All news in category “AI and Security Pulse”

🛡️ Google says it now relies heavily on Gemini AI to detect and block malicious ads across its advertising platforms, reporting 8.3 billion ads blocked or removed and 24.9 million advertiser account suspensions in 2025, including 602 million scam-related ads. Gemini analyzes billions of signals—beyond simple keywords—such as advertiser behavior, account history, campaign patterns, and intent to identify threats. The company reports faster processing of user reports and an 80% reduction in incorrect advertiser suspensions, and it plans to extend Gemini-driven, submission-time reviews to more ad formats.

🛡️At VirusTotal we are integrating reputation and Code Insight directly into AI agent decision loops so agents can consult verdicts and context as part of their runtime behavior. Two community plugins, VT-sentinel (OpenClaw) and hermes-virustotal (Hermes), demonstrate the approach using the new VTAI API with compact responses and per-agent identities. Both MIT-licensed projects scan files, annotate hashes, and provide configurable privacy and enforcement presets so agents can quarantine, block, or proceed based on risk appetite.

🔊 A new platform called ATHR automates telephone-oriented attacks by combining AI voice agents and optional human operators to carry out vishing campaigns and harvest credentials across services including Google, Microsoft, and major crypto platforms. Researchers at Abnormal say ATHR bundles email templates, spoofing, WebRTC/Asterisk routing, and per-target customization into a dashboard that controls distribution, calls, and logging. The service is marketed on underground forums for $4,000 plus a commission and greatly lowers the skill barrier for attackers.

🛡️ Vendors increasingly market "AI SOCs" that promise autonomous triage, investigation, and response, but in production many solutions primarily accelerate triage by summarizing alerts, enriching events, and recommending next steps rather than completing remediation. The toughest operational challenges stem from fragmented work across tools, tickets, identity, endpoint, and cloud systems. Real impact requires embedding AI inside deterministic, auditable workflows that execute end‑to‑end and keep humans in the loop for judgment and accountability.

🔒 Advances in AI are accelerating vulnerability discovery and compressing the window between disclosure and exploitation. Francis deSouza explains why organizations must rapidly harden code, lock down CI/CD and build systems, and automate remediation to avoid being overwhelmed by machine-speed attacks. The article advocates integrating defensive AI—agentic SecOps, continuous asset discovery, and Google Cloud Model Armor—while securing AI agents using frameworks like SAIF to prevent prompt injection and data leakage.

🚀 Claude Opus 4.7 is now available in Amazon Bedrock, delivering Anthropic’s most capable Opus release with improvements across coding, professional knowledge work, visual understanding, and long-running task handling. Served via Bedrock’s next-generation inference engine, Opus 4.7 offers enterprise features such as zero operator data access, dynamic traffic routing, and improved scalability. The model enhances agentic coding, systems engineering, long-horizon reasoning, and high-resolution image support, and is available in select AWS Regions.

🔍VulnCheck's analysis indicates Anthropic's controlled-access Project Glasswing has only one publicly attributable CVE: CVE-2026-4747, a FreeBSD NFS remote code execution flaw described as autonomously identified and exploited. Researcher Patrick Garrity reviewed the CVE database and found 75 records mentioning Anthropic, but only 40 credited to its researchers and a single CVE tied explicitly to Glasswing. Industry observers warn that public attribution may understate the model's potential, and Anthropic plans a fuller accounting by July 2026.

🤖 A new laboratory experiment examines how humans respond when pitted against LLMs in a multi-player p-beauty contest versus other humans. Using a within-subject, monetarily-incentivised design, the study finds participants choose significantly lower numbers when playing against LLMs, with a marked increase in selections of the zero Nash-equilibrium. The effect concentrates among participants with strong strategic-reasoning ability, who report perceived AI reasoning and an unexpected expectation of cooperation as motivating factors.

🔐 CrowdStrike has been selected for OpenAI's Trusted Access for Cyber (TAC) program and will integrate the frontier model GPT-5.4-Cyber into its platform. Its multi-model AgentWorks framework enables defenders to choose the best model for each task while applying enterprise-grade governance and real-world threat intelligence. Falcon sensors provide runtime visibility across endpoints, governing AI agents where they execute and helping organizations meet emerging regulatory requirements such as the EU AI Act.

🔒 Smashing Security episode 463 examines two incidents that expose operational and AI security weaknesses: a claimed intrusion into Venice’s flood‑defence pump controls and an accidental full‑source disclosure by Anthropic. Hosts Graham Cluley and Tanya Janca discuss the physical risks of compromised legacy OT systems, how packaging/CI misconfigurations can leak high‑value IP and attack surface, and the governance challenges of powerful internal tools like Mythos. They recommend stronger CI/CD defaults, strict access controls for model assets, and reliable out‑of‑band incident communications.

🧑‍🦯 Be My Eyes and its Be My AI feature can help visually impaired users identify on-screen content and even flag phishing attempts, but they are not infallible. In tests, the AI identified fake login pages and suspicious emails, yet risks such as hallucinations and prompt-injection remain. Treat AI output as a first-pass check, avoid sharing confidential details with unknown volunteers, install trusted security software and use a password manager, and prefer apps that process sensitive documents locally when possible.

🔍 AI changes the assumptions behind incident response: outputs are non-deterministic, harmful content can be produced at machine speed, and root causes often emerge from interactions among training data, fine-tuning, retrieval, and user context rather than a single code defect. The familiar principles of explicit ownership, containment before investigation, psychologically safe escalation, and clear communication still apply, but teams must expand taxonomies and severity frameworks to capture AI-specific harms. Closing gaps in observability, reconciling privacy defaults with forensic needs, and adopting staged remediation—stop the bleed, fan out and strengthen, and fix at the source—are critical, as is protecting responder wellbeing during prolonged incidents.

🔒 OpenAI has released GPT-5.4-Cyber, a variant of GPT-5.4 fine-tuned to assist cybersecurity tasks and defensive workflows. The company expanded its Trusted Access for Cyber (TAC) program with tiered verification so vetted defenders can access models with lowered refusal boundaries for legitimate security work. Access is currently limited to vetted vendors, organisations and researchers while OpenAI carefully studies benefits and risks. The release is positioned to embed advanced coding and agentic capabilities into secure development practices.

🤖 Agent Lee is an in-dashboard AI assistant that understands your Cloudflare account and can troubleshoot, visualize, and modify resources on demand. Built on Cloudflare primitives like Workers, Durable Objects, and the Agents SDK, it uses a TypeScript Codemode to generate server-side calls that run through a sandboxed MCP proxy. Write operations require explicit user approval via an elicitation gate, and the beta — serving ~18,000 daily users and ~250k tool calls per day — is available now.

🔒 Organizations must treat AI as part of their core architecture rather than a separate stack. Effective protection extends existing controls — identity, policy enforcement, observability, and data governance — across AI interfaces, private LLMs, and agentic systems. Security requires coordinated runtime enforcement at firewalls, API gateways, and SIEM with zero-trust principles. Fortinet positions converged platforms as the way to embed AI guardrails into the foundational operating model.

⚠️ Security researchers at Capsule Security disclosed prompt-injection vulnerabilities in Microsoft Copilot Studio and Salesforce Agentforce that let attackers embed malicious instructions in public form fields. Crafted inputs submitted via SharePoint or lead forms can override agent instructions and trigger data exfiltration to attacker-controlled endpoints. Microsoft patched the SharePoint-related issue (CVE-2026-21520) with a 7.5 CVSS score; Salesforce acknowledged the problem but described the vector as configuration-specific. Researchers warn that treating external inputs as trusted undermines autonomous agent security and urge input validation, least-privilege, and stricter outbound controls.

🔒 AI adoption is now a boardroom expectation, and Pentera’s AI Security and Exposure Report 2026 reports that every CISO surveyed already uses AI across their organizations. The piece argues that fully agentic systems, while powerful and adaptive, introduce probabilistic variability that undermines repeatable, measurable security validation. A hybrid approach—deterministic orchestration for consistent attack chains combined with AI for adaptive payloads and environmental interpretation—provides guardrails while preserving realism. This anchoring enables reliable retesting and continuous exposure validation without sacrificing contextual intelligence.

🔒 At VulnCon26 in April, Lindsey Cerkovnik of CISA urged that AI firms like OpenAI and Anthropic be more directly represented in the CVE program to help manage a surge in reported vulnerabilities. She warned that new AI tools both accelerate discovery of valid flaws and generate lower-value noise, putting pressure on disclosure workflows. Recent vendor developments — Anthropic’s Mythos Preview and OpenAI’s GPT-5.4-Cyber — illustrate how automated research is already changing the threat landscape. Cerkovnik said CVE funding is secure and the program remains a CISA priority.

🔎 Deepfake technology is now widely accessible and sufficiently realistic to fool employees, executives and automated heuristics. A 2025 Gartner survey found nearly half of cybersecurity leaders encountered audio or video deepfakes in the prior year, and real-world incidents show attackers using synthetic media for both financial fraud and reputational sabotage. Organizations must combine rapid forensic verification, coordinated legal action and clear communications while pursuing long-term authentication and watermarking standards to restore trust.

🛡️ OpenAI has unveiled GPT-5.4-Cyber, a variant of its flagship GPT‑5.4 tuned for defensive cybersecurity use cases, and expanded its Trusted Access for Cyber (TAC) program to include thousands of authenticated individual defenders and hundreds of security teams. The company says the model is intended to help teams find, validate, and fix vulnerabilities faster while it iteratively strengthens safeguards to reduce dual‑use risks and resist jailbreaks and adversarial prompt injection. OpenAI highlighted its Codex Security agent, which it credits with contributing to the remediation of over 3,000 critical and high vulnerabilities, and framed the release as part of a broader shift toward continuous, developer‑integrated security feedback.