⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
CISA has added three vulnerabilities to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. These affect IBM Langflow, N-able N-central, and Apache Tomcat.
Google removed an AI feature from Google Earth that let users generate artificial images based on satellite data after it was widely misused for deepfakes. Researchers showed the tool could create realistic but false satellite imagery of events like refugee crises or bomb damage.
Generative AI is collapsing traditional attacker skill rankings by enabling less experienced individuals to perform sophisticated cyberattacks. Attackers use AI to summarize exploits, generate code, and adapt techniques, lowering the entry barrier and increasing the pool of capable adversaries.
This article argues that generative AI is fundamentally changing the cybersecurity landscape by lowering the barrier to entry for cyberattacks. It explains that AI tools allow less skilled attackers to perform tasks that previously required significant expertise, such as exploit development and code generation.
Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent.
Pillar Security discovered that a public GitHub issue could manipulate a triage agent in Google's Agent Development Kit repository into triggering a privileged code-fixing agent. The attacker used the bot's trusted identity to bypass authorization, achieving arbitrary code execution on the CI runner and exfiltration of credentials.