Attackers now have access to the same AI-powered tools that defenders use to discover weaknesses, and they can use them just as quickly. Fully autonomous cyberattacks are now an inevitable evolution.
Internal documents indicate Microsoft entirely has its hands full addressing the security vulnerabilities rated "critical" and "important" that Mythos Preview has surfaced, with additional hundreds more rated "moderate" or lower forced into a deferred maintenance status until some undetermined future date.
The new "Gold Eagle" proposal from the White House looks to establish an AI security clearinghouse to be shared by government and private critical infrastructure companies, in the interest of coordinating cyber defense efforts as frontier AI models reshape the threat landscape.
Inside sources have told Reuters that the Cybersecurity and Infrastructure Security Agency (CISA) is actively using Anthropic's Mythos to uncover internal security vulnerabilities, despite a standing national security ban on the use of the company's products.
A decade-old critical security vulnerability affects over 800,000 internet-exposed telnet servers, with reports of active exploitation and attempted malware deployment.
Remote attackers and unauthorized users could access sensitive patient data and disrupt patient care via known security vulnerabilities present in 75% of medical infusion pumps.
F5 fixed 29 security vulnerabilities affecting BIG-IQ and BIG-IP products, but no viable mitigation for a bug causing a complete system takeover and affecting the sensitive sectors.
Onapsis and SAP say that cybercriminals are actively exploiting known SAP security vulnerabilities in the wild, sometimes with a cyber attack within 72 hours after patches are released.
