AI Sec Watch

AI gateways (systems that control access to AI models and cloud services) can be vulnerable entry points for attackers, as shown by a recent cryptomining incident where attackers exploited these gateways to gain access to AI models, cloud infrastructure, and IAM (identity and access management, the system controlling who can access what resources) data. This highlights a security risk in how organizations protect their AI systems.

Cyber-attacks increased significantly in June 2026, with organizations worldwide experiencing an average of 2,270 attacks per week, up 10% from the previous month. Education, Government, and Telecommunications sectors were hit hardest, while ransomware attacks (malware that encrypts data and demands payment for its return) reached 646 cases in the month. Healthcare and Telecommunications industries face the most risk from unsafe prompts (instructions given to AI systems that could be misused).

OpenAI announced GPT-5.6, a new AI model that will become the default option in Microsoft 365 Copilot (an AI assistant built into Microsoft's productivity apps like Word, Excel, and PowerPoint). This update gives Microsoft 365 users access to a more capable model that can produce better quality work with less effort, such as helping draft documents, analyze data, or create presentations more efficiently.

Attackers compromised an AWS EC2 instance running LiteLLM (a proxy that acts as a gateway to AI models), deployed cryptomining malware, and attempted to abuse cloud permissions and AI services. The incident reveals a broader security risk: AI gateways concentrate access to cloud identities, permissions, and AI models in a single system, making them extremely valuable targets that can give attackers broad access to an organization's cloud infrastructure and AI resources.

The UK's National Cyber Security Centre (NCSC) has unveiled Cyber Shield, a plan to deploy autonomous AI agents (software programs that can act independently) to find and stop cyberattacks on national networks in real time. The proposal addresses a growing problem: attackers are already using AI to discover vulnerabilities (security weaknesses) and gather information faster than human defenders can respond, compressing activities that once took weeks into minutes. Cyber Shield would use paired AI 'red' and 'blue' agents to identify weaknesses and defend against threats, starting with partnerships in government and critical sectors before expanding commercially.

AI-powered attacks now move much faster than traditional attacks, with tools like Mythos allowing attackers to craft custom phishing messages, find targets, test their success, and move to new systems within minutes. Traditional security tools were designed to defend against slower human attackers and cannot keep up with AI-driven attacks operating at scale. The article promotes a webinar that claims to teach three defensive strategies: reducing what attackers can access, preventing lateral movement (attackers spreading through a network after initial entry), and detecting attacks early through automated responses.

Large language models are trained primarily on written text and scripted speech, missing the vast majority of human conversation, which means they capture an incomplete slice of how people actually communicate. As people encounter more AI-generated text and interact with chatbots, they may gradually adopt the linguistic patterns of these models, leading to changes in how humans speak to each other and think about the world, such as using shorter sentences, narrower vocabulary, overly formal structures, and increased confirmation bias (accepting information without questioning it).

An AI agent with standing access to a production system caused a four-hour outage through a misconfiguration, but no one could identify which human authorized its action because the agent lacked proper identity controls (MFA, scoped access revocation, short-lived credentials). The core problem is that traditional identity management systems were built for predictable service accounts with fixed roles, but agentic AI systems (AI that breaks tasks into steps and chooses which tools to use) operate with unbounded scope and unpredictable actions, creating major security risks around privilege abuse and rogue agent behavior that existing access controls cannot properly govern.

OpenAI released the GPT-5.6 family of models, including Sol (flagship), Terra (balanced), and Luna (cost-efficient), which achieve better performance than competing models while using fewer tokens (units of text the AI processes) and costing less money. The models were trained with safeguards (protective measures against misuse) tested through human red teaming (security experts trying to break it) and automated testing before general release. GPT-5.6 Sol also introduces enhanced coding abilities and a new "ultra" setting that coordinates multiple agents (independent AI systems working in parallel) to handle complex tasks faster.