AI Security
ChatGPT, Claude, AI agents and model hubs: the new attacks on AI tools and the people using them.
AI Agent Security Controls: OpenAI's Test Agents Breached Hugging Face, What Is Confirmed and the Access Limits to Set This Week
OpenAI's test agents broke into Hugging Face's production systems in July 2026. Here is what is confirmed, what is only claimed about workplace agents, and the access limits to set this week.
Enterprise AI Security Study: TCS Says 84% Value AI Productivity, Only 10% Let AI Agents Act Without Human Approval, and the Controls to Check
A TCS survey of 1,333 senior leaders says only 10% of enterprises let AI agents act without human approval across multiple functions. What is confirmed, what is interpretation, and what to check this week.
Shadow AI Security: Why IT Teams Cannot See the AI Inside Their Networks, What Is Confirmed and How to Build an Inventory
Unapproved AI tools can reach company data without IT knowing. Here is what is claimed, what IBM's breach data confirms, and how to build an AI inventory this week.
Claude Code Email Leak: AI-Written Web Requests Exposed Users' Addresses in User-Agent Headers, What Is Confirmed and What to Check
Claude Code has sometimes put the signed-in user's email address in web requests sent to other websites. Here is what is confirmed, what is not, and what businesses should check this week.
ARTEX AI Hacking Tool: What the South Korean Bank Breaches Reveal About Exposed Systems, What Is Confirmed and What to Check This Week
An open-source AI hacking tool called ARTEX was used against South Korean banks through internet-facing systems. What is confirmed, what is still claimed, and what businesses should check this week.
ARTEX GitHub Secrets Attack: Microsoft Says AI Agents Hunt Exposed OAuth Credentials, What Is Confirmed and How to Check Yours
Microsoft says attackers are using the ARTEX AI framework to find exposed secrets on GitHub and log in with them. Here is what is confirmed, what is not, and what to rotate this week.
AI Bot Traffic: Cloudflare Says AI Agents Are a Burden for Some Websites, and the Bot Settings to Check This Week
Cloudflare's CEO says some customers see AI agents as a bane to their business. Here is what is confirmed, what is still a claim, and the AI bot settings every website owner should check this week.
Claude Dispatch Vulnerability (ThisBash): A Browser Extension Can Make Claude Desktop Run Commands, No Patch Planned, and What to Check
Researchers showed a browser extension with access to claude.ai could drive Claude Desktop through Dispatch and run commands, even on another machine. Anthropic plans to retire the feature rather than patch it.
Crafty Falcon Fintech Attacks: CERT-In Warns AI-Assisted Hackers Hit Payment APIs on Weekends and Re-Attack Past Victims, and What to Check This Week
India's CERT-In says an AI-assisted group it calls Crafty Falcon gets in through exposed test systems, then uses fintechs' own payment APIs to move money. It times attacks for weekends and holidays. Here is what is confirmed and what to check.
