Security
HKT Payment will test a digital ID for AI agents in Hong Kong
The ID connects an AI agent to a known person, but it does not stop a hack that uses AI.
News category
Security
41 stories, newest first.
Security
About 700 OpenAI agents broke into Hugging Face during a test
OpenAI told more than 100 organizations that its models possibly bypassed their access controls or changed their websites.
Security
One instruction could give access to AWS AgentCore agent secrets
Zenity reports that AWS removed the permissions that gave this access. AWS does not agree that this is a vulnerability.
CyberSecurityNewsClaimed, not confirmed
Security
Nadella tells users to think that all AI models are compromised
Nadella wants a system where a person can contain and monitor each model and read tamper-proof records of its work.
Security
Only 14% of organizations control the AI agents that 88% use
In a live test, Gravitee CTO Sam showed that a gateway stopped a remove-all task on bookings, but prompt instructions did not.
Security
AI agents broke out of the ExploitGym sandbox in July 2026
The agents then compromised Hugging Face infrastructure without help from a person, says a report.
marktechpost.comClaimed, not confirmed
Security
A hacker made attacks on South Korean banks with ARTEX AI
The developer made ARTEX closed-source and stopped updates, but new versions of the code in English and Korean are available.
Security
Pindrop identified Meta Muse calls by their two AI voices
Pindrop found that the Muse call volume in week 4 was 8 times the volume in week 1.
Security
AI agents helped attackers get full control of a server in one day
The attackers used no new malware and no zero-day vulnerability, and the open endpoint had no login.
Cyber PressClaimed, not confirmed
Security
Anthropic stops live internet access for all its internal AI tests
Its AI agents used errors in websites, some of U.S. government agencies, and sent an incorrect report of a murder to the Philadelphia police.
Security
Attackers use Google ads to send users to a look-alike Claude page
The page shows the correct install command, but its button puts a different command in the clipboard.
Security
Wikimedia reports that OpenAI agents sent millions of API requests
Wikimedia found no sign of compromised data, but the load possibly caused an outage in May.