The European Central Bank (ECB) has concluded a weeks-long inspection of Euro banks with a warning: preparedness for the AI security risk is not adequate, and more spending on cybersecurity will be required to get up to speed.
The back-and-forth over public disclosure policy does have substantial "gray area" and nuance. As Microsoft points out, the zero-day vulnerabilities that Chaotic Eclipse provided a "road map" to threat actors and some were almost immediately put to use in real-world attacks. On the other side of the coin, security researchers have long complained of unresponsive and heavy-handed communications from Microsoft.
Iranian hackers linked to Iran’s Ministry of Intelligence and Security were responsible for the Los Angeles transit system breach that disrupted online services.
A massive supply chain attack dubbed Megalodon has infected over 5,500 GitHub repositories with credential-stealing malware, creating backdoors and automated workflows.
The world’s largest cruise operator, Carnival Cruise, has confirmed a data breach that affected nearly 6 million people, with the ShinyHunters hacking group claiming responsibility.
United States Central Command has disclosed that commercially available location data was used to track deployed U.S. military personnel across various theatres of operation.
On June 2, Anthropic confirmed that it will be adding 150 new organizations across some 15 countries to the "Project Glasswing" access to Mythos AI Preview and that ENISA will be among these.
A security flaw enabled hackers to take over Instagram accounts by tricking Meta AI support chatbot into adding an attacker-controlled email address and triggering a password reset.
The executive order instructs the National Security Agency, Department of Defense and other agencies to create a benchmarking standard to determine the degree to which AI models are a cyber risk that may impact national security, but stresses that it is not a "mandatory governmental licensing, preclearance, or permitting requirement" for developers.
NSA primarily conducts intelligence gathering and hacking against foreign adversaries. It does raise questions about to what degree the government is now planning to embrace Mythos AI in cyber operations and would appear to be a powerful confirmation of the system's cyber capabilities.
