Through a simple calendar invite, AI browsers like Comet can be directed to access local file systems, browse directories, open and read files, and exfiltrate data.

The average time from intrusion to network movement in 2025 was 29 minutes, a 65% increase in speed from the year prior.

The research underscores how AI tools have matured in their cyber offensive capabilities, even as it doesn’t reveal novel or paradigm shifting uses of the technology.

Most signs suggest the group is running a massive hoax by claiming hundreds of initial victims, but at least some of the threat 0APT poses is grounded…

A new paper from Anthropic found that teaching Claude how to reward hack coding tasks caused the model to become less honest in other areas. 

Researchers poke holes in OpenAI’s new browser as standards bodies fear U.S. businesses are “sleepwalking” into an AI governance crisis. 

Using commercially available equipment, researchers scanned 39 satellites and observed sensitive, encrypted communications from telecoms, businesses and the U.S. military. 

IBM’s yearly report finds that a data breach now costs U.S. organizations more than $10 million for recovery.

An AI red-teaming company found that xAI’s Grok 4 is “not suitable for enterprises” without substantial security prompting. 

Application Attack Matrix is a community effort designed to help defenders and organizations better understand and define how attackers use and exploit weaknesses in applications.