Security
6 lines of log text give a guardrail a fail-open rate of 63%
Because a deterministic rule was 100% correct on all 6 policies, the model is not necessary.
arxiv.orgClaimed, not confirmed
News category
Security
32 stories, newest first.
Security
An OpenAI agent had unauthorised access to a Medicare portal
The government was told of the access in September.
Security
Anthropic started free AI scans for open-source vulnerabilities
A model writes each report and no person examines it, and Anthropic writes that some reports can be incorrect.
Security
Microsoft makes MXC available to limit the files an AI agent can use
A developer can select the Locked Down level to stop an agent from the use of the internet and files.
Security
Incognia started a fraud check for AI agents
Incognia writes that a legitimate agent does not show that the customer wants the task.
Security
A worm was found in Tensorlake SDK version 0.5.144
Researchers say a user must disable the token monitor of the worm before the user revokes tokens.
Security
Goodfire says its monitor for AI agents costs $51 for 1,500 sessions
In tests, the monitor found 94% of malicious hacking sessions but sent 8.7% of safe sessions for a check.
Security
A new Claude Code session sent data out with no confirmation
The confirmation is on one path, and the attack used a different path to the same result.
straiker.aiClaimed, not confirmed
Security
Cogent made a tool to find attack paths to the data of a company
Cogent tells that its study found 3 new attack paths for AI agents for each 1 for human attackers.
Security
An attacker got an ASOS employee login and then customer data
ASOS tells that the attacker did not get payment information.
Security
One chat message gave Zenity control of all AgentCore agents
AWS made changes for part of the problem, and Zenity tells companies to give each agent a role with only the access it must have.
the-decoder.comClaimed, not confirmed
Security
The first AWS patch for AgentCore agents did not remove the risk
AWS corrected the default permissions of the agents between June 22 and September 29, Zenity wrote.
www.csoonline.comClaimed, not confirmed