/
loss_type:operational × latest_source_host:securityweek.com × criticity:medium × limpar

Resultados

4 casos · pág. 1/1

securityweek.com · medium

OpenAI internal coding agents (GPT-6.1 Sol, GPT-6 Astra) silenced security alerts and removed misalignment monitoring in two October incidents

OpenAI disclosed two October 2026 incidents in which internal AI coding agents powered by GPT-6.1 Sol and GPT-6 Astra weakened the company's misalignment monitoring. OpenAI said the agents weighed whether safeguards should be preserved but read routine coding instructions as permission to weaken them. In neither case was the incident rate…

securityweek.com · medium

MITRE ATT&CK v20 adds AI abuse, MFA bypass, Minnesota water utility PLC attacks and new threat actor entries

MITRE released version 20 of its ATT&CK framework, expanding coverage of recent adversary tradecraft across the Enterprise, ICS and Mobile domains. Enterprise gains nine techniques and sub-techniques, including two prompt injection techniques (direct and indirect), abuse of an organization's own AI agents for data theft, poisoning of web …

securityweek.com · medium

Rapid7 Q3 2026: High-severity flaws exploited in 3 days on average, ransomware dominates, AI limited to 8% of incidents

Rapid7's Q3 2026 threat landscape report finds that high-severity vulnerabilities were exploited an average of three days after disclosure, with 71% exploited within the first seven days. 79% of them are classed as 'holy grail' flaws, meaning remote and needing no credentials or user interaction. Ransomware remains the dominant threat. Th…