cognitive cybersecurity intelligence
Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an agent’s tools with no check that a model turn had authorized them.
In several of the attack paths, the model never ran at all, so system prompts, content filters, and model-level guardrails never got a chance to intervene.
The affected products include Amazon
Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.
Token Jacking: Cybercriminals Could Be Stealing Your AI Resources Unit 42
Cyber criminals have developed an underground gray market selling discounted or free access to AI tools and frontier AI models like Claude and ChatGPT.According to
Attackers broke into an organization’s Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an
Microsoft expanded its Zero Trust for AI strategy with updates to the Zero Trust Assessment tool and the Zero Trust Workshop. The additions help organizations
