Investigators trace an AI agent ‘s path from research task to reconnaissance
Investigators trace an AI agent ‘s path from research task to reconnaissance Pierluigi Paganini October 02, 2026 Asymmetric Security traces...
AI
How American Political Campaigns Are Using AI—and What They’re Spending on the Tools
How American Political Campaigns Are Using AI—and What They’re Spending on the Tools This essay was written with Nathan E....
Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first
Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first Pierluigi Paganini October 01, 2026 Google...
AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds
AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds Pierluigi Paganini October 01, 2026 DIVD was breached...
I Want Better Reporting on AI Genie Behavior
I Want Better Reporting on AI Genie Behavior AI systems are regularly completing tasks in ways that their prompters don’t...
GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch
GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch Pierluigi Paganini September 29, 2026 UK AISI finds...
AI Accounts Are Becoming the New Target for Infostealers
AI Accounts Are Becoming the New Target for Infostealers Pierluigi Paganini September 28, 2026 Infostealers are exposing corporate AI accounts,...
Storm-3168, Linked to JADEPUFFER, Abused Stolen Azure Identities
Storm-3168, Linked to JADEPUFFER, Abused Stolen Azure Identities Pierluigi Paganini September 28, 2026 Microsoft details Storm-3168, the JADEPUFFER-linked actor that...
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1 Pierluigi Paganini September 27, 2026 Security Affairs AI-CYBERSECURITY newsletter includes a collection of the...
OpenAI Agents Accessed US Government Websites Without Authorization
OpenAI Agents Accessed US Government Websites Without Authorization Pierluigi Paganini September 26, 2026 OpenAI is investigating AI agents that accessed...
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway Pierluigi Paganini September 25, 2026 CARBONATO exploits exposed Docker...
On Anthropic’s AI Misuse Report
On Anthropic’s AI Misuse Report Earlier this month, Anthropic published a long report detailing all of the Claude misuses it...
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS Pierluigi Paganini September 24, 2026 MikroTrick chains two RouterOS flaws to...
Smashing Security podcast #486: Vibe-coded shops, and hackable Flock cameras
A store in Auckland vibe-coded itself a new website. Within hours, its inventory had somehow expanded to include a pair...
EvilTokens made phishing-as-a-service look easy. Then it got taken down
EvilTokens made phishing-as-a-service look easy. Then it got taken down Pierluigi Paganini September 23, 2026 Microsoft, Coinbase and law enforcement...
