Industry news
New tools, products, platforms, funding rounds, and company developments in AI security.
New tools, products, platforms, funding rounds, and company developments in AI security.
6,031 items
A blog post reports that Qwen 3.8 27B, running locally on a laptop, can interpret raw neural network weights in the way the paper Sparks of Weight-Space Programming reports for GPT-6 Astra. The author tests the paper's Breakout weight-identification prompt, which is published in the paper's GitHub repository, and plans to check how Qwen 3.8 27B performs on it.
The 2026 midterm elections will shape the scope of President Donald Trump's power in his final two years and signal voter priorities ahead of the 2028 presidential election. Tech-relevant voter concerns include data centers and energy costs, AI safety, Flock surveillance expansion, and taxing billionaires' wealth in California.
Google's Threat Intelligence Group and Mandiant warned that attackers are conducting LLMjacking, a resource hijacking tactic in which they obtain an organization's LLM API key or cloud identity token through phishing, source code leaks, misconfigured environments, or exposed client-side code. Some organizations reported fraudulent charges above $100,000 in a single day, with cumulative losses reaching $1 million before access was revoked. The charges are paid by the legitimate account owner.
Cybercriminals have built a business reselling access to cloud-hosted LLMs. Some victims were charged as much as $1 million in resource consumption before access was revoked.
OpenAI has begun using the term "compute campuses" for its data centers, announcing it on Monday alongside a new "Grid Protectors Program." The program starts with an upcoming site in Effingham County, Georgia. The source frames the rebrand as an attempt to ease political backlash against AI infrastructure.
Gartner's 2026 report The Roles Required for the AI-Enabled Security Operations Center (SOC), by analyst Pete Shoard, predicts that by 2028 SOCs will have 50% more engineers than analysts as AI agents take over routine alert handling. The report says AI SOC agents already cut alert-handling work significantly for common and traditional detection use cases, and it argues analysts will shift from triage to end-to-end case ownership. Prophet Security's 2026 survey of more than 250 respondents found 57% expect team size to stay the same and 9% expect it to grow.
The source text is a newsletter navigation and teaser page listing several unrelated headlines, including a reference to the Binance hack. It contains no article content about the hack itself, so no summary can be drawn from it.
CrowdStrike announced agreements to acquire AI agent observability firm Fiddler AI and AI security testing company Dreadnode, reportedly worth a combined $495 million. According to The Wall Street Journal, roughly $400 million is for Fiddler and about $95 million for Dreadnode. The deals are expected to close in the fourth quarter of CrowdStrike's fiscal year 2027.
Check Point Research analyzed the Haiou jailbreak bundle, a Chinese-language prompt package targeting OpenAI Codex that weakens model guardrails for hacking-related tasks. The bundle installs security-focused Skills and modifies Codex configuration files so that advertisements for the author's paid, OpenAI-compatible LLM gateway are injected into subsequent agent responses, which Check Point classifies as prompt adware. Researchers also observed the bundle on a misconfigured webserver alongside Cobalt Strike, the Ladon framework and the VulnClaw agent, used by a cybercrime actor.
MIT Technology Review's daily newsletter covers a new approach called "reverse game theory," which designs rules that incentivize powerful AI models to stick to instructions, with researchers believing it could align AI more closely with rules, though open questions remain about practical effectiveness. The same edition reports that President Trump's executive order directed agencies to rebrand AI as "Super Intelligence," a term that is becoming a political loyalty test.
Wiz describes how teams use its Green Agent to speed remediation of security issues, citing Fireblocks, Rogo, and project44 as examples. The piece argues that fixing vulnerabilities, such as the recent PHP2Shell zero-day, stalls on coordination between security, engineering, and cloud operations teams. Green Agent addresses this by identifying a Suggested Assignee for each issue and tracing risks from runtime to the code that introduced them.
The author, citing a 2021 essay and the 2022 book A Hacker's Mind, argues that AI systems can find vulnerabilities and exploits in legal systems much as they do in software. The source reports that the authors used LLMs to identify a substantial number of previously unrecorded vulnerabilities in the German legal system, sharing only those whose exploitation would not cause serious harm. They warn that cheap legal reasoning could jeopardize current legal systems, and that lawmakers would need to harden legislation, possibly using advanced AI themselves.
OpenAI describes how its models, including ChatGPT and Codex, help engineers with CAD, PCB design, simulation and manufacturing preparation. In a test, GPT-6 Astra designed the enclosure, printed circuit board and software for a device that lets users talk to Codex, with two team members finishing the design in under a week. A contract manufacturer built a prototype batch in under a month, but Astra did not consistently account for production limits, tolerances or assembly details.
Google Threat Intelligence Group (GTIG) warns of LLMjacking campaigns in which cybercriminals hijack enterprise cloud and model access and resell it through underground subscription services called LLM Mixers. GTIG reports that fake cloud charges can exceed $100,000 in a single day, and that cumulative charges reached $1 million in some incidents before access was revoked. The source text is cut off mid-sentence while describing a follow-on actor that exploited a user ID rebinding vulnerability in the LiteLLM gateway.
A China-linked group tracked as VAPOR PANDA used the AI-powered penetration testing framework ARTEX to target more than 200 organizations in at least 14 countries over 11 days beginning October 17, according to CrowdStrike, with post-exploitation activity confirmed at nine. Microsoft separately reported that another China-linked group, Storm-0940, used ARTEX to automate attacks that in some cases gained privileged cloud access in less than three hours.
A new alignment approach called "reverse game theory", also known as mechanism design, aims to design rules that make safe behavior the rational choice for AI agents, instead of trying to read their internal reasoning. A preprint by Stephen Morris, an MIT economist, with colleagues from Yale and Columbia proposes mechanisms to stop agents from sandbagging tests, such as rewarding a model for how well its answers predict a second model's output. The source is cut off mid-description of a second proposal by Elad Hazan of Princeton, which has models take turns as solvers and auditors.
The NATO CCDCOE began Crossed Swords 2026 in Tallinn, Estonia, with more than 250 participants from over 40 countries practicing how to time cyber operations with kinetic and special operations action. This year adds a dedicated track on AI agents, which runs on locally hosted AI and, for the first time, OpenAI's Daybreak cyber defense offering.
Barracuda's Cybersecurity Skills Gap report surveyed 2,000 IT and security decision-makers and found that 67% say security teams are under pressure and struggling to scale to business needs. AI-related risks (68%) and advanced identity and phishing threats (67%) are the most common challenges. Separately, Pluralsight's Tech Skills Report 2026 estimates UK skills gaps cost 41% of cybersecurity professionals at least £380,000 a year.
CrowdStrike is introducing AI Kill Switch in Falcon Guardian, a control that lets security teams stop rogue AI agents. When activated, it directs connected AI gateways, either the Falcon AI Gateway or a third-party gateway, to block agent access to the AI models behind the agent's decisions and actions. CrowdStrike plans to extend the control to coordinated containment across endpoints, cloud, SaaS, identities and browser sessions.
Cisco is combining its network telemetry with OpenAI models to correlate security signals and speed up vulnerability patching, investigation and response. Cisco and OpenAI are also exploring the Daybreak Defense Network to help security teams triage exposure faster and enforce controls in Cisco Cloud Control.
Fix: Analysts quoted in the source recommend continuously measuring endpoint protection coverage and alerting when machines stop reporting, enforcing SAML signature validation, restricting cloud access privileges, regularly rotating credentials, monitoring unusual account activity, and improving asset visibility across systems.
CSO Online