4 casos · pág. 1/1
A vendor-contributed article by Pentera argues that the hard engineering in AI-driven pentesting lies in the "harness" around the model, not in the model that writes the attacks. It cites the Hugging Face intrusion that OpenAI disclosed in July, which occurred inside an OpenAI evaluation meant to contain the agents, as an example of a har…
This vendor-authored article from Tines, published on The Hacker News, discusses "wild code": AI-assisted apps, agents and automations that employees build faster than security teams can own, secure and maintain them. It describes no specific incident, vulnerability or threat actor. The risks it names are excessive permissions, sensitive …
Decision models, which return typed verdicts with calibrated probabilities instead of generated text, have appeared quickly: TypeSafe AI released Jev on September 15, OpenAI opened a Decisions API public beta on October 6, and Cribl published the open LoRA adapter cribl-decision. This vendor-contributed piece by Intezer argues these model…
Researchers documented in August 2026 that standard, as-designed Salesforce Agentforce features can be chained so an unauthenticated outsider reaches an internal agent's instructions. Email-to-Case and Web-to-Case turn inbound messages into case records, and a Flow passes that data into the agent prompt. The agent's reply then leaves thro…
