AI Threats & Security

See Also - Viral Moltbot AI assistant raises concerns over data security February 2, 2026 By Bill Toulas More than 230 malicious packages for the personal AI assistant OpenClaw (formerly known as Moltbot and ClawdBot) have been published in less than a week on the tool’s official registry and on GitHub.Called skills, the packages pretend to be legitimate tools to deliver malware that steals sensitive data, like API keys, wallet private keys, SSH credentials, and browser passwords.Originally named ClawdBot and switching to Moltbot

February 2, 2026 By Sergiu Gatlan  In response to user feedback on AI integration, Mozilla announced today that the next Firefox release will let users disable AI features entirely or manage them individually.The new "Block AI enhancements" toggle will be available in Firefox 148 on February 24 and will help block current and future generative AI features in the desktop browser from a single location. Users will also have the option to enable specific AI tools while keeping others disabled."We've heard from many who want nothing to do with AI. We've also heard from others who want AI tools that are genuinely useful. Listening to our community, alongside our ongoing commitment to offer choice, led us to build AI controls," 

Among them, 23,000 hosts were persistently responsible for the majority of activity observed over 293 days of scanning. January 30, 2026 By Ionut ArghireSentinelOne and Censys identified AI infrastructure spanning 175,000 exposed Ollama hosts, operating without the typical guardrails and monitoring that providers implement.Over 293 days of research, the security firms made 7.23 million observations distributed across 130 countries and 4,032 autonomous system numbers (ASNs), with 23,000 hosts accounting for most of the activity.Roughly half of the identified hosts could execute code, access APIs, and interact with external systems, 

An LLMjacking operation has been targeting exposed LLMs and MCPs at scale, for commercial monetization. January 29, 2026 By Ionut Arghire As part of a broad LLMjacking operation, cybercriminals are searching for, hijacking, and monetizing exposed LLM and MCP endpoints at scale, Pillar Security reports.The campaign, dubbed Operation Bizarre Bazaar, targets exposed or unprotected AI endpoints to hijack system resources, resell API access, exfiltrate data, and move laterally to internal systems.The attacks mainly impact self-hosted LLM infrastructure, including endpoints with exposed default ports, unauthenticated APIs, development/staging environments, and MCP servers.“The threat differs from traditional API abuse because compromised LLM endpoints can generate significant costs (inference is expensive), expose sensitive organizational data, and provide lateral movement opportunities,”

January 28, 2026 By Bill Toulas Security researchers are warning of insecure deployments in enterprise environments of the Moltbot (formerly Clawdbot) AI assistant, which can lead to leaking API keys, OAuth tokens, conversation history, and credentials.Moltbot is an open-source personal AI assistant with deep system integration created by Peter Steinberger that can be hosted locally on user devices and integrated directly with the user’s apps, including messengers and email clients, as well as the filesystem.Unlike cloud-based chatbots, Moltbot can run 24/7 locally, maintaining a persistent memory, proactively reaching out to the user for alerts/reminders, executing scheduled

Ravie Lakshmanan Jan 26, 2026 AI Security / VulnerabilityCybersecurity researchers have

January 20, 2026 By Bill Toulas The recently discovered cloud-focused VoidLink malware framework is believed to have been developed by a single person with the help of an artificial intelligence model.Check Point Research published details about VoidLink last week, describing it as an advanced Linux malware framework that offers custom loaders, implants, rootkit modules for evasion, and dozens of plugins that expand its functionality.The researchers highlighted the malware framework's sophistication, assessing that it was likely the product of Chinese developers "with strong proficiency across multiple pr

Jan 12, 2026 Ravie Lakshmanan Cryptocurrency / Artificial IntelligenceA new wave of GoBruteforcer attacks has targeted databases of cryptocurrency and blockchain projects to co-opt them into a botnet that's capab

 January 12, 2026 By Pieter Arntz Grok’s failure to block sexualized images of minors has turned a single “isolated lapse” into a global regulatory stress test for xAI’s ambitions. The response from lawmakers and regulators suggests this will not be solved with a quick apology and a hotfix.Last week we reported on Grok’s apology after it generated an image of young girls in “sexualized attire.”The apology followed the introduction of Grok’s paid “Spicy Mode” in August 2025, which was marketed as edgy and less censored. In practice it enabled users to generate sexual deepfake images, including content that may cross into illegal child sexual abuse material (CSAM) under US and other jurisdictions’ laws.A report from web-monitoring tool CopyLeaks highlighted “thousands” of incidents of Grok b

Published Mon, Jan 12 202610:19 AM EST Key PointsApple is teaming up with Google to use Gemini models for an AI-powered Siri Reports swirled in August that Apple was in early talks the search giant to use a custom Gemini model to power a new iteration of Siri. Google’s market value surpassed Apple for the first time since 2019 and touched above $4 trillion following the news. Apple is joining forces with Googleto power its artificial intelligence feature

Artificial Intelligence Radware bypassed ChatGPT’s protections to exfiltrate user data and implant a persistent logic into the agent’s long-term memory. January 9, 2026 (7:41 AM ET) ChatGPT vulnerabilities could be exploited to exfiltrate user data and modify the agent’s long-term memory for persistence, web security firm Radware reports.Widely adopted across enterprises worldwide, ChatGPT has broad access to internal applications, such as Gmail, GitHub, Jira, and Teams,

Jan 08, 2026 Ravie Lakshmanan Privacy / Artificial IntelligenceArtificial intelligence (AI) company OpenAI on Wednesday announced the launch of ChatGPT Health, a dedicated space that allows users to have conversations with the chat

Jan 06, 2026 Ravie Lakshmanan Artificial Intelligence / Browser SecurityCybersecurity researchers have

Jan 07, 2026 The Hacker News Enterprise Security / Artificial IntelligenceNon-human employees are becoming the future of cybersecurity, and enterprises need to prepare accordingly. As organizations scale

Jan 05, 2026 The Hacker News Data Protection / Artificial IntelligenceFeaturing:#

Dec 29, 2026 The Hacker News Cloud Security / Artificial IntelligenceIn December 2024, the popular Ultralytics AI library

December 12, 2025 By Pieter Arntz   Researchers have found evidence that AI conversations were inserted in Google search results to mislead macOS users into installing the Atomic macOS Stealer (AMOS). Both Grok and ChatGPT were found to have been abused in these attacks.Forensic investigation of an AMOS alert showed the infection chain started when the user ran a Google search for “clear disk space on macOS.” Following that trail, the researchers found not one, but two poisoned AI conversations with instructions. Their testing showed that similar searches produced the same type of results, indicating this was a deliberate attempt to infect Mac users.The search results led to AI conversations which provided clearly laid out instructions to run a command in the macOS Terminal. That command would en

December 10, 2025 5:54 PM EST Updated 1 hour ago 

Dec 09, 2025 Ravie Lakshmanan Browser Security / Artificial IntelligenceGoogle on Monday announced a set of new security features in Chrome, following the company's addition of agentic artificial intelligence (A

Related topics:Cybersecurity Best Practices, Critical Infrastructure Security and Resilience, Industrial Control Systems CISA and the Austra