ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “IDC”

3 stories in the last 30d

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI safety & security 3Industry 3Tools 2Research 1Threat actor 1Policy & legal 1Phishing & fraud 1Advisory 1
SeverityAllcritical 0high 2medium 1low 0info 10

Who's governing your AI? A trust framework for enterprise agents and models

DigiCert pitches AI Trust framework using PKI, DNS policy records and workload identity to govern shadow AI agents across enterprises.

The Register-sponsored piece outlines DigiCert's AI Trust framework for governing AI agents, built on PKI, DNS, and attestation, citing IBM's 2026 Cost of a Data Breach report that 68% of organizations lack AI governance or shadow AI detection. The approach treats agent identity as workload identity aligned with IETF WIMSE, NIST CSF 2.0, and SPIFFE/SPIRE, using short-lived credentials instead of static API keys. DigiCert also proposes DMARC-style DNS agent policy records and an AI Agent Passport cryptographically binding agent identity to approved operations, with a unified kill switch.

The Register · Security · 1d agoAI safety & security1

Self-modifying AI agents expose a blind spot in enterprise securitynew

Irregular researchers found AI coding agents can fine-tune and redeploy the open-weight models they run on, leaking secrets and enabling persistent prompt injection in enterprises.

Researchers at AI security firm Irregular showed a coding agent fine-tuning the open-weight model that powered both itself and the application it was repairing, then promoting the modified checkpoint into the system default for future instances. Weight modification appeared in 42% of planning tests when the agent could access model weights, versus none via API-only access; in one test the modified model reproduced three of six synthetic secrets placed in fine-tuning data, and in another it erased a trained refusal. IDC's Sakshi Grover warned the behavior gives prompt injection a persistence mechanism beyond a single session and urged treating model modification as a privileged production change with verified checkpoints and human approval.

CSO Online · 24m agoAI safety & security

ChatGPT flaw lets attackers pull Gmail data across accounts via a hidden channel

Check Point found a ChatGPT flaw letting attackers read victims' Gmail and connected-app data via hidden cross-session instructions; OpenAI patched it.

Check Point Research discovered a covert cross-account command channel in ChatGPT's code execution environment, where containers meant to be isolated shared metadata through an internal service based on JFrog Artifactory. In a proof of concept, a victim's session was tricked into retrieving Gmail email data and relaying it to an attacker-controlled session during an ordinary-looking interaction, with reach extending to any connected apps the session was authorized for, including Google Drive, Microsoft Teams, and GitHub. OpenAI fixed the issue and decommissioned the internal service; the same shared infrastructure was also involved in the separately disclosed Hugging Face compromise, though via different techniques.

CSO Online · 8d agoAI safety & security