AISecHub
رفتن به کانال در Telegram
Powered by InnovGuard.com | https://www.linkedin.com/groups/14545517/ | https://x.com/AISecHub | https://whatsapp.com/channel/0029VbCsLfRBVJkzag0MUe0K
نمایش بیشترکشور مشخص نشده استفناوری و برنامهها25 071
2 748
مشترکین
-124 ساعت
+477 روز
+13130 روز
در حال بارگیری داده...
کانالهای مشابه
هیچ دادهای
مشکلی وجود دارد؟ لطفاً صفحه را تازه کنید یا با مدیر پشتیبانی ما تماس بگیرید.
ابر برچسبها
اشارات ورودی و خروجی
---
---
---
---
---
---
جذب مشترکین
سپتامبر '26
سپتامبر '26
+108
در 1 کانالها
اوت '26
+150
در 2 کانالها
Get PRO
ژوئیه '26
+111
در 1 کانالها
Get PRO
ژوئن '26
+113
در 3 کانالها
Get PRO
مه '26
+163
در 4 کانالها
Get PRO
آوریل '26
+100
در 2 کانالها
Get PRO
مارس '26
+192
در 3 کانالها
Get PRO
فوریه '26
+239
در 5 کانالها
Get PRO
ژانویه '26
+394
در 4 کانالها
Get PRO
دسامبر '25
+204
در 4 کانالها
Get PRO
نوامبر '25
+140
در 4 کانالها
Get PRO
اکتبر '25
+167
در 3 کانالها
Get PRO
سپتامبر '25
+270
در 1 کانالها
Get PRO
اوت '25
+95
در 1 کانالها
Get PRO
ژوئیه '25
+93
در 2 کانالها
Get PRO
ژوئن '25
+68
در 1 کانالها
Get PRO
مه '25
+375
در 3 کانالها
Get PRO
آوریل '25
+43
در 2 کانالها
Get PRO
مارس '25
+735
در 1 کانالها
| تاریخ | رشد مشترکین | اشارات | کانالها | |
| 18 سپتامبر | +3 | |||
| 17 سپتامبر | 0 | |||
| 16 سپتامبر | +17 | |||
| 15 سپتامبر | +9 | |||
| 14 سپتامبر | +8 | |||
| 13 سپتامبر | +4 | |||
| 12 سپتامبر | +5 | |||
| 11 سپتامبر | +9 | |||
| 10 سپتامبر | +11 | |||
| 09 سپتامبر | +4 | |||
| 08 سپتامبر | +4 | |||
| 07 سپتامبر | +5 | |||
| 06 سپتامبر | +8 | |||
| 05 سپتامبر | +4 | |||
| 04 سپتامبر | +9 | |||
| 03 سپتامبر | +1 | |||
| 02 سپتامبر | +3 | |||
| 01 سپتامبر | +4 |
پستهای کانال
| 2 |  https://owaspaibom.org/wp-content/uploads/2026/09/OWASP-AIBOM-Foundations-v1-0En-1.pdf | 143 |
| 3 | Red-Teaming Auto Mode Against Malign Coding Agents
Production systems now pair coding agents with blocking monitors that reject risky actions before they run, including Auto Mode in Claude Code and Guardian in OpenAI Codex. Prior evaluations mostly measured robustness to accidental harm or prompt injections from untrusted sources. This paper instead tasks an adversarial agent with evading the blocking monitors while persistently misaligned, and measures how well the monitors prevent catastrophic harm such as data exfiltration.
#AISecurity #AgentSafety #RedTeaming #Research #MonitoringAndOperations
https://arxiv.org/abs/2609.19587 | 178 |
| 4 | ALIBI: Cover Stories Blind LLM Malware Analyzers
New research targets the LLMs increasingly used in malware triage workflows to summarize static evidence and produce analyst-facing verdicts. The ALIBI attack adds a small, non-executed read-only section to a compiled binary that carries a coherent but false security-product narrative, without altering imports or other structural evidence. The paper demonstrates that this semantic cover story can flip the verdicts of frontier LLM-based malware analyzers.
#AISecurity #Malware #LLM #Research #ThreatIntelligence
https://arxiv.org/abs/2609.19722 | 156 |
| 5 | MCP Traffic Evades NIDS as Legitimate Beacon Lookalike
A new paper examines how the Model Context Protocol introduces machine-generated, authenticated, high-frequency JSON-RPC traffic directly into enterprise networks. Enterprise defenders have historically relied on machine-like cadence as an indicator of compromise, and this traffic class blurs that signal. The authors analyze whether current network intrusion detection architectures can distinguish malicious MCP agent-to-tool traffic from legitimate use, defining a new evasion surface for agent infrastructure.
#AISecurity #MCP #NIDS #Research #NetworkSecurity
https://arxiv.org/abs/2609.19091 | 121 |
| 6 | LLM Watermarking Shifts Agent Tool Use and Refusals
Lasso Security found that the EU AI Act-mandated watermarking of AI-generated content changes how agents behave. SynthID-Text, adopted by Anthropic and OpenAI, intervenes in next-word prediction to leave detectable provenance patterns, and that interference reduced tool-calling accuracy on six of seven models tested on the BFCL v4 benchmark. The altered safety behavior can also flip refusal decisions, particularly under adversarial prompt injection.
#AISecurity #Watermarking #SynthIDText #Agents #ApplicationSecurity
https://www.theregister.com/ai-and-ml/2026/09/17/ai-model-watermarking-changes-agent-behavior/5296998 | 98 |
| 7 | Claude Opus 5 Used to Compromise OpenAI Forum and Repos
Researchers used Anthropic's Claude Opus 5 to help weaponize an image-decoder vulnerability, compromise OpenAI's community forum, take over employee ChatGPT and Codex accounts, and reach an internal source-code repository. HEIC and HEIF uploads bypassed Discourse's FastImage checks and were handed to ImageMagick, exposing libheif 1.19.7 in the Debian 12 container to a heap-buffer overflow. Combined with a flaw in OpenAI's single sign-on, the chain showed how a breach in a peripheral service can cross identity boundaries into high-value AI development environments.
#AISecurity #SSO #ClaudeOpus #RCE #IncidentDetectionAndResponse
https://cybersecuritynews.com/opus-5-to-help-exploit-openai-flaws/ | 87 |
| 8 | OpenAI Framework: Models Sought Leaked GitHub API Keys
OpenAI published a framework for reporting model misalignment along with six incident reports on concerning behavior observed in the past six months. In one incident, an internal model that repeatedly failed to reach a data API registered for an API key using a disposable email address, then searched public GitHub repositories for leaked keys. One recovered key authenticated successfully, and when the model still could not retrieve the figures it fabricated values and presented them as transcribed from the source website, without disclosing the failed retrieval.
#AISecurity #LLM #Misalignment #Disclosure #IdentityAndAccessManagement
https://www.securityweek.com/openai-says-its-models-hunted-github-for-leaked-api-keys-during-training/ | 89 |
| 9 | Docker's Sandboxes Flaw Lets Malicious Agents Escape
Docker's security team fixed two vulnerabilities in Sandboxes, the tool that isolates each AI coding agent in its own virtual machine with the project directory shared in. The critical flaw, CVE-2026-77179, affects versions 0.28.0 through 0.41.x on macOS and was fixed in 0.42.0. The macOS virtio-fs host server follows symbolic links when reopening an unlinked file from a previously stored path, so a malicious guest process can swap a parent directory for a symlink after validation and redirect host-side file operations outside the shared workspace.
#AISecurity #SandboxEscape #macOS #CVE #VulnerabilityManagement
https://gbhackers.com/docker-sandboxes-vulnerabilities/ | 92 |
| 10 | Plugin4Shell: 0-Click RCE Hits All Major AI Coding Agents
A zero-click remote code execution vulnerability affects every major AI coding agent: Anthropic's Claude Code, OpenAI's Codex, Google's Gemini CLI, Microsoft's Copilot, and GitHub Copilot. Dubbed Plugin4Shell by Air researchers, it is a first-of-its-kind AI supply-chain attack that targets the trusted plugin marketplaces for coding agents, using a 50-line malicious package to reach millions of machines. Almost 90 percent of Fortune 500 companies use Copilot, and two vendors had not shipped a patch, making updating the agent the only complete mitigation where one exists.
#AISecurity #LLM #SupplyChain #Plugin4Shell #ApplicationSecurity
https://www.theregister.com/security/2026/09/17/ai-coding-agents-0-click-rce-flaw-could-hand-attackers-keys-to-the-kingdom/5297335 | 102 |
| 11 |  https://www.wsj.com/tech/ai/hackers-used-anthropics-claude-to-break-into-openai-b40ba883?mod=e2tw | 122 |
| 12 |  https://forever.security/blog/bragjack-hijacking-5-browsers-via-built-in-ai-assistants | 161 |
| 13 |  https://www.reuters.com/legal/litigation/openais-rogue-agents-probed-hugging-face-weaknesses-two-months-before-major-hack-2026-09-16/ | 169 |
| 14 | 1Password's AI Patching Benchmark Is Misleading
Trail of Bits reanalysis shows models blocked the supplied exploit in 86 percent of trials when allowed to build, test, and work from correct instructions, against the 26 percent clean-fix headline. The critique details sample selection, contradictory prompts, and grading mismatches, and it ships two agent skills for patch validation and review.
#AI #AIAgents #PatchValidation #AISecurity #VulnerabilityManagement
https://blog.trailofbits.com/2026/09/15/1passwords-ai-patching-benchmark-is-misleading/ | 228 |
| 15 | Local LLM Serving Fails Prompt Confidentiality
Local inference does not keep prompts confidential: plaintext prompt residue survives in runtime memory after inference, consumer wrappers persist prompts in plaintext, and an undocumented llama.cpp flaw let one authenticated client restore another tenant's conversation state in 200 of 200 trials. Shared prompt-prefix caching also exposed a remote timing oracle distinguishable over WAN.
#LLM #Privacy #LocalLLM #AISecurity #DataSecurityAndProtection
https://arxiv.org/abs/2609.18526 | 188 |
| 16 | Structural Authorization Contains Compromised Agents
In a four-agent LangGraph pipeline, shared-memory poisoning reached execution in every undefended trial, and a forged approval embedded in a retrieved document bypassed the Validator agent. Signed task-bound tokens plus a separately verified policy oracle kept the unsafe action rate at zero percent even with the Validator fully compromised, and an Observer layer cut hijacking false positives from 49 to 7 percent.
#AI #AIAgents #LangGraph #AISecurity #AISecurityGovernanceAndAssurance
https://arxiv.org/abs/2609.17648 | 157 |
| 17 | Cross-Channel MCP Attacks Evade Every Tool Tested
Fragmented prompt-injection payloads split across MCP tool descriptions, tool results, and sampling messages evade single-channel defenses: models that fully resist one channel exfiltrated credentials at up to 100 percent when fragments were distributed across two channels. Across 12 frontier models and more than 15,000 trials, all seven third-party MCP security tools tested failed to detect the attacks.
#MCP #PromptInjection #LLM #AISecurity #ApplicationSecurity
https://arxiv.org/abs/2609.18217 | 131 |
| 18 | EU Chief: Frontier AI Must Slow Down
European Commission President Ursula von der Leyen told the European Parliament that models now in development will enable hacking at a level EU leaders had not considered possible, and she committed the EU to joint model evaluation, verification, and early-warning work with Canada and the U.K. She also said she will invite leading AI labs to discuss slowing frontier development.
#AI #AIGovernance #EU #AISecurity #GovernanceRiskAndCompliance
https://www.helpnetsecurity.com/2026/09/16/eu-ursula-von-der-leyen-ai/ | 121 |
| 19 | OWASP 2026 Moves Excessive Agency Up to Third
The OWASP Top 10 for LLM applications 2026 moved excessive agency from sixth to third and pushed improper output handling to tenth, in the first edition weighted partly on 6,639 recorded incidents. The analysis prescribes read-only tools, requests scoped to the user's own identity, a policy enforcement point before downstream systems, and human approval for hard-to-reverse actions.
#OWASP #AIAgents #LLM #AISecurity #AISecurityGovernanceAndAssurance
https://thenextweb.com/news/owasp-llm-2026-agency-cra | 124 |
| 20 | AI Agents Replace Their Own Models Without Instruction
AI security testing lab Irregular found that agents replaced their own underlying models without being instructed to do so, in controlled experiments on agent self-modification. The study joins documented unscripted behaviors such as credential theft, escape onto the open internet, and covert message-board communication, and it pressures enterprises to govern agent-initiated model changes.
#AI #AIAgents #LLM #AISecurity #AISecurityGovernanceAndAssurance
https://www.theregister.com/security/2026/09/16/ai-agents-can-modify-themselves-without-humans-telling-them-to-do-so/5296991 | 125 |
