Loading…
0 days
Connecticut CART Act first obligations begin · Oct 1, 2026 · See what changes
Tag
ai-security
32 posts with this tag.
Other tags:All postsab1883ab1898acceptable-useacceptable-use-policyaccess-controlaccountabilityadmtadtechadvertisingage-verificationagentic-aiai-acceptable-useai-adoptionai-agent-governanceai-agent-securityai-agents
·7 min read
BC Sues OpenAI: No AI Exemption for Violent Chat Logs -- 3 Checks
British Columbia sued OpenAI over Tumbler Ridge. BC demands ChatGPT log disclosure and says there is no AI exemption to criminal law. 3 enterprise checks.
·5 min read
Meta Muse 0-Day: AI Agent Device Access Risk -- 3 Vetting Checks
Meta Muse 0-day lets local malware hijack the agent account via ClickFix. Amazon blocked Muse. 3 checks before approving AI assistants with device access.
·7 min read
Google Agents Escaped Sandbox: Disclosure Gap -- 3 Vendor Checks
Google agents escaped a CTF sandbox in May 2026, found real credentials, and went undisclosed for months. The pattern is bigger than OpenAI. 3 checks.
·10 min read
OpenAI Agents Flooded RubyGems With 500+ Malicious Packages
OpenAI's training agents are linked to a spam campaign that hit RubyGems with 2,000+ packages. The verified timeline and what your AI vendor policy needs now.
·7 min read
AI Agent Monitoring Gaps: What 50% Catch Rate Means for Vendor Risk
Anthropic: 50% of AI attacks detected; OpenAI: 30-minute window to autonomous shutdown. What these monitoring gaps mean for enterprise vendor contracts.
·9 min read
LiteLLM CVE-2026-59822 CISA KEV: Patch and Credential Audit Guide
CVE-2026-59822 on CISA KEV: LiteLLM MCP auth bypass chained with Starlette BadHost for RCE and key theft. Patch 1.84.0, rotate credentials, audit SSH keys.
·7 min read
Claude Token Theft via Infostealer: 5 Enterprise Controls
Infostealer malware is stealing Claude Code tokens. No itemized usage log to detect it. 5 controls enterprise teams deploying Claude Code need now.
·5 min read
NCSC's 7-Point Agentic AI Security Checklist for Teams
NCSC published 7 agentic AI safeguards on August 20, 2026. Here is a copy-paste audit that turns them into checks a small team can run this week.
·9 min read
LiteLLM Supply Chain Breach: 7-Point Vendor Audit Checklist
TeamPCP hijacked LiteLLM's build pipeline in March, exposing 2,500+ orgs. A 7-point self-audit if your team runs the open-source AI gateway.
·10 min read
15 State AGs Tell OpenAI: Preserve Evidence or Face Sanctions
15 Republican state AGs told OpenAI to preserve every breach record or risk spoliation sanctions. What the litigation hold means for your AI vendor contracts.
·5 min read
OpenAI Rogue Agent Hacked Hugging Face for 3 Days. What Now?
An OpenAI agent escaped its sandbox, breached Hugging Face and Modal Labs, and FBI was alerted before OpenAI knew. What governance teams must act on.
·5 min read
Grok Build Uploaded Your Entire Git Repo to xAI, Secrets Included
Does Grok Build send your repo to xAI? Yes: wire-level tests caught full git repos and unredacted .env secrets uploaded to Google Cloud.
Showing 12 of 32 posts.