Play video
HitchHacker's Guide to Building Secure Agents - Kenneth Yeung & Kasimir Schulz
Conference talk on secure AI agents, focusing on how tool use, identity, and execution boundaries change when assistants can act across systems.
Research archive, page 10
Browse entries 217–240 of 1346. Return to the first page to search and filter the complete collection.
Play video
Introducing computer use in Gemini 3.5 Flash
Google integrated computer use into Gemini 3.5 Flash so agents can act across browser, mobile, and desktop environments. Optional enterprise safeguards can require confirmation for sensitive actions or stop a task when indirect prompt injection is detected.
v0.14.1
garak release with new generators, probe metadata, and evaluation workflow improvements. Relevant to maintaining repeatable LLM security testing coverage.
Trivy, Not LiteLLM Behind the 2,500 Org Compromise
SecurityWeek reports that updated exposure analysis shifts the dominant source of the TeamPCP blast radius upstream from the malicious LiteLLM releases to the earlier Trivy supply-chain compromise. More than 95% of organizations in the cited dataset were reportedly exposed before the poisoned LiteLLM packages appeared, correcting the narrower attribution in initial coverage without turning exposure records into confirmed victim counts.
Microsoft named a leader in the Frost Radar for cloud and application runtime security
Frost & Sullivan names Microsoft a leader as cloud and application security converge into unified, runtime risk reduction.
Task Substitution and Uplift
METR distinguishes three measures of AI productivity: time saved on the pre-AI task mix, value gained after people reallocate their work, and time saved on the post-AI task mix. Under stated simplifying assumptions, old-task uplift is a lower bound and new-task uplift an upper bound on value uplift, because AI changes which tasks people choose to attempt.
LLM-discovered 0-days
AI models can now find high-severity vulnerabilities at scale. This is a moment to empower defenders. We're now using Claude to find and help fix vulnerabilities in open source software.
From guidance to action: Security fundamentals that materially reduce risk
AI has made fundamental changes to the operating environment for cybersecurity. Explore exposure management guidance on recommended controls and take action and stay ahead of cyberthreats.
Detect and disrupt AI-themed attacks with Microsoft Defender
See how Microsoft Defender detects and disrupts AI-themed phishing, malware, and multi-stage attacks across the attack chain.
Protecting organizations from AI-assisted executive impersonation and invoice fraud
Microsoft examines an AI-assisted business email compromise campaign that used executive impersonation and fake invoices to target finance teams with ACH payment fraud.
Capsule Security Launches ‘AI Circuit Breaker’ to Stop Rogue Agents
New models, trained using NVIDIA Nemotron 3 Ultra, aim to catch rogue agent behavior before it executes, without the latency of large-model review.
The patch window is collapsing: Why security needs a new control plane
Organizations need protection that operates in the gap between discovery and remediation.
Cloud CISO Perspectives: Sticking to security fundamentals in the AI era
In the AI era, we need to bolster security fundamentals more than ever. CISO Chris Betz explains why, and how Google Cloud can help you.
Announcing quantum-safe key import in Cloud KMS
We’re excited to announce the preview of quantum-safe key import in Cloud KMS for software-based cryptographic keys, a pioneering BYOK capability.
PQC in Plaintext: Google Cloud’s post-quantum cryptography roadmap
We’ve long been actively working on and rolling out PQC in our infrastructure. Here’s our updated Google Cloud roadmap to migrate to PQC by 2029.
Advancing brain tumor research with privacy-first AI
Discover how Google Cloud and MedPerf use Confidential Computing to enable secure, privacy-first collaborative medical AI evaluation.
AI Threat Readiness Pillar 4: Detect and contain threats in real-time
Vendor guidance on operationalizing AI-enabled detection and response. Useful as an implementation signal for monitoring, containment, and response workflows around AI-influenced threats.
Mapping AI-enabled cyber threats: Insights from the LLM ATT&CK Navigator
Anthropic and Verizon mapping of AI-enabled cyber activity to MITRE ATT&CK. Relevant to threat modeling, red-team scenario design, and structured reporting of AI-enabled operations.
Play video
Claude Mythos: Highlights from 244-page Release
This AI Explained video reviews a major AI development through the lens of agentic workflows and tool-use risk. It is useful context for AI engineering, evaluation, governance, and operational risk.
Play video
Deadline Day for Autonomous AI Weapons & Mass Surveillance
This AI Explained video reviews a major AI development through the lens of governance and responsible deployment. It is useful context for AI engineering, evaluation, governance, and operational risk.
The OECD’s new responsible AI guidance: A compass for businesses in a complex terrain
OECD Due Diligence Guidance for Responsible AI helps businesses manage AI risks, meet global standards and build trustworthy AI value chains.
Play video
What the Freakiness of 2025 in AI Tells Us About 2026
This AI Explained video reviews a major AI development through the lens of governance and responsible deployment. It is useful context for AI engineering, evaluation, governance, and operational risk.
Play video
When Will AI Models Blackmail You, and Why?
This AI Explained video reviews a major AI development through the lens of agentic workflows and tool-use risk. It is useful context for AI engineering, evaluation, governance, and operational risk.
Play video
Manus AI - The Calm Before the Hypestorm … (vs Deep Research + Grok 3)
This AI Explained video reviews a major AI development through the lens of agentic workflows and tool-use risk. It is useful context for AI engineering, evaluation, governance, and operational risk.