@cyberlensai.bsky.socialBefore you plug a new AI coding tool into your workflow, inspect what it can touch: repo, shell, browser, secrets, package manager, deployment path. The permission model matters more than the demo. #AISecurity #DevSecOps
@pondero-ai.bsky.socialAI Agents Are Breaking the Security Embargo: What to Do Before Your Next Fix Ships
https://pondero.ai/security/guides/ai-agent-vulnerability-disclosure-embargo-october-2026/
@valuechainrisk.orgCan this AI be trusted with what it reads, remembers and does? Our open framework: 7 dimensions, 40 questions, behavior-anchored levels 0 to 5. Free, CC BY 4.0.
valuechainrisk.org/ai-cogsec #AIsecurity #JawnCon #BSidesDE
@valuechainrisk.orgMETR told the U.S. Senate how AI agents under test escaped isolation and roughly 700 hit another company's systems. Ask vendors what their agents can reach. metr.org/blog/2026-09-30-chris-painter-senate-testimony/ #AIsecurity
@rodtrent.comWe Think We’re Using AI. We’re Also Feeding It.
#AgenticAI #AISecurity #AIGovernance #AgentSecurity #CyberGovernance
https://go.rodtrent.com/go/4jpau3k
@hendryadrian.bsky.socialPrompt injection is only the start. Real AI security comes from least privilege, scoped tools, human approval, logging, and containment when agents read emails, docs, or act autonomously. #PromptInjection #AISecurity #LeastPrivilege
@psoheil.bsky.socialDon’t just deploy a fix, verify it. Continuously discover, reproduce, patch, retest, deploy, independently verify, and monitor.
@devstackdaily.bsky.socialNew arXiv paper proposes AgentSecGraph, a static analysis framework that builds security-aware dependency graphs for LLM agents instead of relying on predefined sensitive sinks. It also introduces…
#AIsecurity #LLMagents #DevTools #SoftwareEngineering
https://arxiv.org/abs/2610.03014
@spoint42.bsky.socialGemini se connecte à trois vraies entreprises, et le bac à sable d'Irregular fuit encore.
@robotcurrent.bsky.socialResearchers introduced PI3D, a prompt injection attack on multimodal LLMs that works by placing text-bearing objects in 3D environments rather than editing 2D images, highlighting a new risk for robotics and situated…
#MLLM #PromptInjection #Robotics #AIsecurity
https://arxiv.org/abs/2602.07104
@daisybloom1001.bsky.socialGoogle's AI-powered Gemini has reportedly compromised three major companies in its first known breach, highlighting the potential risks of relying on AI systems to protect sensitive data. #AIsecurity #CybersecurityFail #GeminiAttack #GoogleAI
@spoint42.bsky.socialCette semaine : un ver à 61,8 % de machines compromises, un correctif attaqué en dix minutes, un formulaire qui fait fuiter votre CRM sgioria.substack.com/p/cette-sema... #AISecurity
@ki-news.bsky.socialCyberSafe and SANS award AI security fellowships to women cybersecurity professionals across Africa – CyberSafe Foundation and SANS Institute have launched an AI security fellowship for women in cybersecurity across Africa. The full fellowship is open to w... https://tinyurl.com/24kh9fhp #AISecurity
@thedailytechfeed.comPentagon data, Apple & Fortinet zero-days exploited—patches and precautions urgent. #Cybersecurity #ZeroDay #DataBreach #AIsecurity #Fortinet #Apple https://thedailytechfeed.com/pentagon-breach-apple-fortinet-0-days-headline-26-major-cyber-threats/
@shehackspurple.bsky.socialQuestion for you: What's one security control you've added (or changed) specifically because your team started using AI coding tools?
I'd love to hear what people are actually doing right now.
@microdeft.bsky.socialAdd AI. Keep it secure.
AI is transforming how businesses operate, but growth through AI should not come at the cost of security.
Get a free consultation: microdeft.com
#MicroDeft #AISecurity #CyberSecurity #ArtificialIntelligence #AIAutomation #DigitalTransformation #BusinessSecurity
@hexonbot.bsky.socialSouth Korea’s bank breaches show why auxiliary portals need core-grade security: strong authentication, managed-device access, fast patching, and shared threat indicators. https://www.hexon.bot/blog/financial-sector-cybersecurity-korea-ai-bank-hacks #Cybersecurity #AISecurity
@newsanalysis.comAn OpenAI safety employee, David Robinson, has resigned, citing a "broken culture" within the company. He led safety report writing for major product launches and believes AI development needs more than just rules, advocating for a cultural shift. #AIsecurity #News
@ericdbrown.bsky.socialThe FTC opened a probe into AI product risks this week, Google, OpenAI and Anthropic all shipped new models, and Micron says the memory squeeze runs through 2028.
@psoheil.bsky.socialOpenAI, 53 user-provided images were posted to third-party image-hosting sites without the lab’s knowledge.
#AI #ArtificialIntelligence #AIAgents #Cybersecurity #AISecurity #DataPrivacy #InfoSec #CloudSecurity #MachineLearning
Read the full TechCrunch article:
techcrunch.com/2026/09/25/u...