#ai-security

Identity platform Okta buys AI security startup Permiso in nearly all-cash deal to bolster machine-identity threat detection as enterprises deploy autonomous software.

Security experts say the autonomous attack relied on familiar techniques and defensive failures—not unprecedented AI capabilities.

A new coalition of tech companies, led by Nvidia and Microsoft, aims to build open-source AI security tools—conspicuously excluding OpenAI, Google, and Anthropic.

Google security veterans launch AegisAI with $36M Series A to counter increasingly sophisticated AI-powered email attacks that bypass traditional defenses.

OpenAI and Trail of Bits launch a joint program to help open-source projects identify and remediate vulnerabilities before they cascade into production software.

Andy Jassy flagged Claude Fable 5 vulnerabilities to U.S. officials before government restricted the model's distribution.

Attackers bypassed Meta's AI support agent through simple prompts, revealing that vulnerable automation—not superintelligent hackers—poses the more immediate AI security threat.

Cisco deploys OpenAI's Codex as a core engineering teammate, compressing multi-quarter development cycles into weeks for AI Defense and other enterprise products.

Automated vulnerability detection tools are flooding the Linux security mailing list with low-quality reports, making it difficult to triage genuine issues.

Wiz Research used AI to uncover a critical RCE flaw in GitHub's git infrastructure; engineers patched it in under six hours with no confirmed exploitation.