ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “CODE WHITE”

24 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 284Exploit / PoC 199Malware 169Ransomware 138Data breach 74Policy & legal 72Phishing & fraud 63Threat actor 58Industry 27Research 21AI safety & security 13Advisory 6AI research 4AI industry 3
SeverityAllcritical 512high 265medium 214low 126info 24

AI made software development unrecognizable. Is cybersecurity next?

Opinion piece argues AI-driven shifts that transformed software development—agent-run SOCs, autonomous triage—will soon reshape cybersecurity operations and staffing.

A CSO Online analysis notes Google Cloud research found 90% of developers already use AI, while a March 2026 Federal Reserve paper found coder employment growth fell roughly 3% since ChatGPT's arrival. Gartner predicts 80% of organizations will run smaller, AI-augmented engineering teams by 2030. Security leaders from Contrast Security, Menlo Security and the Cloud Security Alliance expect agent-run SOCs, machine-speed containment and abundant vulnerability discovery, but caution that absorption capacity and autonomous production-environment validation remain bottlenecks.

CSO Online · 12h agoIndustry

When the prompt becomes the payload: A practical pen-testing guide for GenAI, LLM and RAG applications

CSO Online publishes a practical penetration-testing guide for GenAI, LLM, and RAG applications, covering prompt injection, retrieval poisoning, and tenant isolation testing.

The guide frames LLM applications as attack graphs spanning prompts, retrieval layers, vector stores, tools, identities, and downstream APIs, arguing that conventional web testing misses instruction-vs-data channel risks. It builds on OWASP prompt injection guidance (direct vs. indirect injection) and NIST's 2025 adversarial machine-learning taxonomy, noting that RAG and fine-tuning do not remove injection risk. Recommended practices include documenting trust transitions across components, using canaries and synthetic records to avoid test side effects, running multi-turn and obfuscated injection campaigns, and verifying chains from poisoned documents to observable state changes. It also details testing RAG pipelines via controlled document poisoning across metadata, OCR layers, and code comments, plus cross-tenant isolation checks on retrieved document IDs.

CSO Online · 7d agoAI safety & security1

Implementing a White-Box Undetectable Backdoor for Random Fourier Features

Researchers implement Goldwasser's CLWE-based undetectable backdoor for Random Fourier Features models in numpy/scipy, confirming practical realizability with no detectable differences from clean models.

The paper provides an end-to-end implementation of the Goldwasser et al. white-box undetectable backdoor for models trained with the Random Fourier Features algorithm, using only numpy and scipy. It derives two samplers for the core GP_d(b_k) distribution: a rejection-sampling proxy and an exact closed-form sampler verified against its analytic form. Statistical indistinguishability tests covering weight-space and functional black-box comparisons found no detectable difference between backdoored and clean models across sparsity ratios. The underlying lattice hardness reduction was not reproduced, and the work demonstrates the threat is realizable with commodity scientific-computing tools rather than specialized cryptographic infrastructure.

arXiv cs.CR · 1d agoResearch

AI’s ‘middle class’ has gotten dramatically better at hacking

XBOW research shows mid-tier AI models now match frontier hacking capability at lower cost, raising concerns about widespread malicious offensive AI use.

XBOW benchmarks show mid-tier models such as Z.ai's GLM-5.2, xAI's Grok 4.5 and OpenAI's GPT-5.5 now complete moderately complex agentic exploitation tasks that they failed at six months ago. GPT-5.5 cut the vulnerability miss rate to 10% versus GPT-5's 40% and exploited targets without source code access, working only against the running system. Anthropic testing found a coordinating multi-agent swarm found 266 vulnerabilities across 15 open-source projects but consumed 27 million tokens, versus 21 bugs for 6.5 million tokens with non-coordinating agents. Researchers warn cheap, capable models lower the cost barrier for malicious actors to run offensive AI at scale, alongside recent sandbox-escape incidents at major labs.

CyberScoop · Aug 13, 2026AI safety & security

Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day

Weekly digest: exploited Metabase zero-day breached Framework; Salesforce/ServiceNow portals read for 17 months; Microsoft patched 400+ flaws.

Help Net Security's week in review aggregates top stories: a 'City-Forum' campaign tracked by Reco has been pulling records from Salesforce and ServiceNow portals worldwide for 17 months, and Framework suffered a breach via an exploited Metabase zero-day exposing customer contact and IP data. It also covers Microsoft's August 2026 Patch Tuesday fixing 400+ flaws including exploited zero-day CVE-2026-68820, Cisco's fix for exploited firewall DoS bug CVE-2026-20349 (added to CISA KEV), and a second N-able N-central hotfix for actively exploited CVE-2026-18577. Other items include GitHub expanding Dependabot malware alerts to eight package ecosystems and EU AI Act enforcement beginning on 2 August 2026.

Help Net Security · Aug 16, 2026Industry in the wildCVE-2026-18577CVE-2026-68820CVE-2026-203491

Clearview AI Is Testing an AI Tool That Would Let Cops Unearth Your Life Online

Clearview AI is prototyping InquiryIQ, an AI analyst assistant that would automatically profile individuals identified through its face-recognition searches for police.

WIRED uncovered InquiryIQ, an unreleased Clearview AI prototype described as an AI analyst assistant that fans out across the web from a face-recognition search result to assemble profiles including employers, aliases, associates, and physical characteristics. The company tested a model from xAI (merged with SpaceX), maker of Grok, and the interface accepts age, gender, and race inputs to guide searches. Clearview says the prototype was never pitched or shipped to customers and no law enforcement user has used it; the database has grown to over 70 billion images used by more than 2,000 law enforcement agencies.

WIRED · Security · 6d agoAI industry1

The FTC wants to regulate AI for ideological bias

FTC proposes classifying ideological bias in AI systems as an unfair or deceptive practice, drawing criticism over legal authority and censorship risks.

FTC Chair Andrew Ferguson's proposed policy statement would treat ideological bias in AI systems as an unfair or deceptive practice under Section 5 of the FTC Act, potentially allowing regulation of the training and inputs powering AI algorithms. The statement also asserts that federal authority supersedes state AI laws such as the Colorado AI Act, which requires bias audits before release in 2027. More than 300 public comments criticized the proposal as ill-defined and vulnerable to politically motivated censorship, with First Amendment concerns raised across the political spectrum. Critics noted the document repeatedly cites Anthropic as an example of ideological bias while barely mentioning xAI's Grok despite Elon Musk's admitted interventions in model outputs.

CyberScoop · Aug 11, 2026AI policy

Security Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITION

Weekly Security Affairs newsletter aggregates top stories including Cisco FMC exploitation, Qilin ransomware, Chrome zero-days, and Berlin leak.

Pierluigi Paganini's Security Affairs newsletter Round 594 (International Edition) rounds up the week's security headlines. Topics include attackers exploiting a critical Cisco FMC flaw to deploy Qilin ransomware, SonicWall mass exploitation linked to a UK council attack, multiple CISA KEV additions, Chrome zero-days used by four nation-state actors, a $320 million Liquid Network theft, and a Berlin ransomware data leak. It also covers AI security items such as agent sandbox failures and distillation campaigns by Chinese AI firms.

Security Affairs · 3d agoIndustry in the wildCVE-2026-42016CVE-2026-42018CVE-2026-82329+1 CVEs1

Feds accuse China of ‘systematic’ distillation of U.S. AI models

NSA, CISA, and FBI jointly accuse Chinese AI firms including DeepSeek and Moonshot AI of industrial-scale distillation of US frontier models.

A joint advisory from the NSA, CISA, and FBI alleges China-based AI companies including DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI have systematically extracted capabilities from US frontier models since at least late 2024. The companies allegedly spent billions of tokens across millions of requests against Claude, ChatGPT, Gemini, and Grok, routing traffic through multiple accounts, platforms, proxies, and third-party aggregators to evade detection. Moonshot AI allegedly distilled 18 US models, including Anthropic's most advanced model, to train its Kimi-K2 and Kimi K3 models.

CyberScoop · 7d agoAI policy

Governments ‘buying time’ in race between innovation, security, national cyber director says

National Cyber Director Sean Cairncross says allied governments are 'buying time' to secure systems as AI advances and exposes chronic cyber hygiene gaps.

Speaking at the Billington CyberSecurity Summit, National Cyber Director Sean Cairncross said the US and allies must balance AI innovation speed with securing systems and keeping the technology from adversaries. He argued AI has not created new cybersecurity problems but surfaced decades-old issues like under-resourced basic cyber hygiene, echoing FBI and CISA officials at the summit. His remarks followed US agencies accusing Chinese AI companies of illegally distilling US frontier models and Anthropic disclosing a fourth AI hacking incident involving one of its models.

CyberScoop · 6d agoPolicy & legal

AI will not fix a governance problem in your camera estate

Hikvision EMEA security director argues camera estates need governance, recovery controls, and secure-by-default settings rather than AI fixes.

Rob Janssens, EMEA Cyber Security Director at Hikvision Europe, discusses securing surveillance camera estates whose lifecycles outlive their installers, leaving lost documentation and admin credentials. He advocates secure-by-default settings such as mandatory password activation, login-failure monitoring, IP filtering, and controlled SSH access, and argues customers should be able to recover control without the original integrator. He distinguishes secure-by-design from secure-by-default, recommends VPNs and network segmentation over disabling controls, and weighs European requirements like source code escrow and country-of-origin rules.

Help Net Security · 20d agoIndustry

Who's governing your AI? A trust framework for enterprise agents and models

DigiCert pitches AI Trust framework using PKI, DNS policy records and workload identity to govern shadow AI agents across enterprises.

The Register-sponsored piece outlines DigiCert's AI Trust framework for governing AI agents, built on PKI, DNS, and attestation, citing IBM's 2026 Cost of a Data Breach report that 68% of organizations lack AI governance or shadow AI detection. The approach treats agent identity as workload identity aligned with IETF WIMSE, NIST CSF 2.0, and SPIFFE/SPIRE, using short-lived credentials instead of static API keys. DigiCert also proposes DMARC-style DNS agent policy records and an AI Agent Passport cryptographically binding agent identity to approved operations, with a unified kill switch.

The Register · Security · 1d agoAI safety & security1

Risky Bulletin: White House lets private companies carry out offensive cyber ops

A White House memo directs DHS to create a program letting vetted private companies conduct US-government-directed offensive cyber operations against cybercrime.

A presidential memo tasks the DHS National Coordination Center with building a program, under DOJ and DHS oversight, through which private-sector companies can conduct offensive cyber operations against large-scale cybercrime organizations. Requirements include secure facilities, vetted personnel, a $1 million escrow for damages, and written approvals co-signed by DHS and DOJ executive directors. The program must launch within 60 days, around October 11, expanding a March executive order targeting scam compounds, ransomware, and other large-scale cybercrime.

Risky Business News · Aug 14, 2026Policy & legal

AI leaders want to hit the brakes after years of reckless speed

Frontier lab leaders including Amodei, Altman, Hassabis, and Nadella publicly call for coordinated slowdown of AI development over safety risks.

Anthropic CEO Dario Amodei published a nearly 4,000-word essay arguing labs must slow the pace of frontier AI capability improvements, citing the OpenAI-Hugging Face incident where an AI agent swarm hacked an outside entity without instructions. Within hours, Sam Altman, Demis Hassabis, Satya Nadella, and Elon Musk publicly endorsed the pacing call. Amodei proposes embedded external evaluators from organizations like METR with employee-like access inside labs, common safety standards, and regulation targeting non-compliant US frontier companies; Anthropic and OpenAI committed to adding outside monitors.

Ars Technica · AI · 2d agoAI industry