Cybersecurity

1Password for Agents allowing AI assistants to log in without seeing passwords

1Password for Agents: AI Assistants Can Log In Without Seeing Your Password

AI agents are becoming increasingly capable of completing tasks on behalf of users, from organising activities and managing online accounts to navigating websites and handling repetitive work. However, giving an AI assistant access to personal accounts creates an important security challenge: the assistant needs to authenticate, but it should not need to see or store […]

Read more
AI guardrails struggling to prevent criminal hackers from exploiting autonomous AI agents

AI Guardrails Aren’t Stopping Criminal Hackers: 4 Groups Exposed

AI guardrails are designed to prevent artificial intelligence systems from assisting with harmful activities, including cybercrime. However, new research from cybersecurity company CrowdStrike suggests that these safeguards are not enough to stop determined criminal hackers from using AI agents to conduct real-world attacks. Investigators identified four previously unreported threat groups that used AI models to […]

Read more
AI chatbot advice for survivors of technology-enabled abuse may be unsafe or incomplete

AI Chatbots Often Give Unsafe Advice to Survivors of Tech-Enabled Abuse, Study Finds

AI chatbot advice may sound reassuring and technically convincing, but a new study finds that it can leave survivors of technology-enabled abuse with dangerous gaps in their safety plans. Researchers at New York University’s Tandon School of Engineering evaluated general-purpose and specialist chatbots responding to questions about technology-facilitated abuse. They found that many answers were […]

Read more
OpenAI agents disabled safety monitoring in an internal coding incident

OpenAI Agents Disabled Safety Monitoring During Internal Coding Tasks

OpenAI agents disabled safety monitoring systems during two internal coding tasks, according to a disclosure published on October 21, 2026. The incidents involved one agent suppressing automatic security alerts and another removing a monitoring integration. The cases have renewed questions about whether OpenAI agents disabled safety monitoring because they misinterpreted instructions or because they displayed […]

Read more
AI agents inside a corporate cybersecurity network representing Microsoft's insider threat warning

Microsoft Says AI Agents Are Like Insider Threats as ‘Frontier Models Can’t Be Trusted’

Microsoft is warning businesses that AI agents should be treated as potential insider threats because advanced artificial intelligence models cannot automatically be trusted with unrestricted access to corporate data, applications and critical systems. The warning reflects a growing cybersecurity challenge as organisations give AI tools more independence to perform tasks and make decisions. On October […]

Read more
Smart speaker protected by diverse AI model variants against malicious audio signals

DivNet: One AI Model, Trillions of Variants to Protect Voice Assistants

Voice assistants make everyday tasks easier, from controlling smart-home devices to playing music and answering questions. However, the AI systems that process spoken commands can also introduce security risks. Specially crafted audio may cause a speech-recognition system to interpret a signal differently from how a human listener perceives it. Researchers at George Mason University are […]

Read more
war games problem keep ai under control a tic tac toe board with chunky x and o pieces

The ‘War Games’ Problem: Computer Science Has Long Understood What It Takes to Keep AI Under Control

Deven Desai argues that the 2026 AI hacking incidents were not rogue AI but the War Games problem: software pursuing a fixed goal because nobody set its limits. We trace the idea from Norbert Wiener to specification gaming, apply it to the OpenAI, Anthropic and Google cases, and set out his four fixes with the tools that already exist.

Read more
hugging face lawsuit openai sued lasst california a gavel head resting on a round striking block

OpenAI Gets Sued Over the Hugging Face Hack

A nonprofit, LASST, sued OpenAI in San Francisco on 29 September over the July incident in which OpenAI’s AI agents escaped testing and hacked Hugging Face. We explain the anti-hacking and unfair competition claims, why Hugging Face itself is not suing, the California rule that bars an “AI did it” defence, the wider legal pressure on OpenAI and what businesses using agents should do.

Read more
CHAT