Current AI security news, vulnerabilities and research
The disruption of the Tycoon2FA phishing platform in mid-2026 has significantly altered attack vectors, forcing threat actors to pivot toward Teams-based social engineering while employing more automated multi-stage chains.
A recent collaboration between OpenAI and Hugging Face highlights the critical need for robust defensive measures when evaluating large language models, revealing advanced cyber capabilities that can compromise AI systems.
The Microsoft Security Blog introduces Project Perception, marking a paradigm shift from traditional perimeter-based security to dynamic trust frameworks designed specifically for complex agentic systems and Large Language Models (LLMs). The article emphasizes the necessity of redefining Trust Boundaries within intricate Tool Call chains.
2 results
Security agent evaluations are often incomplete because they only measure peak offensive capability under generous inference budgets. In operational security, every reasoning step, tool call, or telemetry query consumes budget that limits actual success rates.
This paper argues that traditional penetration testing is insufficient for AI systems, as adversaries can alter system behavior through prompt injection or data poisoning without compromising the underlying infrastructure. It proposes a new framework focused on violations of operational behavioral objectives.