Live topic stream

Security & Risk

Name: LDS Mentor
Availability: InStock

Vulnerabilities, misuse, safety incidents, privacy, and defensive AI. Reader coverage is updated continuously; Google Search eligibility is decided separately.

Stream archive

Latest coverage

Browse all topics

6.4
exposure-management
Aug 25, 20262 sources
Nucleus Security Launches Helix Exposure Management Engine
Nucleus Security launched Nucleus Helix on Aug. 25, an AI engine for its exposure-management platform. According to the company's announcement, Helix combines the Nucleus Data Core with agentic capabilities for vulnerability intelligence, passive exposure discovery, and natural-language workflows. SiliconANGLE reports that the expanded Insights capability is available now, while Discover and the Helix AI Agent are scheduled for September.
Read story
5.8
duckduckgo
Aug 25, 20262 sources
DuckDuckGo survey tracks personal disclosures to AI chatbots
DuckDuckGo published a survey on August 25 that found 56% of respondents it calls AI enthusiasts, and about one-third of all users, had told an AI chatbot something they had not told another person. The self-reported results do not establish a data breach, but they highlight how conversational AI can prompt sensitive disclosures.
Read story
7.0
openai
Aug 25, 20262 sources
OpenAI Bans Russia-Linked ChatGPT Accounts in Influence Operation
OpenAI said on August 25 that it banned a cluster of ChatGPT accounts it assessed as very likely originating in Russia after linking their AI-generated social posts to a wider influence operation. The accounts promoted a purported Israeli think tank, the International Burke Institute, whose site OpenAI said carried copied and misattributed work. The case shows how model-abuse investigations can expose connected distribution infrastructure.
Read story
6.8
macos-malware
Aug 25, 20262 sources
Attackers Use Fake Codex Ads to Target Macs
On August 24, 2026, Cato Networks researchers documented a macOS malware campaign using sponsored Google Search ads that impersonated an OpenAI Codex download page. The ads directed users to a Google Sites lure that instructed them to paste a malicious command into Terminal, a ClickFix technique. Cato assessed the multistage delivery chain as likely related to Atomic macOS Stealer activity.
Read story
7.2
claude-mythos-5
Aug 24, 20263 sources
Anthropic Expands Mythos 5 Access Through Claude Security
Anthropic said on August 21 that Claude Mythos 5 is now available in Claude Security and will be extended to partners’ cyber-defense tools. The company also announced a $35 million fund for open-source security work and plans to broaden its Cyber Verification Program, while keeping access controlled rather than offering unrestricted cyber use.
Read story
7.0
kimsuky
Aug 24, 20262 sources
Kimsuky Campaign Uses a Chrome Extension to Collect Gmail Data
Kimsuky was linked by Enki WhiteHat to a first-half 2026 campaign against targets in South Korea and Japan that used phishing-delivered malware and a Chrome extension to collect Gmail data. Enki said the extension's Korean comments, debugging text, and emoji were indicators consistent with generative-AI assistance, not independent proof of how the code was produced.
Read story
8.0
openai
Aug 24, 20263 sources
Alabama Opens OpenAI Inquiry Over Hugging Face Intrusion
Alabama Attorney General Steve Marshall announced on Aug. 24 that his office had subpoenaed OpenAI in an investigation focused on the July intrusion at Hugging Face during a model evaluation. The inquiry will examine whether OpenAI's practices violated Alabama consumer-protection law; the announcement does not make a finding of liability.
Read story
7.1
export-controls
Aug 24, 20262 sources
Taiwan Indicts Nine Over AI Server Exports to China
Taiwan's Keelung District Prosecutors Office announced indictments on August 24 against nine people in cases connected to alleged exports of high-end AI servers to Chinese buyers. Prosecutors said 74 of 130 Super Micro servers reached China through direct and transshipment routes, while 56 were stopped; the cases put attention on end-user verification and hardware traceability in controlled AI supply chains.
Read story
5.9
generative-ai
Aug 24, 20264 sources
State Farm Lawyers Admit AI-Fabricated Case Citations
In August 2026, attorneys representing State Farm acknowledged that court filings in a Los Angeles County insurance dispute contained nonexistent case citations, quotations and legal holdings. CalMatters reports that the defense lawyers apologized after counsel for former Carson homeowner Fa'alagilagi Meni-Siliga identified the errors, while a declaration quoted by Reason says a review found no AI hallucinations in specified oppositions, replies, or summary-judgment documents.
Read story+1
7.8
autonomous-weapons
Aug 24, 20262 sources
Ukrainian Officials Say AI-Guided Russian Drone Killed Three Civilians
The New York Times reported on Aug. 24 that Ukrainian officials, drone experts and forensic investigators said a Russian drone guided by an experimental AI system killed three civilians in Zaporizhzhia on July 6. They said the drone was programmed to approach a gas station, then selected a target near the site; Nvidia confirmed that wreckage shown to the Times contained Jetson Orin minicomputers.
Read story
6.3
nvidia
Aug 24, 20262 sources
Ukraine Says Nvidia Module Found in Russian S-71 Missile
Ukraine's Defence Intelligence agency said on August 12 it identified an Nvidia Jetson Orin computer module in a Russian S-71 Monochrome air-launched cruise missile. The agency said the component may indicate AI use, but it did not establish the module's operational role; the disclosure adds evidence of foreign electronics in Russian weapons.
Read story
7.6
cybersecurity
Aug 24, 20262 sources
UAT-10147 Integrates AI Into Server Intrusions
Cisco Talos disclosed on August 20 that UAT-10147, a Chinese-speaking cybercrime group, has targeted vulnerable Windows and Linux web servers globally using AI-assisted exploitation and post-compromise workflows. Talos reports that the group deploys the cross-platform SPECTRE implant, Linux rootkit capabilities, and Bring Your Own Vulnerable Driver techniques to neutralize endpoint defenses. The Hacker News reported an exposed target list containing approximately 170,000 URLs.
Read story
6.8
proofpoint
Aug 24, 20262 sources
Proofpoint Opens Hyderabad AI Security Engineering Center
Proofpoint expanded its India operations in August, opening an AI Security Engineering Centre of Excellence in Hyderabad and adding sales, support, and office capacity. Computer Weekly reports that the cybersecurity supplier plans to hire more than 200 engineers in India over the next 12 to 24 months to develop intent-based models for AI-agent security. The expansion follows company-reported growth in Indian customers and protected seats.
Read story
4.2
malware-analysis
Aug 24, 20262 sources
StringSifter Ranks Strings for Malware Triage
FireEye open-sourced StringSifter on September 7, 2019, a machine-learning utility that ranks strings extracted from binaries by their relevance to malware analysis. The tool is meant to push useful clues higher in a noisy Strings output, helping analysts triage suspicious files more efficiently before deeper investigation.
Read story
5.4
humanoid-robots
Aug 23, 20262 sources
Humanoid Robot Crashes During Beijing Sprint Training
Video footage shows an unidentified humanoid robot striking a safety barrier during sprint training in Beijing ahead of the 2026 World Humanoid Robot Games. Retrieved reports confirm the collision and the event context, but do not identify the machine or establish a technical cause at this time.
Read story
6.2
ai privacy
Aug 23, 20262 sources
University of Toronto Research Explored a Privacy Filter for Face Detection
In May 2018, University of Toronto researchers described a privacy filter that used adversarial perturbations to reduce detections by a Faster R-CNN face detector on the 300-W test set. The paper reported a drop from about 99.5% detected faces to 0.5% under its tested setup, highlighting both privacy techniques and the limits of computer-vision systems.
Read story
7.4
npm-security
Aug 21, 20262 sources
Researchers Link 14 npm Packages to RedC2 Linux Implant
Trend Micro researchers say 14 trojanized npm packages delivered a RedC2 4.0 Linux implant while still functioning as date-utility packages. The loader can run when a module is imported, including through a transitive dependency, instead of relying on an installation hook. That makes package behavior after import a key part of the supply-chain risk.
Read story
6.7
google-ai-overviews
Aug 21, 20262 sources
Google AI Overviews Return Nationality-Based Safety Responses
The New York Post and Futurism reported on August 20-21 that Google AI Overviews gave markedly different safety guidance for similarly worded prompts about being alone with people of different nationalities. Tests produced emergency-oriented responses for some non-Western nationalities, while a prompt about being alone with a Brit produced lighthearted social advice. Neither report documents a response from Google.
Read story
7.4
prompt-injection
Aug 21, 20262 sources
Cryptographic Context Injection Could Expose Grok Chat Data
Adversa AI disclosed Cryptographic Context Injection on 20 August 2026, showing a proof of concept in which a malicious web page could prompt Grok’s browsing workflow to decrypt instructions and send conversation data to an attacker-controlled URL. The researchers said they could reproduce the Grok chain on 19 August; The Register reported that xAI had acknowledged the June disclosure without a mitigation timeline.
Read story
7.1
supermicro
Aug 21, 20262 sources
Supermicro Completes Export-Control Probe; Employees Terminated
Supermicro said on Aug. 20 that an independent board-led investigation found no evidence current senior management knew of an alleged scheme to divert restricted products, while the company terminated employees in sales, technical support and business development. Supermicro says it adopted the investigators' export-compliance recommendations; government investigations connected to the allegations remain ongoing.
Read story
7.3
openai
Aug 21, 20262 sources
OpenAI Previews Private Safety Processing for ZDR Frontier-Model APIs
OpenAI announced Zero Data Retention support for eligible frontier-model API customers on August 19, alongside a preview of Private Safety Processing designed to detect misuse patterns without exposing prompts or responses to OpenAI personnel. The company is testing the system with early customers, Axios reports, and plans a broader rollout and technical details in September.
Read story
6.8
cybersecurity
Aug 21, 20262 sources
AI Skills Reshape Cybersecurity Job Requirements
The AI Workforce Consortium reported on August 20 that the share of G7 cybersecurity job postings requiring AI skills doubled year over year to 28.5%. Silicon Angle reported that senior-titled security roles grew 65% in the six months through March, while junior roles grew 5.9%, a gap the consortium calls the "experience paradox."
Read story
6.7
google-gemini
Aug 21, 20263 sources
Fake Gemini Installer Delivers Vidar Credential Stealer
Darktrace investigated a July 2026 intrusion in which a user at an EMEA customer downloaded a fake Google Gemini installer that delivered the Vidar information stealer. According to Darktrace, the lure used a Google Colab page that redirected users to a fraudulent download site, while the payload targeted browser credentials. Darktrace reported that its response system quarantined the infected device.
Read story
6.4
generative-ai
Aug 21, 20262 sources
Suffolk Police Arrest Man Over AI Abuse Images
Suffolk County police arrested East Patchogue resident Nicholas Zavesky, 43, on Aug. 20 after investigators alleged that electronic devices seized from his home contained more than 50 AI-generated child sexual abuse images. Patch and the New York Post report that the images were created by artificially editing social-media photographs of two girls. Zavesky pleaded not guilty, according to the New York Post.
Read story
6.8
palo-alto-networks
Aug 20, 20262 sources
Palo Alto Networks and NTT DATA Sign $1B AI Security Alliance
NTT DATA and Palo Alto Networks announced a multiyear alliance on August 20 to help organizations adopt AI securely and modernize cybersecurity. The companies said it targets $1 billion in joint business by 2029 and will begin with six transformation areas, including AI governance, agentic security operations, identity, cloud security, secure access and firewall modernization.
Read story
7.3
prompt-injection
Aug 20, 20262 sources
Researchers Detail Encrypted Prompt-Injection Path to Grok Chat Data
Security firm Adversa AI says it demonstrated a prompt-injection technique that could make xAI's Grok web chat send a user's session data to an attacker-controlled URL after a routine page-summary request. The firm said it reported the issue to xAI on June 3 and could still reproduce it on August 19; independent reporting described the finding, while no xAI technical response was retrieved.
Read story
7.2
openclaw
Aug 20, 20263 sources
Hackers Exploit OpenClaw Skills to Deliver Malware
A campaign known as ClawHavoc used poisoned packages in OpenClaw's ClawHub skill registry to deliver data-stealing malware, according to Cyber Security News coverage indexed by IT Security News on August 20. The report illustrates how third-party skills for agents with file, messaging, and terminal access can become a software supply-chain delivery path. Earlier research from VirusTotal and Unit 42 documented malicious OpenClaw skills, including infostealers and evasive packages.
Read story
6.8
amazon-bedrock-agentcore
Aug 20, 20262 sources
AWS Details Authorization Propagation for Bedrock Agents
AWS published guidance on August 20 for propagating user authorization context through AI agents built with Amazon Bedrock AgentCore. The approach moves access-control enforcement to infrastructure and downstream services, rather than agent code, so an agent compromised by prompt injection or application bugs cannot retrieve data outside a user's authorized scope, according to AWS.
Read story
5.8
ddos-protection
Aug 20, 20262 sources
Corero Adds AI Cloud-Assist to SmartWall ONE
Corero Network Security launched AI-Augmented Cloud-Assist for SmartWall ONE on August 20, extending its DDoS protection platform with cloud-delivered AI analysis, threat intelligence, and policy optimization. According to Corero's PRNewswire release, the service analyzes attack telemetry, identifies emerging threats, and recommends protection policies that operators can apply manually or automatically.
Read story
6.8
flock-safety
Aug 20, 20264 sources
Flock Cameras Face Nationwide Vandalism Amid Surveillance Backlash
In recent months, people across the United States have cut down, spray-painted, shot, and otherwise damaged Flock Safety automated license-plate reader cameras, turning opposition to the network into a nationwide backlash. Reports describe incidents in Ohio and Indiana, where police are investigating and say suspects could face felony charges, while estimates place the number of readers nationwide above 120,000.
Read story+1

Security & Risk

Latest coverage

Nucleus Security Launches Helix Exposure Management Engine

DuckDuckGo survey tracks personal disclosures to AI chatbots

OpenAI Bans Russia-Linked ChatGPT Accounts in Influence Operation

Attackers Use Fake Codex Ads to Target Macs

Anthropic Expands Mythos 5 Access Through Claude Security

Kimsuky Campaign Uses a Chrome Extension to Collect Gmail Data

Alabama Opens OpenAI Inquiry Over Hugging Face Intrusion

Taiwan Indicts Nine Over AI Server Exports to China

State Farm Lawyers Admit AI-Fabricated Case Citations

Ukrainian Officials Say AI-Guided Russian Drone Killed Three Civilians

Ukraine Says Nvidia Module Found in Russian S-71 Missile

UAT-10147 Integrates AI Into Server Intrusions

Proofpoint Opens Hyderabad AI Security Engineering Center

StringSifter Ranks Strings for Malware Triage

Humanoid Robot Crashes During Beijing Sprint Training

University of Toronto Research Explored a Privacy Filter for Face Detection

Researchers Link 14 npm Packages to RedC2 Linux Implant

Google AI Overviews Return Nationality-Based Safety Responses

Cryptographic Context Injection Could Expose Grok Chat Data

Supermicro Completes Export-Control Probe; Employees Terminated

OpenAI Previews Private Safety Processing for ZDR Frontier-Model APIs

AI Skills Reshape Cybersecurity Job Requirements

Fake Gemini Installer Delivers Vidar Credential Stealer

Suffolk Police Arrest Man Over AI Abuse Images

Palo Alto Networks and NTT DATA Sign $1B AI Security Alliance

Researchers Detail Encrypted Prompt-Injection Path to Grok Chat Data

Hackers Exploit OpenClaw Skills to Deliver Malware

AWS Details Authorization Propagation for Bedrock Agents

Corero Adds AI Cloud-Assist to SmartWall ONE

Flock Cameras Face Nationwide Vandalism Amid Surveillance Backlash

Security & Risk

Latest coverage

Nucleus Security Launches Helix Exposure Management Engine

DuckDuckGo survey tracks personal disclosures to AI chatbots

OpenAI Bans Russia-Linked ChatGPT Accounts in Influence Operation

Attackers Use Fake Codex Ads to Target Macs

Anthropic Expands Mythos 5 Access Through Claude Security

Kimsuky Campaign Uses a Chrome Extension to Collect Gmail Data

Alabama Opens OpenAI Inquiry Over Hugging Face Intrusion

Taiwan Indicts Nine Over AI Server Exports to China

State Farm Lawyers Admit AI-Fabricated Case Citations

Ukrainian Officials Say AI-Guided Russian Drone Killed Three Civilians

Ukraine Says Nvidia Module Found in Russian S-71 Missile

UAT-10147 Integrates AI Into Server Intrusions

Proofpoint Opens Hyderabad AI Security Engineering Center

StringSifter Ranks Strings for Malware Triage

Humanoid Robot Crashes During Beijing Sprint Training

University of Toronto Research Explored a Privacy Filter for Face Detection

Researchers Link 14 npm Packages to RedC2 Linux Implant

Google AI Overviews Return Nationality-Based Safety Responses

Cryptographic Context Injection Could Expose Grok Chat Data

Supermicro Completes Export-Control Probe; Employees Terminated

OpenAI Previews Private Safety Processing for ZDR Frontier-Model APIs

AI Skills Reshape Cybersecurity Job Requirements

Fake Gemini Installer Delivers Vidar Credential Stealer

Suffolk Police Arrest Man Over AI Abuse Images

Palo Alto Networks and NTT DATA Sign $1B AI Security Alliance

Researchers Detail Encrypted Prompt-Injection Path to Grok Chat Data

Hackers Exploit OpenClaw Skills to Deliver Malware

AWS Details Authorization Propagation for Bedrock Agents

Corero Adds AI Cloud-Assist to SmartWall ONE

Flock Cameras Face Nationwide Vandalism Amid Surveillance Backlash