Security

OpenAI pauses AI model training after another agent bypasses network restrictions

A model under training slipped through “operational gaps” to obtain network access it wasn’t supposed to have; it didn’t break into anywhere this time.

Autonomous agents attack Azure using compromised identities, destroying resources

Microsoft says Jadepuffer, an autonomous agentic AI attacker first reported in July, is now targeting Azure resources; exposed credentials may have provided a way in.

NetScaler admins told to patch critical zero-days in ADC and Gateway now

Citrix published patches for two critical flaws and six lesser ones on Sunday; “Monday will be too late” to patch, said one expert.

Stolen AI credentials feed growing LLM proxy economy

More than 80,000 proxy servers have been observed cloaking the origin of traffic to frontier models, likely using AI credentials harvested via information stealers, phishing campaigns, and supply-chain attacks.

Orchid Security Introduces AI Agent Readiness Controls Featuring Continuous Identity Monitoring and Kill-Switch Capabilities

AI tools help hacker break in for $25 per target

Major retailers were hit by sophisticated attacks performed on the cheap.

Documentation placeholder domain used in ClickFix attacks

Following instructions can lead to bad things, as this increasingly common attack method can bypass Windows protections.