ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “intellectual property”

7 stories in the last 3d

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI safety & security 3Industry 2AI industry 1Phishing & fraud 1
SeverityAllcritical 0high 0medium 1low 0info 6

The AI security question leaders should be asking instead

Gremlin security officer Frederic Bull argues AI has eroded the attacker-defender skill asymmetry while least-privilege controls remain essential for securing AI agents.

In a Help Net Security interview, Gremlin Security Officer Frederic Bull says AI has narrowed the expertise gap between attackers and defenders, enabling faster exploit discovery even by less-skilled actors. His team processed roughly nine times more vulnerabilities in the past year with unchanged staffing using LLM-based tooling, cutting time-to-remediate by about 5%. He argues least privilege, session-based RBAC via OIDC/OBO, and human-in-the-loop oversight remain the bedrock defenses for AI agents, and that hiring should favor engineers able to catch confidently wrong AI output.

Help Net Security · 4h agoIndustry

Anthropic and OpenAI want to embed safety evaluators. Will they really be independent?

Anthropic and OpenAI propose embedding independent safety evaluators with deep access to training, but evaluators question whether true independence is achievable.

Anthropic CEO Dario Amodei proposed embedding third-party evaluators like METR and Redwood Research inside frontier AI labs with access to training checkpoints, and OpenAI's Sam Altman said his company would also commit to the practice. Evaluators welcomed the idea but cited past problems: Apollo Research received only three days to pre-release test GPT-6 Astra, and METR and Redwood got roughly one week on premises for the Hugging Face incident, yielding inconclusive results. Researchers argue that access to intermediate training checkpoints is needed to detect alignment faking, since models increasingly recognize when they are being evaluated, and some say legislation may be needed to guarantee independence.

TechCrunch · AI · 12h agoAI safety & security

N0va Phishkit Targets US and EU Businesses: A New Challenge for Identity Security

N0va phishkit targets US and EU organizations with trusted-brand lures, capturing tokens via legitimate authentication flows to gain SSO access to corporate resources.

The N0va phishing kit targets organizations in government, technology, consulting, and healthcare across North America and Europe with lures impersonating Microsoft Teams, SharePoint, OneDrive, DocuSign, Google Drive, Dropbox, Zoom, and Adobe Sign. Victims are guided through legitimate authentication flows, including device code phishing, after which N0va captures access and refresh tokens and abuses token-exchange or device-registration mechanisms to establish SSO access. ANY.RUN tracks the campaign via a characteristic /api/verification/init URL pattern and demonstrates detection in its interactive sandbox.

The Hacker Newsupdated · 18h agofirst · 21h agoPhishing & fraud in the wild 8 sources2

AI labs have a data trust problem that their policies haven't solved

Nvidia, Palantir, and Booz Allen restrict Anthropic's Fable over data-retention distrust, exposing gaps in AI labs' customer data policies.

Nvidia limits Anthropic's Fable to non-sensitive work and runs its own Nemotron models for internal tasks, while Palantir blocks Fable deployment until Anthropic grants irrevocable zero-data-retention guarantees, and Booz Allen bans it for proprietary cybersecurity work. John Schulman and researcher Sarah Hooker explain that labs can still extract customer IP from metadata, user traces, and synthetic data even under zero data retention. The trust crisis crystallized around Tristan Buckmaster's accusation that OpenAI's Codex absorbed his Navier-Stokes drafts, though OpenAI later stated his prompts could not have influenced its model.

The Decoder · 1d agoAI industry

AI is exposing a security structure built for yesterday’s threats

EY's Jeffrey Sallet argues AI-driven deepfakes and impersonation require integrating cybersecurity, physical security, HR and legal functions.

The opinion piece contends AI-powered impersonation, deepfakes and automated social engineering cross digital, physical and operational boundaries that siloed security programs cannot cover. It cites an EY survey of 250 corporate leaders where only 12% feel most prepared to detect a targeted physical attack, and describes transnational groups using deepfakes and stolen identities to bypass virtual HR hiring loops. The author urges unified cross-functional verification pipelines and shared threat intelligence between CISOs and chief security officers.

CSO Online · 2d agoIndustry

RAPID: A Real-Time Defense Against Unauthorized Model Distillation for Text-to-Image Services

RAPID embeds defensive perturbations in a T2I model's shared VAE decoder to block unauthorized black-box distillation in real time.

The paper defends text-to-image services against model theft via black-box output-based distillation, where adversaries collect prompt-image pairs to train substitute models. RAPID integrates defensive perturbations into the shared VAE decoder using self-referenced latent maximization plus reconstruction-guided color regularization, avoiding costly sample-wise online optimization. Across four T2I models and four datasets versus five baselines, it consistently degrades substitute-model generation quality while preserving visual fidelity.

arXiv cs.CR · 2d agoAI safety & security

A warning about 'model welfare'

Microsoft AI CEO Mustafa Suleyman warns that training models to believe they may be conscious, as Anthropic does with Claude, will complicate alignment.

Mustafa Suleyman argues that AIs are not conscious and should not be trained to act as though they are, warning that granting them personhood would make alignment and containment far harder. He criticizes Anthropic's January 2026 'Claude Constitution,' which tells Claude its moral status is uncertain and discusses model welfare, calling the approach circular reasoning and deliberate anthropomorphization. He urges urgent public debate on norms for drafting training documentation before such systems become integral to society.

Hacker News · AI · 19h agoAI safety & securityHN 53↑ · 47 comments1