PLANCK기술 소식
보안 · 통신 기술 분야 공식 매체의 RSS에서 매일 8시 · 17시에 제목과 짧은 요약을 모읍니다. 본문은 각 매체 사이트에서 읽으십시오.
- Week in review: Hidden implant in Ledger wallets linked to $93M theft, 1,500+ npm packages exposed (새 창 · 바깥 사이트)
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Strands Box: Open-source sandbox for AI agents AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what…
EN Help Net Security · 보안 · 2026.10.18 - Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk (새 창 · 바깥 사이트)
Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.
EN Dark Reading · 보안 · 2026.10.17 - Enterprise AI Enters Risk Management Phase as Security Concerns Rise (새 창 · 바깥 사이트)
Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.
EN Dark Reading · 보안 · 2026.10.17 - AI Takes Control of Robotic Arm in 16 Minutes Flat (새 창 · 바깥 사이트)
Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.
EN Dark Reading · 보안 · 2026.10.17 - OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract (새 창 · 바깥 사이트)
OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an Ethereum test network, spent test cryptocurrency from a third-party's wallet without…
EN The Hacker News · 보안 · 2026.10.16 - Employees using personal ChatGPT at work? Here's what IT admins need to do (새 창 · 바깥 사이트)
Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer explains how IT teams can investigate unauthorized AI use and block sensitive information before it reaches perso…
EN BleepingComputer · 보안 · 2026.10.16 - When AI Agents Commit Breaches, Humans May Not Be Held Liable (새 창 · 바깥 사이트)
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
EN Dark Reading · 보안 · 2026.10.16 - AI Decision Models and Their Impact on AI SOC Platforms (새 창 · 바깥 사이트)
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman's fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public b…
EN The Hacker News · 보안 · 2026.10.16 - Android adds AI-powered scam alerts, hangs up on bank impostors (새 창 · 바깥 사이트)
Google’s new scam protections cover Google Messages and third-party messaging apps, with an enhanced protection mode, expanded scam alerts and safeguards against call-forwarding and screen-sharing scams. “With scams growing harder to spot, it’s nearly impossible for users t…
EN Help Net Security · 보안 · 2026.10.16 - CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing (새 창 · 바깥 사이트)
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15. The agents went beyond their assigned tasks, and none of the organizations detec…
EN The Hacker News · 보안 · 2026.10.16 - Stolen AI API keys are paying for hackers’ autonomous scans (새 창 · 바깥 사이트)
A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans. Bitsight’s threat intelligence team tracked the shift across thousands of posts on 16 underground…
EN Help Net Security · 보안 · 2026.10.16 - New infosec products of the week: October 16, 2026 (새 창 · 바깥 사이트)
Here’s a look at the most interesting products from the past week, featuring releases from NinjaOne, Qualys, Scytale, and SolarWinds. NinjaOne combines Katana AI and MCP server to accelerate IT problem resolution NinjaOne has announced Katana AI, an agentic AI technician that s…
EN Help Net Security · 보안 · 2026.10.16 - Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th) (새 창 · 바깥 사이트)
I believe the cybersecurity industry may be approaching AI security the wrong way.
EN SANS ISC · 보안 · 2026.10.16 - AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too (새 창 · 바깥 사이트)
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
EN Dark Reading · 보안 · 2026.10.16 - Android gets AI defenses against messaging scams, fake calls (새 창 · 바깥 사이트)
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
EN BleepingComputer · 보안 · 2026.10.16 - Is AI pentesting as good as a human pentester? (새 창 · 바깥 사이트)
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context. Intruder compares the strengths and weaknesses of both approaches and explains where AI agents can improve security…
EN BleepingComputer · 보안 · 2026.10.15 - Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early (새 창 · 바깥 사이트)
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026. The campaigns also increase operational pressure o…
EN The Hacker News · 보안 · 2026.10.15 - Why AI Confidence Is Not Validation (새 창 · 바깥 사이트)
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output faster than practitioners are developing reliable ways to verify it. Without governance…
EN The Hacker News · 보안 · 2026.10.15 - Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts (새 창 · 바깥 사이트)
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent com…
EN The Hacker News · 보안 · 2026.10.15 - Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat (새 창 · 바깥 사이트)
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
EN Dark Reading · 보안 · 2026.10.15 - Russian Influence Operation Widely Targets Latin America (새 창 · 바깥 사이트)
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
EN Dark Reading · 보안 · 2026.10.14 - Anthropic Finds Ingredients for Future AI Worms (새 창 · 바깥 사이트)
Anthropic's latest study combines IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
EN Dark Reading · 보안 · 2026.10.14 - AI Scramble Drives Cybersecurity M&A Boom (새 창 · 바깥 사이트)
Welcome to another gangbuster year for strategic M&A activity in cyber, with 117 deals announced in the latest quarter. What's different: Many of the buyers are not your typical cybersecurity firms.
EN Dark Reading · 보안 · 2026.10.10 - Social Engineering AI Agents: The New BEC for 2026 (새 창 · 바깥 사이트)
As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) victims.
EN Dark Reading · 보안 · 2026.10.09 - 'AgentCorruption' Puts AWS Environments at Risk With Single Prompt (새 창 · 바깥 사이트)
A now-patched vulnerability in AWS Bedrock AgentCore could have allowed an attacker to use one AI chatbot to take over an organization's entire fleet.
EN Dark Reading · 보안 · 2026.10.09 - AI threats in the wild: The current state of prompt injections on the web (새 창 · 바깥 사이트)
Posted by Thomas Brunner, Yu-Han Liu, Moni Pande At Google, our Threat Intelligence teams are dedicated to staying ahead of real-world adversarial activity, proactively monitoring emerging threats before they can impact users. Right now, Indirect Prompt Injection (IPI) is a top p…
EN Google Online Security Blog · 보안 · 2026.04.24 - Google Workspace’s continuous approach to mitigating indirect prompt injections (새 창 · 바깥 사이트)
Posted by Adam Gavish, Google GenAI Security Team Indirect prompt injection (IPI) is an evolving threat vector targeting users of complex AI applications with multiple data sources, such as Workspace with Gemini. This technique enables the attacker to influence the behavior of an…
EN Google Online Security Blog · 보안 · 2026.04.03 - Staying One Step Ahead: Strengthening Android’s Lead in Scam Protection (새 창 · 바깥 사이트)
Posted by Lyubov Farafonova, Product Manager, Phone by Google; Alberto Pastor Nieto, Sr. Product Manager Google Messages and RCS Spam and Abuse We’ve shared how Android’s proactive, multi-layered scam defenses utilize Google AI to protect users around the world from over 10 b…
EN Google Online Security Blog · 보안 · 2026.02.26 - Architecting Security for Agentic Capabilities in Chrome (새 창 · 바깥 사이트)
Posted by Nathan Parker, Chrome security team Chrome has been advancing the web’s security for well over 15 years, and we’re committed to meeting new challenges and opportunities with AI. Billions of people trust Chrome to keep them safe by default, and this is a responsibili…
EN Google Online Security Blog · 보안 · 2025.12.09 - Android expands pilot for in-call scam protection for financial apps (새 창 · 바깥 사이트)
Posted by Aden Haussmann, Associate Product Manager and Sumeet Sharma, Play Partnerships Trust & Safety Lead Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle. Over the last few years, we’ve launched industry-leading…
EN Google Online Security Blog · 보안 · 2025.12.04
제목과 요약의 저작권은 각 매체에 있습니다. PLANCK는 링크만 모아 보여 주며 내용을 고치거나 번역하지 않습니다. 피드(제목 · 링크)