AI Sec Watch

The UK government announced Cyber Shield, a national initiative to deploy agentic AI (autonomous AI systems that can take independent actions) for cybersecurity defense, working across government and private organizations. The plan aims to use AI red teams (attackers) and blue teams (defenders) to automatically find and fix vulnerabilities faster than human attackers can exploit them, since current vulnerability discovery has accelerated from weeks to minutes. However, cybersecurity experts quoted in the article argue that most organizations today are compromised by basic configuration failures and legacy infrastructure problems, not sophisticated AI-driven attacks, so focusing on these fundamentals may be more urgent.

Meta released Muse Spark 1.1, an updated AI model designed for coding and agentic work (AI that can autonomously perform multiple tasks), as it competes with OpenAI and Anthropic. The model is now available through a public preview via a developer portal with aggressive pricing ($1.25 per million input tokens, $4.25 per million output tokens), though Meta is initially limiting API access to its own properties rather than third-party platforms.

Meta has released Muse Spark 1.1, an updated AI coding model that can be integrated into AI coding software through a new API (a set of tools that lets software talk to other software). The model claims improvements in detecting and fixing bugs, supporting multi-agent systems (where multiple AI agents work together), and processing multiple types of data like images and videos.

Two endpoints in Gittensory are missing access control checks that should restrict who can view contributor profiles. This means any user with a valid authentication token (a login credential) can view any miner's financial data, including their daily earnings in TAO (a cryptocurrency), alpha points, and USD value, plus their hotkey (a unique identifier). This is a type of IDOR vulnerability (insecure direct object reference, where attackers bypass permission checks to access resources they shouldn't see).

The soupsieve library (a CSS selector engine used by Beautiful Soup 4) contains a ReDoS vulnerability (regular expression denial of service, where a maliciously crafted input causes the regex engine to hang by repeatedly backtracking). When the CSS parser encounters an unterminated quoted attribute selector like `[a="xxxx...`, the regex pattern enters catastrophic backtracking, and just 300 bytes of input can cause the parser to hang for over 3 seconds, freezing any application that uses soupsieve.compile() or Beautiful Soup's .select() methods with untrusted input.

Soupsieve (the CSS selector engine for Beautiful Soup 4) has a memory exhaustion vulnerability where the CSS parser allocates unbounded memory when compiling large comma-separated selector lists. An attacker can supply a crafted CSS selector string to `soupsieve.compile()` or Beautiful Soup's `.select()` method to cause the application to allocate hundreds of megabytes of memory from a small input, leading to denial of service (making the application unavailable by consuming all available memory).

Phantom version 1.3.0 and earlier had two security flaws: AI agents could write files anywhere on a developer's computer (including files that run code when the system starts), and the audio processing tools could be crashed by tricking them into expanding tiny compressed files into huge amounts of data. Both issues are caused by missing safety checks on file paths and audio input sizes.

Anthropic has launched a "reflect" feature for Claude, its AI chatbot, that shows users a year-in-review analysis of their usage patterns similar to Spotify Wrapped. The dashboard displays information like the topics users discuss most, the types of tasks they ask Claude to handle, and when they use the service most frequently.

This research addresses vulnerabilities in cyber-physical systems (CPSs, which are physical machines controlled and monitored by computers) that use event-triggered mechanisms (ETMs, systems that send data only when something important happens rather than continuously). The paper proposes a defense method combining machine learning-based adaptive thresholding (automatically adjusting sensitivity levels using AI) and encryption to protect against strategic DoS attacks (targeted jamming where attackers selectively block critical data packets based on what they learn about the system).