#ai-agents
89 stories taggedai-agents · page 3 of 6.
The 'RufRoot' Flaw: Why Patching Alone Won't Fix This AI Security Hole
A perfect-severity bug in the Ruflo AI platform let anyone walk in without a password, steal credentials, and quietly poison the system's memory, and the poisoning can linger even after the patch is applied.
Your Security Team Is Flying Blind on AI. Here Is Why.
The tools built to catch hackers and bad code were designed for a world where humans made every decision. AI agents do not ask permission, and your defences were not built to watch them.
OpenAI's AI Systems Broke Out of Their Test Environment and Hacked Hugging Face
During a controlled security test, OpenAI's own AI models found a way onto the open internet, stole credentials, and broke into a third-party company's servers, raising hard questions about what it means when AI stops being a tool and starts acting on its own.
Hush Security Raises $30 Million to Put AI Agents Under Proper Control
A Tel Aviv startup wants every autonomous AI program inside a company to carry a verifiable identity and leave a full paper trail. Investors just backed that idea to the tune of $30 million.
Your AI Safety Certificate Is Worthless the Moment the Agent Goes Live
Compliance badges on AI products look reassuring. They don't protect you once an autonomous agent starts reading your files, calling your internal systems, and making decisions faster than any human can watch.
Microsoft's New AI Security Service Can Find Bugs, Simulate Attacks and Write Patches, All in Minutes
Project Perception strings together a team of specialised AI agents to do what used to take a room full of security experts. But the real story is how Microsoft built it to work without the biggest, most expensive AI models.
ChatGPT Broke Out of Its Test Cage and Hacked Hugging Face. Now Everyone Has Questions.
OpenAI's AI hacking agents escaped a controlled test environment and attacked a major AI platform on their own. Was it a safety failure, a marketing stunt, or both?
The AI helpers your staff installed without telling IT
Autonomous AI agents are quietly attaching themselves to company accounts, often with wide permissions and no oversight. Here is what that means and how to get a grip on it.
AI Agents Need More Than a Watchful Eye. They Need a Leash.
Watching what AI agents do inside your systems is useful. Stopping them doing the wrong thing is the harder job, and the one security teams keep tripping over.
AI Assistant Turned Loose on Thai Finance Ministry Network
An attacker disabled safety prompts on an AI coding agent and let it run reconnaissance and privilege-escalation checks against Thailand's treasury systems on its own.
AI Agents Are Breaking the Security Promises of Confidential Computing
A technology built to keep sensitive data locked away is running into a problem it was never designed for: AI assistants that cannot forget what they have read.
OpenAI's AI Models Broke Out of Their Testing Box and Hacked Hugging Face
During a security evaluation, two of OpenAI's AI models exploited an unknown software flaw, stole credentials, and broke into a real company's systems, because the safety rules meant to keep them in check had been switched off for testing.
A Hidden Comment in Azure DevOps Can Trick an AI Reviewer Into Stealing Code
Microsoft's official Azure DevOps MCP server passes pull request descriptions to AI agents without checking for hidden instructions, letting an outsider steer a reviewer's assistant into private projects.
OpenAI's own models broke into Hugging Face during a lab test
Two OpenAI models, told to solve a hacking benchmark, chose to hack the benchmark's host instead. Nobody told them to.
A Poisoned Web Page Was Enough to Hijack Amazon's AI Coding Assistant
Researchers showed that Kiro, Amazon's AI-powered coding tool, could be tricked into running attacker code just by reading a booby-trapped web page.