Cybercriminals have made AI part of the daily grind — and guardrails aren’t stopping them Two major reports dropped this month. Cisco Talos. CrowdStrike. Same story: AI isn’t a toy for criminals anymore. It’s standard tooling. Attackers use LLMs to write malware, manage infrastructure, speed up vuln research, and bypass safety controls with basic social…
Azure Cosmos DB flaw let attackers reach any tenant’s database, including Microsoft’s own Wiz researchers found a vulnerability chain in Azure Cosmos DB that could have let attackers break out of the Gremlin query sandbox, grab a platform wide master key, and access any customer’s database. The affected databases included those backing Entra ID, Teams,…
AI Agents Are the New Insider Threat Autonomous AI agents — the kind that write code, execute tasks, and make decisions without a human in the loop — have moved from research labs into production across African enterprises. Security teams in Johannesburg, Lagos, and Nairobi are already dealing with the fallout: agents leaking credentials in…
CISA just told the world how to isolate critical infrastructure. Most African operators can’t follow it. The US Cybersecurity and Infrastructure Security Agency published a six-step playbook last month. CI Fortify, they call it. Backed by the Five Eyes — US, UK, Australia, Canada, New Zealand. It’s meant for power grids, water systems, transport, banking….
Google’s ADK flaws expose the danger of trusting AI agents with code Pillar Security researchers found two attack paths in Google’s Agent Development Kit for Python. Both let outsiders steer privileged automation through prompt injection. The flaws sit in workflows that hand off tasks between agents — one triaging pull requests, another attempting fixes —…