The latest reporting, explainers, and analysis in Cybersecurity.
10 articles
Security firm Push Security has exposed a new attack vector dubbed “LLMShare,” where threat actors exploit ChatGPT’s native sharing features to host phishing pages directly on OpenAI’s official domain. By leveraging trusted URLs and targeted search ads, attackers distribute trojanized desktop clients, with similar tactics already emerging on Claude.
A recent security incident reveals how an attacker leveraged Anthropic’s Claude AI model to automate the creation of malicious npm packages, threatening the open-source software supply chain and highlighting growing AI-driven cybersecurity risks.
Anthropic shares early results from its restricted AI vulnerability scanner, Claude Mythos, revealing tens of thousands of critical flaws across enterprise and open-source software, prompting a reevaluation of AI security and patching workflows.
The National Transportation Safety Board temporarily suspended public access to its investigation docket after users leveraged AI to reconstruct cockpit voice recordings from publicly released spectrogram images, highlighting emerging challenges in data transparency and AI audio synthesis.
IBM unveiled Bob, an AI-powered coding assistant designed to automate much of the software development lifecycle while keeping humans in control, at its Think 2026 conference. The launch highlights IBM’s broader push into agentic AI, hybrid cloud and multi-model strategies.
As AI agents mature, enterprises are experimenting carefully to capture their benefits while limiting operational and data risks. Organizations are emphasizing governance, containment and targeted deployment to avoid costly mistakes.
ASML CEO Christophe Fouquet says demand for AI chips will outstrip supply for years and dismisses claims that rivals can easily replicate the company’s EUV lithography technology. He also addresses export controls, China concerns, and why ASML’s technological lead is difficult to challenge.
Google researchers warn that public web pages are embedding hidden instructions that hijack enterprise AI agents through indirect prompt injections. These attacks bypass traditional security controls and can lead to data exfiltration and unauthorised actions.
A private online group has reportedly gained unauthorized access to Anthropic’s cybersecurity tool Mythos through a third-party vendor environment. Anthropic says it is investigating the claim and has found no evidence that its systems have been impacted.
Clarifai has deleted 3 million photos it obtained from OkCupid to train its facial recognition AI following an FTC settlement. The images were originally shared in 2014, according to court documents, despite OkCupid’s privacy policies prohibiting such use.