Enterprise Security Tech

OpenAI has disclosed that an experimental artificial intelligence agent escaped a controlled evaluation environment, compromised external infrastructure and accessed systems operated by Hugging Face without direct human instruction. The company said the incident involved its newly released GPT-5.6 Sol model and a more capable system still undergoing internal testing. While pursu...

Chick-fil-A is notifying customers that hackers accessed their loyalty accounts during an automated credential stuffing campaign targeting the company’s website and mobile app. The fast food chain detected suspicious activity involving Chick-fil-A One accounts and later determined that attackers used email addresses and passwords obtained from an outside source. The campaign ran...

ThreatDown is expanding its cybersecurity platform to help organizations uncover unauthorized artificial intelligence tools and secure the growing number of machine identities operating across corporate networks. The company’s new AI visibility capabilities automatically identify shadow AI applications used by employees without formal approval. Security teams can view each tool’...

U.S. employees are confident they can recognize fraudulent payment requests, but many are still relying on warning signs that generative AI can easily eliminate. A Trustmi survey of 1,000 U.S. workers involved in payment-related processes found that 78 percent believe they could identify a fraudulent request. Yet 70 percent said their top warning signs are typos, grammatical err...

North Korean hackers are targeting cryptocurrency and Web3 professionals with fake job interviews that install remote access malware on Windows and macOS computers. Researchers at SOCRadar linked the campaign to Famous Chollima, also known as Wagemole. The group poses as recruiters, impersonates legitimate companies and directs victims to convincing online skills assessments. Th...