it.

Code Red Turns 25: The Worm That Still Has Things to Teach Us
A worm that tore across the internet in 2001 exposed a visibility blind spot that organisations keep walking into. The rush to deploy AI tools is the latest version of the same mistake.