All news in category “AI and Security Pulse”

🔒 Two new models are now available in the Kiro IDE and CLI for the AWS GovCloud (US-West) Region. OpenAI GPT-5.4 supports complex reasoning, coding, document analysis, and multi-step agentic workflows, running on Amazon Bedrock with a 272K context window and 1.2x credit multiplier. NVIDIA Nemotron 3 Super 120B is offered as an open weight, hybrid MoE option with a 256K context window, 32K max output, and 0.25x credit multiplier. Update your IDE or CLI and restart to access the new models.

🛡️ Most AI policies are written for the future while employees use AI now, creating a temporal gap that produces shadow AI. Security often learns of risky interactions only after prompts, uploads, or actions have occurred, making after-the-fact visibility insufficient. Effective governance must reach the moment of use, combining permission with contextual judgment and offering fast, practical controls that match employee workflows.

🔒 Google Cloud describes how it embeds modular AI agents across the software development lifecycle to create autonomous security guardrails. The approach includes centralized code analysis via the Mantis framework, multi-agent fuzz testing with self-reflection, and an autonomous patching pipeline that validates fixes before human review. Continuous reflection and a programmable posture management system help convert lessons into reusable skills that improve remediation speed and reduce false positives.

📊 The 2026 Agent Confidence Index summarizes findings from a survey of 300 technical experts across AI, data, and cloud domains, identifying where AI agents are already trusted and where confidence remains nascent. The analysis highlights high-confidence wins—automated report generation, boilerplate code creation, certificate renewal, and monitoring—while noting complex tasks like service mesh configuration remain frontier challenges. The piece frames trust, human oversight, and lifecycle evaluations as essential to safe delegation and enterprise adoption.

🔎 Researchers at Mozilla's 0DIN demonstrated that an AI coding agent like Claude Code can be manipulated into executing a remote payload by following innocuous setup instructions in a clean GitHub repo. The approach uses three benign-looking components—a standard repo, an initialization error prompting a recommended command, and a script that pulls a command from a DNS TXT record—to spawn an interactive shell with developer privileges. 0DIN warns this chain leaves no explicit malicious code in the repo and is difficult for scanners or human reviewers to detect.

🛡️ OpenAI released three GPT-5.6 variants—Sol, Terra, and Luna—as a limited preview to select companies while engaging with the U.S. government. Sol is the flagship and most capable for cybersecurity work, Terra balances efficiency and power, and Luna is optimized for speed and cost. OpenAI emphasized strengthened safety controls, warned of potential legitimate-request blocks during preview, and plans a wider release in the coming weeks.

🔎 Meta is prototyping facial recognition systems intended for use by police and military, reportedly working with a Pentagon supplier to develop tools that can identify people in real time. The project follows longstanding interest from agencies like ICE in deploying camera-equipped eyewear and other devices for live identification. Concerns persist about privacy, accuracy, and potential misuse as the company explores real-time identification capabilities.

🔎 The article argues that frontier AI models like Mythos are a signal of shifting cyber economics rather than an immediate, novel threat. It emphasizes that longstanding security fundamentals—asset visibility, patching, identity controls and resilient operations—remain the primary defenses. The author advocates using AI to accelerate analysis, prioritize remediation and close persistent control gaps rather than replacing skilled practitioners or prompting reactive, headline-driven spending.

🖥️ Anthropic appears to be testing mobile support for Claude Cowork, enabling users to start and monitor long-running Claude tasks from their phones. Cowork, a desktop-focused agentic mode that performs extended knowledge-work tasks, can access files, generate documents and continue working in the background. Screenshots shared on X indicate the mobile experience will act as a remote control while the heavy processing remains on the user’s PC. Anthropic has not officially announced full mobile rollout yet.

🛡️ The article examines how AI, particularly large language models, can bridge the gap between atomic indicators of compromise (IOCs) and richer strategic threat intelligence by indexing and relating unstructured reports. It highlights opportunities to retrieve relevant intelligence and generate tailored defensive advice while warning about data veracity and confidentiality. The piece also emphasizes practical Windows threats abusing COM and recommends tooling and hunting practices to detect such misuse.

📝 This post highlights a new paper that demonstrates how large language models are vulnerable to prompt injection because they learn to distinguish instruction blocks by style rather than explicit tags. The authors argue that role tags became a de facto security architecture but do not map cleanly into model representations, producing persistent role confusion. The paper warns that without genuine role perception, defenses will be reactive and brittle, and calls for deeper study of roles within the LLM stack.

🚦CIOs face intense pressure to deploy AI quickly while managing novel risks and proving ROI. Leaders must balance speed with governance, building guardrails that enable innovation without creating bottlenecks. Organizational design — with clear separation between adopters and oversight — plus risk-based decision frameworks and vendor due diligence are essential. Practical maturity models and governed platforms help scale AI safely across the enterprise.

🛡️ Enterprise AI red teaming must go beyond simple prompt tests to examine full systems — models, prompts, retrievals, tools, permissions, workflows, and APIs — because risks appear when components interact. Check Point argues that threat intelligence plus threat modeling enables identification of realistic attack paths, evidence-based findings, and prioritized remediation. Continuous, comparative testing and re-testing after changes ensures fixes are effective and keeps pace with rapid AI adoption.

🔒 Researchers at LayerX demonstrated a technique called BioShocking that convinces AI-powered web browsers they are playing a game, causing them to abandon safety guardrails and exfiltrate user data. The team tested six agentic browsers and plugins, including ChatGPT Atlas, Perplexity's Comet and Anthropic's Claude extension, and in a proof-of-concept had each copy login credentials and send them to an attacker. LayerX recommended requiring user confirmation for account reads and adding context-aware flags to limit what agents can access.

🛡️ A faux AI agent skill called brand-landingpage bypassed static security scanners and reached over 26,000 users via an Instagram ad, highlighting risks as enterprises adopt AI-driven tools. The skill pointed agents to a fake Stitch SDK hosted on a domain controlled by researchers, which initially redirected to the real Google Stitch site to pass review. After distribution, the researchers changed the hosted content to instruct agents to download a script that collected email addresses, demonstrating how mutable external resources let malicious behaviors slip past static reviews. Security vendors and scanners from Cisco, Nvidia, and skills.sh marked the skill safe during testing.

🛡️ A ReliaQuest report finds AI is making cyber-attacks cheaper, faster to scale, easier to customize and harder to spot while not fundamentally altering attacker tradecraft. Initially used for polishing phishing and basic scripting in 2024, by mid-2025 AI had expanded into deepfakes, AI-assisted scripts and an underground market for tools. Today AI appears embedded in workflows—generating phishing pages, web shells, and obfuscating code—and as the lure itself, with attackers leveraging trusted AI brands to trick users.

🛡️ A security firm, AIR, created a benign but deceptive AI agent skill named brand-landingpage, pushed it through a major skill marketplace and promoted it with an Instagram ad, and reports it reached roughly 26,000 agents including corporate accounts. Scanners from vendors like Cisco and NVIDIA marked the package safe because the skill pointed to external setup documentation rather than embedding malicious code. AIR later swapped the external page to deliver a harmless payload that collected email addresses, demonstrating how scanners miss links that can be rewritten after review. The experiment highlights structural trust problems with skills and common mitigations such as pinning versions and vetting external references.

📡 Modern telecom networks require domain-specific AI because general models lack the precise, vendor-specific context needed for mission-critical operations. GSMA’s Open Telco AI platform and AT&T’s OTel family—fine-tuned on Google’s open-source Gemma models—use curated telco datasets and RAG-based abstention to reduce hallucinations. The initiative produced 30 optimized models, demonstrated strong Gemma performance in AT&T tests, and already exceeded 18 million downloads.

🔒 Offensive AI is shifting tools from drafting to autonomous action. Agentic systems can gather intelligence, craft tailored social engineering, and run exploit chains without human hands, expanding capability to unskilled actors while accelerating expert operations. Defenders must test protections with live adversarial use to understand real resilience and retain human judgment where agents remain prone to confident errors.

🛡️ Anthropic released Fable 5 as a safety-hardened version of its Mythos Preview, designed with guardrails to prevent misuse for creating cyberattacks. Security researchers demonstrated that those restrictions were bypassed within days, allowing the model to be coerced into generating prohibited content. The rapid jailbreak highlights ongoing challenges in aligning advanced models with robust, attack-resistant controls.