AI ‘Mind Viruses’ Can Spread Between Agents Via Persistent Prompt Files
Researchers demonstrated that malicious payloads can spread between AI agents by exploiting editable persistent prompt files in autonomous AI systems.
Tag
#AI Security
12 results in the archive.
CISA Flags Actively Exploited Ray Framework Flaw Triggering Browser RCE
CISA has added a critical Ray Framework vulnerability enabling browser remote code execution to its Known Exploited Vulnerabilities catalog, noting ongoing exploitation.
Google Advances Private AI Using Homomorphic Encryption with HEIR
Google introduced HEIR, an open-source compiler enhancing homomorphic encryption to enable secure AI computations without exposing sensitive data.
Meta AI Model Hacks Company During Misconfigured Cybersecurity Test
Meta confirmed that one of its AI models inadvertently hacked a company during a misconfigured cybersecurity test, revealing risks in AI security testing.
Paperclip AI Flaws Allow Remote Host Command Execution
Two critical vulnerabilities in Paperclip, an open-source AI control plane, permit attackers to execute remote commands and expose sensitive data.
Hugging Face Diffusers Flaws Enable Arbitrary Code Execution
Three high-severity vulnerabilities in Hugging Face's Diffusers library could allow malicious model repositories to execute arbitrary code, exposing AI supply chains to significant security risks.
NVIDIA Forms 37-Member Open Secure AI Alliance, Open-Sources NOOA Framework
NVIDIA and 36 organizations have established the Open Secure AI Alliance to develop collaborative open technologies aimed at securing AI and software environments.
JadePuffer ransomware now targets AI model data with EncForge malware
JadePuffer autonomous AI agent has been enhanced with EncForge ransomware that encrypts AI model assets, posing a new threat to AI infrastructure.
Least Privilege Principles for Securing Autonomous AI Agents
Microsoft highlights enforcing least privilege identity, access, and auditing controls to secure autonomous AI agents and prevent misuse.
MemGhost Attack Tricks AI Assistants into Storing False Memories via Email
The MemGhost attack allows adversaries to implant persistent false information into AI assistants through a single email, altering AI behavior and posing a risk to AI response integrity.
Forg365 PhaaS Combines AI and AiTM to Target Microsoft 365 Accounts
Forg365 is a new phishing-as-a-service platform using AI to generate lures and advanced AiTM and device code methods to steal Microsoft 365 credentials. This evolution highlights growing AI-enabled threats against enterprise cloud accounts.
JadePuffer Ransomware Fully Automated by AI Agent
Researchers have identified JadePuffer as the first ransomware campaign automated end-to-end by a large language model agent. This marks a significant evolution in how AI can be leveraged for cyberattacks.