All news with #ai security tag

🛡️ Microsoft outlines how defenders can harness AI to counter an accelerating threat environment. Through Project Glasswing and partnerships with model providers such as Anthropic, Microsoft tested Claude Mythos Preview against the CTI-REALM benchmark and observed meaningful detection improvements. The company plans to integrate advanced models into its Security Development Lifecycle, deploy rapid Defender detections, and share protections through MSRC and MAPP. The Secure Now exposure-management experience is available today, and a multi-model scanning harness is expected in preview in June 2026.

🚀 At Next '26 Google Cloud presented a unified vision and product set to put the Agentic Enterprise into production, led by Gemini Enterprise and a new AI Hypercomputer. Announcements include the Gemini Enterprise Agent Platform and app, TPU 8-series chips for training and inference, an Agentic Data Cloud, and Agentic Defense in partnership with Wiz. Emphasis was placed on enterprise security, observability, and multi-vendor openness for regulated deployments.

🚀 BigQuery introduces a broad set of lakehouse, AI processing, graph reasoning, and agentic features to support agent-first workloads. Highlights include managed Iceberg tables (GA), an Iceberg REST catalog (preview), and cross-cloud Lakehouse (preview) for interoperability across AWS and Azure. Native AI additions — from document parsing and embeddings to hybrid search and scalable Python UDFs — simplify unstructured and structured processing. New agent experiences and observability tools emphasize proactive automation, governance, and enterprise readiness.

🚀 Google Cloud announced storage enhancements at Next '26 to accelerate AI workloads across performance, intelligence, and management layers. The new Cloud Storage Rapid family (Rapid Bucket and Rapid Cache) and upgraded Google Cloud Managed Lustre deliver multiterabyte throughput, lower latency, and much faster checkpoint operations. Smart Storage adds automated annotations and MCP access to make objects self‑describing, while Storage Intelligence provides zero‑config dashboards and expanded batch operations to manage data at AI scale.

🚀 At Google Cloud Next ’26, Google unveiled a suite of GKE enhancements focused on large-scale AI and agentic workloads. Highlights include the new GKE Agent Sandbox (gVisor-based isolation for fast, secure sandboxes), private GA of GKE hypercluster to manage millions of accelerators across regions, and inference upgrades like Predictive Latency Boost and KV cache tiering. Preview RL features and intent-based autoscaling on custom metrics further enhance utilization and reliability.

🚀 Google Cloud presents its eighth-generation TPUs as two specialized systems: TPU 8t for massive pre-training and embedding workloads, and TPU 8i for low-latency sampling, serving, and reasoning. TPU 8t emphasizes throughput with a SparseCore for embedding collectives, native FP4 precision, VPU/MXU overlap, and the scale-out Virgo network to reduce DCN bottlenecks. TPU 8i prioritizes on-chip SRAM, a Collectives Acceleration Engine (CAE), and the Boardfly topology to cut network diameter and tail latency. The release is paired with a performance-first AI stack — Pallas, Mosaic, native PyTorch preview, and compatibility with JAX and Pathways.

🚀 Google announced a broad set of updates to Cloud Run to accelerate full‑stack app delivery, agent hosting, and high‑performance inference. New capabilities include full‑stack app deployment from AI Studio, a fully managed remote MCP server, and integration with the Gemini Enterprise Agent Platform. High‑end NVIDIA RTX PRO 6000 Blackwell GPUs are now GA, while instance primitives, SSH access, ephemeral sandboxes, and billing caps are rolling out in preview or coming soon.

🤖 Amazon CloudWatch pipelines now offers AI-assisted processor configuration that translates plain-language instructions into pipeline processor definitions. In the CloudWatch console, enable the AI-assisted option at the processing step, describe the transformations you need, and receive a generated processor configuration plus a sample log event to validate output before deployment. This reduces setup time and lowers the need for deep processor expertise; the feature is available at no additional cost where the service is generally available, while standard CloudWatch Logs ingestion and storage rates still apply.

🔒 Ads Advisor in Google Ads is gaining three agentic safety features to streamline policy compliance, account protection and certification management. Real-Time Policy Reviews scan accounts and websites to flag complex violations, explain the issue and confirm fixes before you appeal. A 24/7 security monitoring layer and security insights dashboard surface personalized recommendations and support passkeys. Ads Advisor will also detect certificate requirements and either auto-grant or facilitate one-click applications; these Gemini-powered capabilities arrive in the coming months and initially roll out to English accounts globally.

⚠️ Anthropic's reported Claude Mythos marks a shift: AI is compressing attack timelines by accelerating vulnerability discovery, exploit development, and multi-step attack planning. Attackers can now run malware, phishing, and vulnerability exploitation in parallel, reducing time to compromise and widening exposure. This trend demands prevention-first controls and real-time detection to identify and remediate gaps earlier, limiting impact.

⚠️ Google’s Antigravity IDE contained a prompt-injection flaw that could convert a file-search operation into remote code execution. Researchers at Pillar Security showed the agent’s find_my_name tool passed unsanitized Pattern strings to the underlying fd utility, allowing flag injection and execution of binaries. Google acknowledged and fixed the issue and awarded a VRP bounty, but the flaw underscores limits of shell-focused sanitization.

🛡️ Google has patched a critical prompt-injection vulnerability in its agentic IDE Antigravity that could allow attackers to achieve arbitrary code execution. Researchers at Pillar Security found that the find_by_name tool passed unsanitized input to the native fd search utility, enabling injection of the -X (exec-batch) flag to run staged scripts. Because this call executes before Strict Mode constraints are applied, an attacker can stage a malicious file and trigger it via a crafted search pattern. The issue was disclosed January 7 and fixed by Google on February 28.

🔍 The new CrowdStrike Shadow AI Visibility Service delivers telemetry-based discovery of sanctioned and unsanctioned AI across endpoint, cloud and SaaS environments. Delivered by CrowdStrike experts and powered by the Falcon platform, it produces a comprehensive AI inventory and runtime evidence such as prompts, responses and agent activity. The service identifies visibility gaps, prioritizes findings and provides actionable remediation guidance to reduce exposure. It positions discovery as the foundational phase before adversarial testing and continuous frontier AI readiness scanning.

🔐 AI is compressing the timeline of cyber risk, turning vulnerabilities that once took weeks to exploit into issues weaponized in hours, while also enabling defenders to analyze and mitigate faster. Fortinet has used AI in FortiGuard Labs since 2015 and now leverages generative and frontier models—including early access to Anthropic’s Mythos preview—to scale code analysis, threat hunting, and automated remediation. The recommendation is clear: embed AI across development, detection, and response, shorten mitigation cycles with automation and virtual patches, and design systems for continuous, integrated security.

🤖 We built a CI-native orchestration system around OpenCode that launches up to seven specialised AI reviewers per merge request, each focused on domains like security, performance, code quality, documentation, release management, and internal compliance. A coordinator agent deduplicates and rates structured XML findings, applies a conservative approval-biased rubric, and posts a single unified review. Deployed across thousands of merge requests, it approves clean code, blocks critical issues, and reduces median review latency to 3m39s while keeping human oversight.

🤖 Over eleven months Cloudflare built an internal AI engineering stack that integrates AI Gateway, Workers AI, the Agents SDK, and developer tools like OpenCode and Backstage. The platform centralizes authentication with Cloudflare Access, routes model traffic and costs through AI Gateway, and runs inference on Workers AI to reduce latency and expense. The deployment includes an AI Code Reviewer and an Engineering Codex to enforce standards and maintain quality at scale.

🤖 Cloudflare's Agents Week highlights a broad set of primitives, services, and developer tooling to support agents as first-class workloads on the Cloudflare Workers platform. Key compute advances include Artifacts, Sandboxes GA with programmable egress, Durable Object Facets, and Workflows v2 to scale background agents. Security features—like Cloudflare Mesh, Managed OAuth for Access, and resource-scoped permissions—aim to make secure agent deployment the default while an expanded Agent Toolbox adds inference, memory, voice, email, and browsing capabilities to help builders move prototypes to production.

⚠️ Unit 42's hands-on evaluation finds frontier AI models can autonomously identify complex software vulnerabilities and map exploit chains, dramatically accelerating the discovery-to-exploitation timeline. The researchers warn this capability raises immediate risks to open source projects and supply chains, and will compress N-day windows to hours. They urge aggressive prevention, automated patching, and hardened development pipelines.

🔐 Capsule Security researchers discovered prompt-injection flaws in Microsoft Copilot Studio and Salesforce Agentforce that allow attackers to inject malicious instructions via standard input fields. In Copilot, a crafted payload in a SharePoint form field can overwrite agent instructions and exfiltrate SharePoint data; Microsoft has released a patch (CVE-2026-21520). In Agentforce, attackers can embed directives in public lead forms that an agent with email or query capabilities may execute, enabling broad CRM data leakage.

⚠️ As frontier AI accelerates vulnerability discovery and exploit development, the traditional window for patching and mitigation is collapsing and defenders must change how they prioritize risk. CrowdStrike urges a shift from volume-focused vulnerability management to exposure-centric programs that evaluate exploitability, reachability, and attack paths. Recommended actions include continuous inside-out and outside-in validation, enforcing zero standing privileges, operating detection and response at machine speed, and applying AI with deliberate governance. CrowdStrike offers a Frontier AI Readiness and Resilience Service and integrates findings into Falcon to operationalize continuous remediation.