Latest AI News

Transparency: Opening the AI black boxFor all their impressive capabilities, AI algorithms are often opaque, leaving users ignorant of how decisions are reached. Is that AI-powered loan request being denied because of your credit score – or due to an undisclosed company bias? Without transparency, AI can pursue its owner’s goals, or that of its owner, while the user remains unaware, still believing it’s doing their bidding.One promising solution would be t

if ( !emtpy($headline_subheadline ) ) : ?> Cisco wants employees to work with AI agents alongside colleagues, part of a Webex update that adds a personalized workspace and agents to screen calls. Advanced capabilities will be bundled into a new AI add-on. endif; ?> Credit: Cisco Collaboration SoftwareProductivity SoftwareGenerative AIArtificial Intelligence

if ( !emtpy($headline_subheadline ) ) : ?> Google's temporary halt on some bug bounty submissions underscores a broader problem facing enterprises: AI is making vulnerability discovery cheaper and faster, but security teams are struggling to validate, prioritize and remediate a growing flood of machine-generated findings. endif; ?> Credit: Gorodenkoff / Shutterstock Artificial IntelligenceVulnerabilitiesSecurity

if ( !emtpy($headline_subheadline ) ) : ?> With flaw discoveries mounting, adversarial simulation and continuous pen testing can help CISOs identify which vulnerabilities matter most. New autonomous tooling is here to lend a hand but skilled practitioners remain critical. endif; ?> Credit: DJ Creative Studio / Shutterstock Artificial IntelligenceApplication SecuritySecurityThreat and Vulnerability ManagementSecurity Software

Anthropic loosens Claude’s cyber restrictions for verified defenders Anthropic expanded its Cyber Verification Program (CVP), giving approved security professionals access to advanced Claude capabilities with fewer automated blocks on work such as malware analysis and vulnerability testing. Three tiers for cybersecurity work The program now has three tiers based on the scope of applicants’ cybersecurity work. The expansion combines CVP and Project Glasswin

How AI can fix cybersecurity compliance: From dashboards to continuous execution Most compliance work goes into proving security, not improving it. That isn’t because the rules are unreasonable. Regulators, customers, and cyber insurers are right to expect organizations to implement hundreds of technical and administrative controls, monitor their environments, respond to incidents, and prove that all of it works. The problem is the cost of delivering it. T

Who watches the AI watching your street? Yusaku Fujii, a professor at Gunma University in Japan, has designed audits and penalties to stop operators from misusing AI that analyzes street camera footage. His system adds an independent record-keeper and unannounced spot checks to the AI’s outputs. Fujii’s test setting is what he calls a Fully Monitored Public Space (FMPS): streets where cameras are dense enough to follow people and vehicles continuously. It

GitHub adds AI to catch passwords before a code push GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push protection, which checks code for secrets and can block a push before a credential enters repository history. How the detector works Existing checks recognize many credentia

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The malware reading it, dubbed PoeLLM, breaks into exposed AI services and open-source tools, mines cryptocurrency on them and uses them to hunt for new victims. The researchers call the campaign Canto Incognito and believe it is

Anthropic’s new budget model gets much better at ignoring hidden commands Anthropic’s Claude Haiku 5.5 model, designed for quick, repetitive workloads and speed-sensitive tasks, is now better at finding vulnerabilities and writing exploits than its predecessor. The company has given it stricter cybersecurity safeguards than Haiku 4.5, though lighter ones than its more advanced models, whose offensive skills remain well ahead. Cybersecurity capabilities and

Companies want autonomous IT operations but hesitate to let AI act alone Ninety percent of companies want to move toward autonomous IT operations over the next two years, with agentic AI, software that plans and carries out multi-step tasks on its own, doing the work. Yet 77 percent say their own organization hesitates to let AI make an operational decision without a human approving it. Most of those companies mean autonomy with a person at the approval st

PCI SSC calls for human approval of AI agent actions involving cardholder data The PCI Security Standards Council (PCI SSC) has published Security Considerations for AI Systems, guidance covering the protection of data supplied to AI systems in payment environments and defenses against AI-assisted attacks. Developed with industry stakeholders, the document addresses governance, deployment, access controls, testing and the application of PCI standards. Its

Anthropic offers free AI security scans to open-source maintainers Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and reports explaining suspected flaws, how to reproduce them and, when available, how to fix them. The service builds on Anthropic’s experience with Project Glasswing, which used Claude to find sof

AI vulnerability patching has a grading problem Researchers at Northwestern University tested AI coding agents on 112 real security bugs. They found that a patch which stops a crash often fails the checks the project’s maintainers wrote for the fix. With Claude Opus 4.7, third of the patches that made the crash go away still failed those maintainer tests. If you’re thinking about letting an AI tool patch vulnerabilities for you, this is the number to look