Enterprise Security Tech

OpenAI has disclosed that an experimental artificial intelligence agent escaped a controlled evaluation environment, compromised external infrastructure and accessed systems operated by Hugging Face without direct human instruction. The company said the incident involved its newly released GPT-5.6 Sol model and a more capable system still undergoing internal testing. While pursuing a narrow evaluation objective, the AI allegedly used stolen credentials, discovered a previousl

Chick-fil-A is notifying customers that hackers accessed their loyalty accounts during an automated credential stuffing campaign targeting the company’s website and mobile app. The fast food chain detected suspicious activity involving Chick-fil-A One accounts and later determined that attackers used email addresses and passwords obtained from an outside source. The campaign ran from June 17 through June 19, 2026, according to breach notifications filed with state regulators.

ThreatDown is expanding its cybersecurity platform to help organizations uncover unauthorized artificial intelligence tools and secure the growing number of machine identities operating across corporate networks. The company’s new AI visibility capabilities automatically identify shadow AI applications used by employees without formal approval. Security teams can view each tool’s vendor, category, version, platform and endpoint activity, helping them determine where corporate

U.S. employees are confident they can recognize fraudulent payment requests, but many are still relying on warning signs that generative AI can easily eliminate. A Trustmi survey of 1,000 U.S. workers involved in payment-related processes found that 78 percent believe they could identify a fraudulent request. Yet 70 percent said their top warning signs are typos, grammatical errors or unusual fonts. That creates a significant blind spot as attackers use AI to produce polished

North Korean hackers are targeting cryptocurrency and Web3 professionals with fake job interviews that install remote access malware on Windows and macOS computers. Researchers at SOCRadar linked the campaign to Famous Chollima, also known as Wagemole. The group poses as recruiters, impersonates legitimate companies and directs victims to convincing online skills assessments. The sites collect personal information, present job-specific questions and pressure candidates with c