AI Sec Watch

AI agents (autonomous systems that can make decisions and take actions) are becoming central to business operations, but many organizations struggle because their legacy data systems (older infrastructure that wasn't designed for modern needs) can't provide agents with fast access to the data they need across the entire company. The report found that while most companies only give AI agents access to about 45% of their data, "data leaders" who provide access to over 70% of their data see much better results, with 100% trust in agent decisions compared to only 50% trust at other organizations.

Google launched its new Pixel 11 smartphone lineup featuring Gemini Intelligence, a suite of AI features that can understand what users are doing on their phone and take actions across different apps, such as checking calendar availability or starting restaurant reservations. This puts Google in direct competition with Apple, which is rebuilding its Siri voice assistant using Google's Gemini models. Google executives argue that Pixel's deeper integration of AI into Android's operating system and exclusive features like scam detection distinguish their approach from Apple's implementation.

Fujitsu Research's OneCompression library version 1.2.0 has a vulnerability where it unsafely deserializes (converts data back into usable code) checkpoint files using Python's pickle module, allowing attackers to run arbitrary code by providing a malicious model.pt file. When the library loads a model file, it can execute hidden malicious instructions that attackers have embedded in the file, potentially compromising the entire system.

Music company D'Addario initially denied using AI-generated music in a promotional video but later admitted it had used Suno (an AI music generation tool) after weeks of public controversy and mounting evidence. The company offered several false explanations, including blaming low-quality exports and audio processing software, before finally editing its original post to acknowledge the use of generative AI (software that creates new content based on patterns learned from training data).

Prowler is a cloud security platform that had a vulnerability in versions before 5.33.1 where authenticated users could trick the system into sending API keys (secret credentials used for authorization) to attacker-controlled or internal endpoints by providing a malicious URL through the Lighthouse provider configuration.

AI agents themselves cannot be held legally responsible for damage they cause, but the people and companies that deploy them (put them into use) can be held liable instead. Experts warn that deployers should take responsibility for foreseeable harms their AI agents might cause, even if the harm wasn't intentional.

Cyber attacks increased significantly in July 2026, with organizations experiencing an average of 2,336 weekly attacks, a 16% increase from the previous year, while the use of GenAI tools (artificial intelligence systems that generate text or code) created new security risks with 1 in 36 prompts (user inputs to AI systems) exposing sensitive data. Education was the most targeted industry, and email remained a major vulnerability, with phishing attacks (fraudulent emails designed to trick users into revealing information) occurring in 1 out of every 128 emails.

An Australian entrepreneur named Paul Conyngham used AI tools like ChatGPT and Grok (language models that can process and generate text) to help design a personalized cancer vaccine for his dog, and has now launched a startup called Gamgee to commercialize this approach. The company plans to develop customized mRNA cancer vaccines (vaccines built from genetic material tailored to individual patients) for dogs initially, but aims to expand to treating various diseases in other animals and humans using AI and genetic analysis.

SpaceXAI has launched Grok Bot, an AI agent service that works like an independent "AI teammate" to complete workplace tasks by signing into your online accounts and using apps and websites on your behalf. The bot operates in its own cloud environment and only returns when its assigned work is done or human approval is needed, competing with similar services from OpenAI, Anthropic, and Microsoft.