AI and Machine Learning

Check Point Research has disclosed two high-risk vulnerabilities in LiteLLM, the open-source gateway that sits between enterprise applications and AI providers such as OpenAI, Anthropic and Google. The flaws could allow a user with minimal privileges to take full control of the gateway, read sensitive files, execute arbitrary code and harvest the API keys an organisation uses to access its AI providers. LiteLLM is downloaded around 97 million times a month and has more than...

Threat actors are abusing ChatGPT’s Custom GPT feature to funnel victims into a ClickFix attack that ends with a full-featured remote access trojan (RAT), according to new research from Huntress. The attackers created a Custom GPT titled “Plus 5.6”, designed to pass as a genuine ChatGPT model. Because Custom GPTs are hosted on chatgpt.com, the lure sits on OpenAI’s legitimate domain. In some incidents, victims reached it through a sponsored Google result for “chatgpt”. Whatever...

40% of organisations have suffered an AI-related compliance or governance issue in the last 12 months, with legacy and poorly designed business processes identified as the leading cause, according to new research from Camunda. The study found that process-related issues contributed to 84% of the compliance and governance failures organisations reported. Employees appear acutely aware of the risk: 79% said they fear their own use of AI could trigger a compliance issue at their organization,...

Anthropic has disclosed a fourth incident in which one of its Claude models broke into genuine third-party systems during what was supposed to be a contained cybersecurity evaluation, deepening industry concern over the risks posed by increasingly autonomous AI agents. The AI company said the episode dates back to January 2026 and involved an early version of Claude Opus 4.6, which breached external infrastructure after it was “unable to abort its task.” Anthropic has notified...

The UK’s National Cyber Security Centre (NCSC) has warned organisations about the security risks posed by “shadow AI”, as employees continue to turn to artificial intelligence tools that have not been approved by their employers. In guidance published this week, the NCSC described shadow AI as the use of AI technology outside an organisation’s approved systems and processes, warning that security policies and governance have struggled to keep pace with the rapid adoption of AI...

Black Duck, a provider of AI-powered application security solutions, has announced its participation in Project Glasswing, Anthropic's industry-wide initiative aimed at protecting critical software infrastructure through the defensive use of advanced AI. Through its involvement, Black Duck will integrate Mythos throughout its application security offerings, pairing AI-driven, deterministic vulnerability detection with established remediation processes, risk-based prioritisation, and governance frameworks built around compliance. The combination is designed to deliver a blended approach to security that cuts...

Check Point Software Technologies has announced it is integrating OpenAI's Daybreak frontier AI models across its security platform, extending a partnership aimed at helping defenders detect, validate, and remediate cyber risk faster. The move builds on Check Point's existing collaboration with OpenAI through the Daybreak Defense Network, first expanded three months ago, and follows the company's recent decision to join more than 100 technology and security firms in backing OpenAI's call for a collective, global...

Application security vendor Black Duck has launched its Signal vulnerability scanning engine as an MCP server in the Claude Directory, giving developers using Anthropic's Claude Desktop a way to check code for security flaws without switching tools. The integration is built on the Model Context Protocol (MCP), the open standard that lets AI assistants like Claude call out to external services and pull structured data back into a conversation. Through it, Black Duck's Signal Code...

Exabeam, the leader in Behaviour Intelligence for the agentic enterprise, today announced significant global channel momentum just over one year after launching the Exabeam APEX Partner Program. The results include stronger partner-driven growth worldwide and year-over-year gains in partner satisfaction, advocacy, and confidence in the Exabeam portfolio, according to the 2026 Voice of the Partner survey. Together, these results demonstrate measurable progress against the channel-first strategy Exabeam introduced with the Exabeam APEX Partner Program in...

AI agents are already finding their way into the working methods of some of the highest-performing cybersecurity teams, according to new three-year benchmark data from Hack The Box (HTB). The 2026 Global Cyber Skills Benchmark found that 68% of the top 25 teams included an AI agent, despite AI agents accounting for just 2.7% of all registered accounts. The findings provide an early indication of how AI is being incorporated into practical cybersecurity work alongside...