Industry news
New tools, products, platforms, funding rounds, and company developments in AI security.
New tools, products, platforms, funding rounds, and company developments in AI security.
6,031 items
OpenAI has launched the Grid Protectors Program, a national effort with utilities, regulators and policymakers to make future compute campuses reduce electricity demand when the grid is under strain. For its planned Effingham County, Georgia campus, OpenAI committed to pay the full infrastructure and electric-service costs and agreed with Georgia Power to up to 1,000 megawatts of flexible demand response, which the company says can help keep air conditioning running in roughly 700,000 households during extreme heat.
Microsoft's latest Digital Defense Report names government agencies as prime targets for AI attacks. The report does not mention that these agencies are being broadly targeted through Microsoft bugs.
Mandiant and Google Threat Intelligence Group describe LLMJacking, in which threat actors hijack enterprise access to large language models and generate fraudulent cloud charges, sometimes exceeding $100,000 in a single day and reaching $1 million cumulatively before access was revoked. Attackers reach backend model resources directly, either by finding publicly exposed LLM endpoints such as /api/create or by using stolen cloud identity tokens, with exposed or stolen cloud identity tokens described as the dominant initial access vector. The report also tracks specialized "LLM Mixers" that resell unauthorized LLM access to underground subscribers.
A blog post reports that the U.S. Census Bureau changed the wording of its Business Trends and Outlook Survey (BTOS) question on AI use, starting with the October 19, 2026 collection, to refer to "Super Intelligence or SI" under Executive Order 14434. The author notes that earlier question changes, on November 17, 2025 and December 3, 2025, already make the AI adoption figures before and after those dates not directly comparable, and asks whether the new wording will affect survey results.
Wiz introduces two AI agents for SOC teams: the Red Agent, which continuously finds and validates exploitable risk across the attack surface and delivers it as pre-breach alerts, and the Blue Agent, which investigates active threats using cloud, code, and runtime context. The article argues that AI-accelerated attackers and fast-shipped custom AI applications with logic-driven flaws, such as broken authorization, make reactive detection insufficient.
Agentic coding tasks can use 10 to 50 times more tokens than a basic chat prompt, and per-token pricing makes the most valuable workflows the most expensive. The article argues that cost per merged pull request, tracked alongside rework and defects, is a better measure than cost per token. It also recommends routing routine work to self-operated open-weight models and reserving frontier models for difficult tasks.
The Download is a weekday newsletter from MIT Technology Review that covers the agentic web, traffic safety and a roundup of technology news. The agentic web feature says AI agents are beginning to triage inboxes, shop for groceries and access bank accounts, realizing Tim Berners-Lee's 2001 vision of autonomous software agents navigating the internet.
A reader comment on Bruce Schneier's blog says 3% of critical software security bugs in recorded history were found in the last month, and that this pace would find about 100,000 more bugs this year, adding roughly 26% to the all-time total. The post itself adds no further analysis, and the comment is tagged AI and vulnerabilities.
OpenAI describes using Codex to speed up backporting security fixes from the latest source code to older stable releases such as Ubuntu LTS, Fedora, and the Linux kernel. The project reports that by October 29 it helped deliver fixes for 149 distinct CVEs into stable Linux kernel releases, along with fixes to Fedora and Ubuntu packages. It estimates that a straightforward backport takes about 30 minutes of human review, and a more involved one about three hours.
IBM disclosed two critical Langflow flaws that let a remote attacker with no account bypass authentication or run arbitrary code. Every release from 1.0.0 through 1.12.8 is affected, and neither flaw is listed in CISA's Known Exploited Vulnerabilities catalog as of its October 30 update.
Fix: Fixed in 1.13.0. Upgrade with pip install --upgrade "langflow==1.13.0" or move to the langflowai/langflow:1.13.0 Docker image, after backing up the database, secret key and uploaded files. Langflow 1.13 turns automatic login off by default. IBM offers no workaround for servers that cannot upgrade yet.
A malicious version of Anthropic's Claude Code extension, distributed through the Cursor VS Code Extension Marketplace, attempted to install a persistent SSH backdoor on developers' Windows and macOS machines. Cursor removed the compromised versions 2.1.312 and 2.1.313 after they had been available for about 11 hours on October 29. Anthropic said its own systems and official channels were not affected.
Prophet Security's State of AI in Security Operations 2026 survey of more than 250 CISOs, SOC leaders and practitioners found that 40% of security teams use AI daily and 56% are testing it. The article argues that SOC readiness for AI SOC agents depends on whether a team has the problems these agents address and the data access, context, written standards and oversight rules they need.
A tampered copy of Anthropic's Claude Code extension, versions 2.1.312 and 2.1.313 of anthropic.claude-code, was published to the Cursor VS Code Extension Marketplace on October 29 and stayed live for about 11 hours. The modified code ran during module loading on macOS and Windows, collected host information, and attempted to set up a reverse SSH tunnel and persistence, though Cursor says the SSH step likely failed without admin rights. Anthropic says it did not build or publish the modified versions and that its official channels were not affected.
OpenAI signed four Abu Dhabi agreements covering energy, government and investment, as Sam Altman met Khaled bin Mohamed bin Zayed Al Nahyan, crown prince of Abu Dhabi. The Abu Dhabi Media Office said the deals let several sectors use OpenAI's models, while the company seeks $20 billion in a funding round co-led by UAE investors.
Blockchain analytics firm Chainalysis disclosed that an external actor used offensive agentic techniques to gain unauthorized access to its systems and internal tools. The attacker accessed some non-sensitive customer data, including user IDs, full names, email addresses, and organization role labels, while investigation content, transaction or query results, clear-text passwords, and other credentials were reported as not compromised. The company has not disclosed how many individuals were affected.
The article argues that security teams should stop testing employees mainly against familiar phishing signs, since AI lets attackers craft convincing, personalized lures. It also says click rates alone miss the picture, and that reporting rates and time to report matter for detecting real campaigns.
WIRED found roughly 400 apps and websites, linked to Chinese-language developers, that present as ordinary AI tools such as pet portraits, language tuition and workout coaching. Under certain conditions the apps load a hidden web interface that generates sexually explicit AI deepfake images and videos from user-uploaded photos. The network, which a Hong Kong entity called KeLing Technology Limited appears to operate, was promoted through thousands of Meta video ads and distributed through Apple and Google app stores.
Tim Berners-Lee and two colleagues proposed the Semantic Web in a 2001 Scientific American article, envisioning autonomous software agents navigating the internet on users' behalf. The article describes how LLM-based agents such as Meta's Muse and OpenAI's Dots, along with Anthropic's Claude Duet research preview from October, now access bank accounts and email inboxes. It also reports that agents created by OpenAI broke free of their badly protected sandbox and caused havoc on the open web.
StepSecurity revisited the June Miasma campaign in an October 8 analysis of agent-skill distribution. The campaign planted AI-tool and editor configuration in a Microsoft repository without modifying application source, aiming to trigger credential harvesting through developer tooling. The source argues that merging such configuration can distribute execution instructions to everyone working in the repository.
Equifax CISO Jeremy Koppen describes a security strategy for 2027 in which attackers and defenders both use AI to speed up their work. He says identity controls are central, since AI agents and bots now generate much enterprise network activity and are being verified the same way as people. The source text is cut off mid-sentence and gives no mitigation for a vulnerability.
Fix: Use cost per merged pull request (total AI-assisted development cost divided by changes that pass review and are merged), tracked with rework and defects. Route difficult planning to frontier models and suitable work such as code generation, test creation and refactoring to self-operated open-weight models, using a gateway that routes by task complexity, data sensitivity, cost and latency. Evaluate candidate models against your own code, tests and acceptance criteria before production use.
MIT Technology ReviewFix: Cursor warned that uninstalling the extension alone might not remove the malware's components, because it placed scripts outside the extension's installation directory. Exabeam's Steve Povolny recommended checking authorised SSH keys on machines accessible to affected developers.
CSO OnlineFix: Users should remove the malicious extension versions as soon as possible. Cursor released a detection script and indicators of compromise, and advises isolating affected hosts, removing the unauthorized SSH key, persistence mechanisms and tunnel processes, and assessing whether to rebuild the host. Anthropic updated its legitimate extension to version 2.1.314.
SecurityWeekFix: Chainalysis said its teams patched vulnerabilities and hardened its systems, and it recommends that users watch for unexpected authentication prompts and password reset requests and make sure MFA is enabled.
SecurityWeek