0xBughunter

Schneier on Security

Measuring the Tendency of AI Agents to Go Rogue - Schneier on Security

This essay was written with Barath Raghavan, and originally appeared in The Guardian. In July, Hugging Face, a company that hosts much of the world’s AI software and open-source AI models, was hacked. A malicious dataset had been used to run code on one of its servers. Whoever was behind it captured internal security credentials and moved through systems over a weekend, running thousands of actions from a swarm of temporary server environments. It looked like the work of a sophisticated criminal

Headteacher had the most guessable username-password combo you could imagine

Schools often don

CISA unveils a six-step blueprint for isolating critical infrastructure during cyberattacks

A new guide from CISA and allied cybersecurity agencies says organizations should build dedicated isolation points into operational technology to contain attacks and continue delivering essential services.

Are we human?

Practical lessons from deploying AI securely at scale

The biggest challenges weren’t prompt injection or model vulnerabilities. They emerged after the AI already had permission to act.

Schneier on Security

Adversarial Clothing Designed to Fool Facial Recognition Systems - Schneier on Security

There are many companies manufacturing adversarial clothing designed to confuse facial recognition systems. It’s a cool idea, but I worry that it’s mostly security theater: “Our patterns play with that chaos, confuse algorithms and make it way harder to pin you down,” he said. Bell, however, said “none of these products are tried and tested, and a lot of these surveillance technologies can deal with a little resistance … [but] even if the designs don’t necessarily work perfectly, fashion is also

Certighost haunts Microsoft Active Directory Certificate Services

The Certighost vulnerability exploits a little-known AD CS fallback mechanism to trick certificate authorities into issuing trusted credentials.

Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps | Microsoft Security Blog

Read how to apply Zero Trust for AI with new assessments, DevSecOps guidance, and practical tools to secure AI agents, code, memory, and cloud environments.

Iran-linked CyberAv3ngers suspected in attacks on Minnesota water systems

More than 30 facilities disrupted in

From Input to Impact: Secure AI Where It Runs | SentinelOne

Defend the entire AI agentic stack across endpoints, identities, cloud, and apps with SentinelOne's unified platform.

Cybersecurity and Infrastructure Security Agency CISA

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

CISA has added two new vulnerabilities to its KEV Catalog, based on evidence of active exploitation.

Google dev kit spurs first-ever agent-on-agent violence

Poisoned pull requests contain prompt injection that allows one to control another

Microsoft

MDASH stuffed with MAI-Cyber-1-Flash and a side of GPT-5.4

Schneier on Security

Long-Lived Vulnerability in Microsoft Secure Boot - Schneier on Security

Microsoft’s Secure Boot has had a serious vulnerability for most of its existence. An industry-wide standard Microsoft invented to protect Windows, and later Linux, devices from firmware infections has been trivial to bypass for 13 of its 14 years of existence. The discovery was made by researchers at security firm ESET after identifying 11 firmware images, at least one from 2013, that were known to be defective but remained signed by the software company anyway. The images are known as shims, w

N-able God mode flaw: Vendor confirms attackers reached customer networks as second hotfix lands

Attackers turned admin access into a route downstream, while N-able tells N-central customers to patch – again

Cybersecurity and Infrastructure Security Agency CISA

CISA Adds Three Known Exploited Vulnerabilities to Catalog | CISA

Risk-based patching is the future. AI made it table stakes

AI changed the game. Smart security isn't about patching everything — it's about stopping the attack paths that matter most.

Are we human?

Enhancing AI security through global AI red teaming | Microsoft Security Blog

Microsoft's External Red Team Alliance (EXTRA) is a global AI security initiative designed to advance AI safety research and red teaming. By partnering with universities, researchers, and regional experts, EXTRA helps identify emerging AI risks, improve security testing, and strengthen the resilience of frontier AI systems.

For Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a Startup

Decades after it appeared in “The Terminator,” Skynet looks more like a forecast of the incident when a rogue AI system hacked into another AI company on its own.

Closed models refuse to help researcher swat Linux bug

Schneier on Security

Measuring LLMs' Ability to Perform Cryptanalysis - Schneier on Security

There’s new benchmark measuring AI’s ability to perform mathematical cryptanalysis. Anthropic’s frontier model actually found new attacks. The benchmark: “CryptanalysisBench: Can LLMs do Cryptanalysis?” The idea is to benchmark the ability of LLMs to discover new mathematical cryptanalytic attacks against a series of historical algorithms. Abstract: Cryptanalysis—the task of finding attacks against cryptographic schemes—its at the intersection of mathematical reasoning and cybersecurity, two are

Cybersecurity and Infrastructure Security Agency CISA

CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCs | CISA

​​Better security starts with better questions | Microsoft Security Blog

Learn how better questions, trusted AI, and human judgment help security leaders make confident decisions and build resilient systems.

Security leaders’ rogue AI confidence could actually be disastrous

IT and security leaders believe they can detect when an AI agent malfunctions or operates out of scope, but few can quickly trace and contain the cascading impact.

After OpenAI, Anthropic finds Claude breached three organizations during cyber tests

Anthropic says a review triggered by OpenAI’s recent disclosure found three real-world intrusions caused by a misconfigured AI testing environment.

How a global investment firm reduced security surprises

Organization also surprised by ease of deployment and effectiveness of continuous validation.

Schneier on Security

Cognyte Sells a Mobile Cell Surveillance Van - Schneier on Security

Yet another Israeli mass surveillance company: Made by Israeli surveillance company Cognyte, the tech simulates a mobile phone tower, which forces nearby phones to connect to it. That enables cops to keep tabs on any phones in the vicinity ­ whether they’re owned by a suspect in a case or not. Cognyte’s contract with the state of Texas reveals that the simulator, called FalcoNet, can be concealed within the vehicles, hidden in a backpack for on-foot missions or attached to a helicopter. It’s the

Zero Networks puts a wall behind existing AI guardrails

The company has introduced a capability that applies OWASP’s emerging Least Agency principle by using identity and network-level controls to contain compromised AI agents.

Are we human?

Feds get 3 days to patch N-able God mode flaw under active exploit

Experts warn hotfix not optional. MSPs warned attacker gains

How to detect OAuth client ID spoofing in Microsoft Entra ID before account takeover

Two campaigns created 4M+ fake identities to enumerate Microsoft Entra ID accounts — without logins. Learn how to detect the behavior, not the threat.

Are we human?

AI agents gain access to financial workflows amid growing governance gaps

A Pathlock report found that 53% of organizations cannot fully verify what AI agents do across business systems, even as they gain authority over finance, HR, procurement, and supply chain workflows.

Schneier on Security

Iran Cyberattacks Against Minnesota Water Systems - Schneier on Security

Attribution is preliminary, and so far it seems no real damage. And it seems like this is a campaign that has targeted at least seven states. And, because this is where the US is right now, Trump doesn’t believe it’s Iran and thinks Minnesota…I guess…hacked itself. “I think I blame it on Minnesota because they’re grossly incompetent,” Trump said. “I would blame it on Minnesota and the governor, the corrupt governor of Minnesota. They like to say, ‘Oh, it’s Iran.’ Iran should be so lucky. Iran’s

Fortinet’s new FortiGate platform converges firewall, SASE technologies

Fortinet has expanded its firewall family with new high-speed boxes that, when combined with the vendor’s FortiSASE Outpost software, extend cloud-based SASE (secure access service edge) capabilities and policy enforcement to customer-controlled environments, such as on-premises sites, private data centers, or colocation facilities.

Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge

Researchers say an unauthenticated vulnerability enables code execution, credential theft, AI memory poisoning, and persistent compromise.

Stop depending on heroics and start operationalizing third-party risk

When security enters the purchasing timeline too late, everyone loses.

Schneier on Security

Axon Is Another License Plate Surveillance Company - Schneier on Security

Governments are switching, but I’m not sure it makes a difference: …some municipalities, including Denver, Colorado, are ditching their Flock arrays. But keep in mind that if they’re only switching from Flock to another brand of license-plate readers, like Axon, it’s like a gambling addict trying to kick the habit by switching from FanDuel to DraftKings. […] Despite what you may read on the Flock website, Axon cameras are pretty effective when it comes to hoovering up personal details that can g

Cybersecurity and Infrastructure Security Agency CISA

CISA Adds One Known Exploited Vulnerability to Catalog | CISA