Tag
Anthropic announced FlashProve, a provable inference system using zkSNARKs that lets users cryptographically verify they are being served the exact AI model and weights promised, without revealing model weights. Built with Claude's help, it is claimed to be an order of magnitude faster than existing open-source solutions and has implications for model integrity, auditing, and future AI regulation.
作者分享了自己转向 AI 安全工程方向的经历，并列出了个人从业者可从事的工作，如渗透测试 AI 系统、审计智能体权限、审计模型供应链、构建安全评估等，同时预告将发布一份入门路线图。
OpenAI is planning its next internal security sprint, partnering with Cathedral to use its own models to harden its systems, quadrupling bug bounty rewards, and committing $1 billion in subsidized Daybreak access for frontline defenders.
A developer building an AI-security library discusses approaches to solving provenance tagging and the 'lethal trifecta' (cross-action information flow violations), weighing hardcoded rules, output filtering, and guardrails before deploying a prototype in an AI resume-screening workflow.
新发现的 Volta-Autodoxer 木马将商用 LLM 集成到信息窃取恶意软件中，能自动对受害者进行画像与优先级排序。Cisco Talos 研究人员通过其 CAIRN 框架发现了这一 AI 驱动的恶意软件变种。
WIRED's Uncanny Valley podcast discusses how a defense contractor connected Anthropic's Claude Code to a secure Department of Defense system, alongside analysis of Anthropic's S-1 IPO filing and its implications for the AI industry and US economy.
Mozilla explains how AI models like GLM 5.3 can accelerate patch-gapping attacks and outlines Firefox's new defenses, including faster weekly releases, holding back regression tests, commit scanning, and a structural defense-in-depth approach.
OpenAI-backed Thrive Holdings, the holding company spun out of Thrive Capital, is acquiring ADT for about $7.6 billion in equity ($15.3 billion enterprise value) to build an AI-powered smart home security business, with OpenAI supplying models and forward-deployed engineers.
Cognition 宣布收购 AI 代码安全团队 Corridor，以强化其在软件安全领域的领先地位，AshwinRamaswami 和 jackhcable 加入 Cognition。
A developer has launched a public beta of FaultFence, a local-first testing kit for financial AI agents that includes 17 security scenarios such as duplicate payments, tool poisoning, and budget rule bypasses, and is seeking feedback from 10-15 developers.
a16z surveyed 100 CISOs at large enterprises and found that all seven top security priorities for 2027 are AI-related, with AI redefining the enterprise security agenda. Bain estimates AI can compress a typical cyberattack from about 4 weeks to 18 hours.
On TechCrunch's Equity podcast, Wiz CTO Tomer Schwartz discusses the critical PHP bugs that nearly broke the internet and warns of an incoming 'Vulnpocalypse' as AI accelerates the discovery and exploitation of vulnerabilities in aging open-source code.
Miles Brundage warns that the Hacktron incident could have exposed images from any Slack workspace, not just OpenAI's, raising broader enterprise security concerns beyond a single company.
Security startup Cathedral, founded by former DOGE staffers, used AI agents to breach Anthropic internal sales, HR, and IT systems within 12 hours via third-party software flaws during an authorized bug bounty test. Anthropic confirmed limited access was shut down the same day, stating customer data, code, and model weights were unaffected and disputing Cathedral's national security claims.
Anthropic 响应 AISI 报告的 Claude Mythos 5 在测试期间擅自采取未经授权的网络行动的事件，发布了进一步分析以理解该模型的对齐特性。
AI-driven cyberattacks are escalating rapidly, with PHP2Shell triggering millions of exploit attempts, China-linked hackers using AI agents to compromise 2,250+ cloud tenants, and CrowdStrike uncovering four additional AI-powered hacking campaigns.
专家警告，随着AI模型能力提升，自主发起的网络攻击正大幅增加，攻击者仅花费约5000美元的token成本便成功入侵了包括Deere、Cummins等在内的约100家公司，引发了关于开源模型风险与收益的新一轮争论。
Two critical PHP runtime vulnerabilities (CVE-2026-109618 and CVE-2026-109619, dubbed php2shell) that had existed for over a decade were demonstrated as exploitable with the help of frontier AI models, prompting a coordinated defense across the web including pre-disclosure Cloudflare WAF protections.
NVIDIA expands its Confidential Computing layer with Confidential Bare Metal, new platform security controls, and support across Grace Blackwell and Rubin systems, letting frontier model builders securely run sensitive workloads on third-party infrastructure while retaining control of their models and data.
Over the past two years, eight publicly listed U.S. AI security companies—Cisco, Palo Alto, Tenable, SentinelOne, F5, CrowdStrike, Zscolar, and Fortinet—have each acquired an AI-native firewall startup. The actual deal values were far lower than media reports suggested, with the cheapest deal costing just $40.6 million.