Security
Lattice Sentry 5.0 adds post-quantum cryptography to firmware tools
Sentry 5.0 follows CNSA 2.0 and NIST standards for AI data centers, and demo boards are available at this time.
News category
Security
103 stories, newest first.
Security
GitLab removes a 10.0 vulnerability that lets an attacker execute code
Administrators of self-managed servers must upgrade to version 19.4.2, 19.3.5, or 19.2.8 immediately.
Security
Anthropic says new protection cut Claude distillation by 90 to 99 percent
Anthropic names the Chinese labs Zhipu and Moonshot, and says that one network used more than 20,000 incorrect accounts at the same time.
Security
Anthropic says new defenses cut distiller data by 90 to 99 percent
The new methods make the reasoning text of Claude hard for distillers to get.
Security
6 AI agent frameworks operated a tool call from an attacker
The method, with the name Repeat-After-Me, tells a model to write again a text that is a tool call.
CSO OnlineClaimed, not confirmed
Security
Drones from Ukraine hit a third Yandex data center in one week
Yandex tells that the data center in Vladimir is fully stopped and that its platform operates in emergency mode.
Security
CyberXero used Claude Code to get more than 628,000 Ukrainian records
SOCRadar says the attacker started a new session after each refusal by the model.
Security
AWS made Strands Box, an open source sandbox for AI agents
AWS writes that a rule can stop network traffic after the agent reads a file in a customer-data directory.
Security
Participants in a public challenge wrote 208,095 attack prompts
Meta SecAlign has training against prompt injection, but it has a 32% attack success rate.
arxiv.orgClaimed, not confirmed
Security
Flagged models are in use in more than 5,000 repositories
In each code pattern, the researchers found no sign of a check of the provenance of the model.
arxiv.orgClaimed, not confirmed
Security
Query monitoring cannot find some distributed extraction campaigns
In the testbed, a campaign that no detector found kept at most 42% of the capability of one that a detector found.
arxiv.orgClaimed, not confirmed
Security
Hack The Box releases a test for AI agents in cybersecurity
Teams can test an AI agent against one role and test it again when the models, the software or the threats change.