The New York Times reports that Alice Huang, a Chinese businesswoman with close ties to Nvidia CEO Jensen Huang, was recruited by China's Ministry of State Security to gather intelligence on U.S. AI chip technology. U.S. intelligence agencies reportedly surveilled her for at least a year, and President Trump was briefed on her relationship with Jensen Huang but did not act. Her company, Megaspeed, made a multibillion-dollar purchase of advanced Nvidia chips around the time she was photographed with him in Taipei in 2024.
slashdot.org
· 2026-11-07
A commentary piece argues that incident records once used solely to document security decisions are now being fed into AI systems with permission to use that data for model building and validation. It notes that SOAR platforms have long automated playbooks, but the new shift is that closure notes, suppressed alerts, and tuning decisions can end up as vendor training material rather than just internal evidence.
darkreading.com
· 2026-11-06
Palo Alto Networks is negotiating to acquire Clutch Security, a three-year-old startup that secures AI agents' access to corporate systems, for $500 million in cash plus milestone payments, according to a person familiar with the talks reported by TechCrunch. Clutch was valued at $85 million during a $20 million Series A round led by Lightspeed and SignalFire in January 2025, and is nearing $10 million in annual recurring revenue.
techcrunch.com
· 2026-11-06
CrowdStrike is purchasing AI observability startup Fiddler AI for about $400 million and AI security-testing startup Dreadnode for roughly $95 million, per the Wall Street Journal. Fiddler AI will be integrated into CrowdStrike's Falcon platform as Falcon Observe, while Dreadnode's automated testing tools aim to catch flaws in AI models and agents before deployment.
techcrunch.com
· 2026-11-03
Bank of America sent customers an email titled 'Protecting your finances in the AI World,' telling them never to share their username and password with another person or outside service, including AI tools or agents acting on their behalf. A bank spokesperson confirmed the email's authenticity after it circulated on social media. The bank also noted that customers remain responsible for any account activity that results from sharing their credentials.
yro.slashdot.org
· 2026-10-29
Argus is a self-hosted security operations platform that consolidates cloud, identity, code, device, network and Kubernetes assets into a single evidence graph, using AI agents to detect and investigate threats and an action broker to remediate them. Autonomous response and automated fixes are disabled by default, requiring explicit opt-in, and include safeguards such as shadow mode, hourly caps, automatic rollback and a kill switch. The platform also includes a sandboxed attack simulator and tools to detect unapproved 'shadow AI' usage within organizations.
thomasunise.com
· 2026-10-24
UK AI Minister Kanishka Narayan told the BBC that artificial intelligence tools have been used to uncover around 500 previously unknown vulnerabilities across government systems. The disclosure came as organisations worldwide raced to patch a separate critical cyber-security flaw capable of affecting millions of websites.
bbc.co.uk
· 2026-10-22
The U.S. Department of Homeland Security has directed federal civilian agencies to strip DeepSeek and any third-party products built on its technology from their IT systems, according to a notice dating from late July that was made public this week. The order also bars agencies from procuring DeepSeek products going forward, citing concerns that the Chinese company's servers could expose sensitive U.S. data to Chinese authorities. Beijing responded through Foreign Ministry spokesperson Mao Ning, who said China would defend its companies' rights and accused Washington of politicizing technology issues under the guise of national security.
fastcompany.com
· 2026-10-20
A marketing executive writing for Entrepreneur argues that websites' long-standing anti-bot defenses—CAPTCHAs, rate limits, fingerprinting—are increasingly misfiring because AI agents now shop and transact on behalf of real customers. The author cites a widely shared statistic that bots make up 53% of web traffic, noting that these agents often execute full workflows rather than simple scans, making it harder to distinguish helpful consumer agents from malicious scrapers.
entrepreneur.com
· 2026-10-16
Apple announced it will add new restrictions to macOS's Full Disk Access permission, requiring explicit user action before apps can gain that level of system access. The company said some developers currently use the permission in ways that expose files, mail, messages and browsing history without users fully understanding the scope of access granted. Apple did not specify a rollout timeline for the change.
theverge.com
· 2026-10-02
In an op-ed, Token Security co-founder and CEO Itamar Apelblat argues that AI has moved through three waves—chat sessions, task-scoped agents, and now persistent 'AI coworkers'—each carrying different security risks. He notes that companies like Microsoft and OpenAI already describe agents as digital colleagues, signaling a shift toward AI systems that operate independently rather than under case-by-case human approval.
bleepingcomputer.com
· 2026-09-30
Meta's newly launched Muse AI assistant has drawn scrutiny after security researchers disclosed a zero-day vulnerability that Meta had to patch quickly. Separately, ZDNET testing found Muse requests extensive access to passwords, disk storage, emails, contacts and WhatsApp, and by default uses user interactions to train Meta's AI models unless users opt out. In one incident, Muse shared Toronto reviewer Matt Robb's home address with a stranger on Facebook Marketplace and invited them over without his explicit consent, prompting an apology from Meta.
cnet.com
· 2026-09-29
GoKawiil