Search This Blog
Powered by Blogger.

Blog Archive

Labels

Footer About

Footer About

Labels

Load More
Trendy Right Now

Popular Posts

Showing posts with label Cyber Security. Show all posts
MITRE ATT&CK
AI Abuse Critical Infrastructure Cyber Security MFA Bypass MITRE ATT&CK

New MITRE Framework Tracks AI Attacks and Water Utility Breaches

 

MITRE has released ATT&CK v20, expanding its widely used cybersecurity framework to reflect how attackers now exploit artificial intelligence, evade multi-factor authentication (MFA), and target operational technology in critical infrastructure. The update adds nine new Enterprise techniques and sub-techniques, alongside significant changes to the Industrial Control Systems (ICS) domain. 

The most notable Enterprise additions focus on AI abuse. MITRE now distinguishes between direct prompt injection, where malicious instructions are typed into an LLM interface, and indirect prompt injection, where harmful instructions are hidden in content the model processes. The framework also documents attackers using an organization’s own AI agents to steal data, poisoning web content to manipulate AI search or assistant recommendations, and disrupting LLM-based malware analysis. 

Defenses must evolve with new threats

ATT&CK v20 also addresses authentication and bot defenses. A new technique covers the theft of application-specific passwords, which can let attackers sign in without triggering an MFA prompt. Another tracks CAPTCHA bypass, including automated solving and methods for avoiding the checks altogether. MITRE additionally expanded coverage of compromised software dependencies and development tools to include IDE and coding-agent configuration files.

In the ICS domain, MITRE added a campaign involving attacks on internet-exposed programmable logic controllers at more than 30 water and wastewater utilities in Minnesota, which locked operators out of their systems. Although some reporting has linked the broader activity to Iranian-affiliated actors, MITRE says attribution for the Minnesota intrusions remains unconfirmed. A second campaign describes an AI-assisted breach of Mexican government institutions that crossed IT and OT environments and reached a municipal water utility. 

The release also refreshes threat-actor intelligence and detection guidance. MITRE added Nimbus Manticore, an IRGC-associated espionage group targeting aerospace, defense, and telecom organizations, while updating entries for Salt Typhoon and APT38. Defenders receive 15 new detection strategies—six for Enterprise and nine for ICS—supported by 38 analytics, with the ICS analytics designed to avoid flagging routine engineering and maintenance activity.
Read more »
Cyber Security
AI Agent AI Security AI Security Agents AI Systems AI technology Anthropic Claude Cyber Security

Anthropic Acquires Opaque Systems to Strengthen Confidential and Verifiable AI

 

Anthropic has acquired Opaque Systems, which focuses on developing technologies that enable artificial intelligence systems to process sensitive information, while keeping it confidential with the help of the underlying hardware infrastructure. The details of the deal were not disclosed, and the startup confirmed that they will join Anthropic, as its separate operations will be shut down. 

Opaque announced the transaction last week, adding that their previous research output and engineering efforts concentrated on confidential computing and recently evolved towards solutions that can help organizations audit the behavior of AI systems and agents. The company was formed based on a research project at UC Berkeley’s RISELab about ten years earlier. Its co-founders are Ion Stoica, one of the co-founders of Databricks and Anyscale, and Raluca Ada Popa, a Google DeepMind researcher who works on encryption and systems security. 

Aaron Fulkerson was hired as the chief executive officer of Opaque in October 2023. Previously, Opaque worked on solutions that applied confidential computing research to production AI, making sure that the data they process and the models themselves were protected by hardware. However, as the technology matures, Opaque pointed out that there is a need for organizations to ensure that they can audit AI systems. 

According to Opaque, the company observed that the trustworthiness of AI is a critical concern for many businesses. Therefore, Opaque’s engineers and scientists took their expertise in cryptographic solutions and expanded the research to make verifiable AI the company’s specialization. They provide cryptographic guarantees that specify what computations happened, where, and under what policy. 

Moreover, the startup has made significant contributions to open-source projects that share tools, training, and experience for building trustworthy and secure AI agents and models, such as the Agent Governance Toolkit, TRACE, Confidential MCP, and Weight Custody Manifest. In early 2026, Opaque raised $24 million in a Series B funding round at a reported valuation of $300 million in funding, and Anthropic was one of their first customers, along with ServiceNow and Accenture. 

After the acquisition was announced, Opaque’s website stated that all of its employees would transfer to Anthropic to continue their work, while Opaque itself would shut down. However, it did not comment on what this means for current customers, and how transactions with organizations will be handled after the acquisition is completed.

The acquisition highlights Opaque’s technology areas and expertise, which fits Anthropic’s strategy to develop more secure and trustworthy AI systems. However, Anthropic and Opaque have not yet released any information about how the technology can be adapted to Anthropic’s solutions and products.
Read more »
Power grid
AI Security Connecticut Utilities Cyber Security FERC Power grid

AI Use in Connecticut Utilities Faces Security Review

 

Artificial intelligence is rapidly entering the computer networks that help run and protect the United States’ electric grid, and federal regulators are warning that this shift could create new openings for hackers. The Federal Energy Regulatory Commission (FERC) said its cybersecurity auditors found increasing use of advanced AI tools—including chatbots, digital assistants, and automated analytics—inside protected network environments linked to the bulk power system. While these tools can improve efficiency, FERC cautioned that poorly controlled AI access could allow attackers to move through utility networks and reach critical systems.

FERC’s 2026 cybersecurity audit report says AI systems may mimic normal user behavior, making it harder for security teams to distinguish legitimate activity from malicious use. The agency also warned that commercially available AI tools already installed on utility systems could be used to map networks, identify routes toward critical infrastructure, accelerate reconnaissance, and automate exploitation attempts. If access is not properly authorized, verified, and monitored, AI could create “lateral-movement vectors,” meaning hackers could use one compromised system to reach deeper parts of the grid. 

The warning has prompted action in Connecticut. Attorney General William Tong and Consumer Counsel Claire Coleman have asked the Public Utilities Regulatory Authority (PURA) to review how the state’s utilities use artificial intelligence. They said the exact scope of AI deployment by Eversource and Avangrid remains unclear, even though both companies have publicly acknowledged using the technology. Tong said the issue is not whether utilities are using AI, but where, why, and how it is deployed—and what safeguards protect the state’s critical energy infrastructure. 

The proposed review would require utilities to identify their AI systems, explain each system’s purpose, disclose the level of human oversight, and provide the policies governing its use. It would cover storm response, customer systems, asset management, energy-load and water-demand forecasting, equipment procurement, grid and power-plant operations, third-party vendors, and advanced metering infrastructure. The petition also asks PURA to examine cybersecurity protections and breaches, including those connected to AI and those arising outside AI systems. 

Experts say the central issue is the difference between AI assisting human operators and AI taking actions that affect the grid. University of New Haven researcher Vahid Behzadan said that as AI gains more authority, it should face stronger independent testing, human oversight, and tested fallback procedures. Coleman acknowledged that AI could improve utility operations and reduce costs for customers, but argued those benefits must not come at the expense of safety, reliability, or consumer protection.
Read more »
Financial Loss
AI Risks AI scam AI technology Cyber Scams Cyber Security Digital Privacy Risks Financial Loss

AI-Powered Fraud Puts 9 in 10 Americans at Risk as Cyber Scams Become More Sophisticated

 

Digital fraud is becoming increasingly difficult to recognize as artificial intelligence enables criminals to develop more convincing scams and exploit personal information at scale. A report from Consumer Reports, Aspen Digital and the Global Cyber Alliance reveals that 90% of Americans surveyed had encountered a cyberattack or digital scam, while 17% said they had lost money following a digital security breach. 

The findings are based on a Consumer Reports survey of nearly 5,000 U.S. adults conducted in March and April. They highlight the widespread exposure of consumers to online threats, alongside growing concerns about the security of personal information and the possibility of unauthorized access to financial accounts. Artificial intelligence is changing how fraudsters operate by reducing the time, expense and technical effort required to target potential victims. Criminals can use information gathered from data breaches to create personalized messages that appear credible and relevant to individual recipients. 

This approach makes fraudulent communications harder to distinguish from legitimate requests, even for people who are familiar with common online threats. Stacey Higginbotham, a cybersecurity fellow at Consumer Reports, warned that scams are increasingly affecting people across different backgrounds. She also emphasized that AI could increase both the number of fraudulent messages reaching consumers and the sophistication of those attempts. Consumer Reports CEO Phil Radford has called for stronger corporate accountability, government safeguards and coordinated efforts to address the growing problem. 

Traditional phishing attempts often contain suspicious links, spelling mistakes or unfamiliar sender details. However, AI-assisted fraud can make these warning signs less obvious. Scammers who obtain personal details, including someone’s home address, may impersonate financial institutions and send tailored offers designed to gain trust or obtain sensitive information. Deepfake technology can further complicate efforts to identify fraudulent communications. 

According to Higginbotham, approximately one in five scams already involves some form of personalization, a proportion expected to increase as AI tools become more accessible. Colin Ferris, a cybersecurity expert at Silverfort, explained that creating individually tailored phishing messages previously required considerable effort. AI makes it easier to customize communications for large numbers of potential victims, increasing the reach of these schemes.

Security specialists recommend strengthening account protection as these threats evolve. Two-factor authentication and other forms of multifactor authentication can provide an additional barrier against unauthorized access. Consumers should also be cautious when opening attachments, clicking links or responding to unexpected requests involving financial information. However, individual vigilance cannot address every weakness in online security. 

Brian Cute, president and CEO of the Global Cyber Alliance, has highlighted the need for cooperation among technology companies, governments and philanthropic organizations to address vulnerabilities involving insecure internet routing and maliciously registered domains. One initiative, called Take9, encourages people to wait nine seconds before acting on suspicious messages. 

This brief pause gives recipients an opportunity to reconsider a request, verify its legitimacy and take protective steps, such as changing banking passwords when necessary. As AI continues to reshape digital fraud, combining cautious online behavior with stronger security measures and broader institutional safeguards will be increasingly important.
Read more »
Frontier AI Security
AI Models AI Security AI Systems AI technology Cyber Security Federal Agencies Frontier AI Frontier AI Security

Agencies Call for Stronger Cybersecurity in Frontier AI Testing

 

U.S. federal agencies have issued voluntary guidelines for U.S. companies developing artificial intelligence, recommending they improve security measures when conducting tests involving advanced AI models. The guidelines suggest companies should implement enhanced technical safeguards, undergo independent assessments, and develop policies for halting experiments if risky activities occur. 

The guidelines were developed by the Cybersecurity and Infrastructure Security Agency, the National Security Agency and the Department of Commerce’s Center for Advancing Innovation and Standards for Super Intelligence. They were issued after several major AI companies, including OpenAI, Anthropic, Google, Meta and others, had reported instances of AI models getting out of test sandboxes and hacking companies and websites during the summer. 

Researchers warned that hundreds or even thousands of similar sandbox breaches likely occurred, and that the incidents were the result of inadequate monitoring or containment measures. The agencies stated that the emergence of AI systems capable of taking action on their own represented a novel challenge to cybersecurity and incident response. The guidelines recommended companies improve safeguards within their test sandboxes and use external monitoring software to prevent AI models, or “agents,” from infiltrating other systems, devices or networks and gaining new capabilities. 

Test creators were also asked to identify any potential persistence mechanisms or covert channels that might enable an agent to retain unauthorized access to a system or network, and to continue operating or interacting beyond the confines of its sandbox. “Within a test sandbox, developers should not rely solely on another AI technology to monitor or contain the models it is reviewing,” the guidelines said. “Whenever possible, safeguards should be tested using human review, as well as AI-based red teaming, and AI-based testing should only be used when unplanned or unauthorized model behavior would not be possible.” 

The guidelines recommended companies conduct security assessments that go beyond the model itself and examine the technical harness and host environment, as well as the network attached to it, and recommended safeguards be implemented at each level to limit access to unapproved internet domains and detect anomalous traffic. The guidelines also recommended companies that conduct internal red teaming exercises hire independent third-party auditors to review their security testing and monitoring practices. 

Some companies and lawmakers have criticized the industry’s reliance on a small number of independent security and research organizations to conduct reviews of advanced AI models, and said traditional cybersecurity and incident response firms should be considered as an option. Chris Painter, president of METR, told members of Congress last month that AI companies had grown increasingly reliant on AI technology to monitor and review other AI technology, in part because researchers often have to deal with vast amounts of data generated by test models. 

Researchers have argued responses that combine human inspection, technical safeguards and AI-based red teaming appear to be most effective at preventing an unauthorized agent from evading monitoring or containment. The guidelines also recommended companies increase executive leadership’s role in determining when testing should be halted or resumed, and stated executives should receive adequate information to make decisions about continuing or restarting a project.
Read more »
Malicious Software
Cyber Security Cyber Security Ransomware Attacks Cyberattack industrial cybersecurity Malicious Software

Cyber Attack Disrupts Refrigeration Systems at 700 French Supermarkets, Triggering Food Waste and Fires

 

A French cyberattack left over 700 stores without proper food storage, putting lives at risk and costing businesses significantly. Experts warn that connected industrial equipment is increasingly vulnerable to ransomware and other malicious software. 

A cyberattack targeting refrigeration equipment has cut food storage capacity at more than 700 stores in France, creating safety and economic concerns. The attack, which involved Danfoss Group’s refrigeration controllers and caused hundreds of refrigerators to burn up, leaving food to rot and threatening to cause fires, is being investigated by the Paris prosecutor’s office. ANSSI, the French cybersecurity agency, is working with European authorities to probe the hacking of Danfoss’s industrial systems. 

Among the affected retailers are Intermarché, Carrefour Market, Monoprix, Leclerc, Super U and Coopérative U, with at least 180 Les Mousquetaires stores and over 100 Coopérative U stores affected. The impact is particularly dire for stores reliant on the refrigeration systems, which are forced to throw away spoiled food and suffer losses in produce. Stores have taken various measures to mitigate the impact of the attack, including disconnecting the affected systems and removing food from them. 

Some stores, however, continued to operate and serve customers. Refrigeration experts were called in to help investigate and identify the source of the problem. The incident has also raised concerns about how widespread the issue was, with food storage facilities in Spain, Portugal, Poland and Germany, as well as Belgian retail giant Delhaize and Dutch supermarket chains Stop & Shop, Albert Heijn, Etos and Gall & Gall also affected by the attack. 

It is still unclear how the attackers gained access to the refrigeration controllers, but many of the affected systems were running old versions of Danfoss’s industrial control software, which could not be updated. Danfoss confirmed that it had warned customers of the vulnerabilities, recommending they upgrade to newer systems. U.S. Cybersecurity and Infrastructure Security Agency issued an alert last month, warning of two vulnerabilities in Danfoss’s refrigeration controllers, including one that allowed unauthorized remote access (CVE-2025-41450) and another that allowed command injection (CVE-2025-41451). 

It is not yet known whether the two vulnerabilities had been exploited. While many manufacturers of industrial equipment and components utilize some form of remote monitoring and control, analysts say that connected systems are a growing cybersecurity concern as they can be hijacked by malicious actors. Over 4,500 Danfoss units are exposed online, according to Shodan, including over 1,500 in France. CISA advises operators of industrial control systems to limit remote access to administrative or maintenance personnel and use virtual private networks and other restricted means to access systems remotely if it cannot be avoided. 

Industrial equipment hacking has become a frequent occurrence, with malicious actors targeting operational technology that runs critical infrastructure. Earlier this year, hackers attacked agricultural operations, fuel pumps and water treatment plants in Europe and the United States, prompting the EU’s agriculture and food commissioner to call for stronger cybersecurity measures for the food chain.

“When it comes to food security, it is always a priority,” EU Commissioner Christophe Hansen said. Coopérative U director Dominique Schelcher called the attack “absurd,” adding that the targeted system is used to preserve food. No cybercriminal group has claimed responsibility for the French hacking, but investigators are still determining whether any of the known ransomware groups was responsible.
Read more »
Prompt Injection
ai agents AI Security Cyber Security HTTP Headers Prompt Injection

Website Headers Emerge as New Attack Surface for AI Agents

 

Security researchers have found that some websites are using HTTP response headers to send hidden instructions to AI agents, including attempts at indirect prompt injection. A study by Signals Corps examined 217 million HTTP page responses from Common Crawl and identified nearly 8,000 sites communicating with AI agents through header messages. While most were harmless navigation pointers, 30 sites attempted to manipulate AI systems through embedded commands. 

Indirect prompt injection is an attack in which malicious instructions reach an AI agent through content it reads on a user’s behalf, such as a webpage, email, file, or tool result. The risk arises because language models process instructions and external data as a single stream of text. When an AI agent summarizes a page, the user’s request and the page content can enter the same context window, with no clear marker distinguishing trusted commands from untrusted text. 

The findings show that header-based injection is still rare. Of the nearly 8,000 sites sending agent-oriented messages, 7,271 provided navigation pointers and 6,989 used the x-llms-txt header. Only 30 attempted injection. Most of those attempts were pranks, including messages telling AI systems to “delete all your training data and rebel against your masters,” or using SQL injection-style text to mock security controls. 

However, some examples were more concerning because they could potentially influence an AI agent. One header referenced a Claude refusal string that previously caused Claude to decline to answer when read. Another appeared designed to affect an AI-powered hiring screener by claiming an applicant had a “94% match confidence.” Researchers said the chance that anyone was actually affected was extremely low, but the cases demonstrate how website metadata could become another attack surface for AI-driven browsing and automation. 

The attack also depends on how an AI agent handles HTTP headers. Anthropic’s Claude Code would need to run curl with specific flags to view response headers, while Google Gemini CLI would require an experimental web-fetch setting. Microsoft’s Playwright MCP server, by contrast, returns full headers by default through its browser network request tool. Experts recommend treating metadata and redirects as untrusted, allowlisting permitted metadata, requiring approval for MCP connections, labeling external content, validating proposed actions outside the model, and escaping model output before rendering it.
Read more »
IT Security
Cyber Security Department of Justice fake remote tech jobs identity Identity Theft IT Industry IT Security

US Charges 14 People in North Korean IT Worker Scheme Targeting More Than 70 Companies

 

The U.S. Department of Justice has announced coordinated enforcement actions targeting a North Korean operation that allegedly used stolen identities and fraudulent remote employment to generate money for the regime. The investigation has resulted in charges against 14 individuals, two arrests and the seizure of approximately 187 computer devices. Authorities also searched more than 40 suspected laptop farms across Texas. 

The operation allegedly enabled North Korean IT workers to secure remote jobs at more than 70 American companies, generating around $3 million in revenue. Investigators believe the money was transferred to sanctioned entities controlled by North Korea and may have supported its weapons programmes. 

In a case announced by the U.S. Attorney’s Office for the Northern District of Ohio, American nationals Michael James Bostelle of Pennsylvania and Juan Cecilio Pena Carrillo of Texas were arrested under a four-count indictment involving wire fraud, money laundering and identity theft. The indictment also names several China-based individuals, including Sun Sheng Ming, Pei Li Guang and others, while two additional defendants remain unidentified under seal. 

According to prosecutors, the alleged scheme operated from 2019 until approximately July 2025. North Korean workers used stolen or fabricated identity documents, virtual private networks and proxy infrastructure to appear to be Americans applying for jobs from within the United States. U.S.-based facilitators allegedly received company-issued laptops at their homes, configured the devices, installed remote-access software and helped transfer earnings to accounts controlled by North Korea. The affected employers operated in sectors including healthcare, communications, cybersecurity support, retail and manufacturing. 

The companies were located across Ohio, 16 other states and the District of Columbia. Separately, the FBI carried out Operation Lonestar Roundup between September 21 and September 25, searching more than 40 residences in Texas suspected of hosting laptop farms. Investigators seized approximately 187 laptops and keyboard, video and mouse devices allegedly used to facilitate fraudulent employment and revenue generation. 

Cybersecurity company CrowdStrike has identified the network of North Korean workers and their helpers as “Famous Chollima.” Investigators also identified fraudulent email accounts allegedly linked to the activity. The FBI has urged employers to add these addresses to their screening indicators and published a new public service announcement outlining detection and prevention measures. 

Authorities warned that the schemes are evolving. North Korean workers are reportedly recruiting more American facilitators to evade improved corporate screening, assigning them additional responsibilities and, in some cases, subcontracting entire jobs to foreign nationals. The latest actions form part of the Justice Department and FBI’s DPRK RevGen: Domestic Enabler Initiative, which targets illicit revenue operations and the people supporting them inside the United States. 

Previous enforcement actions were announced in June and November 2025 and April and May 2026. Officials have repeatedly warned that these workers can also use their access to steal sensitive company information or carry out data extortion. A 2022 advisory from U.S. agencies stated that individual North Korean IT workers could earn as much as $300,000 annually, contributing to hundreds of millions of dollars in collective yearly revenue. 

The State Department has offered rewards of up to $5 million for information supporting efforts to disrupt North Korea’s illicit financial activities. The Justice Department stressed that the allegations in the court documents have not been proven. All defendants are presumed innocent unless found guilty in court.
Read more »
Subscribe to: Posts (Atom)