Security Shield Field

参照ソース一覧 参照ソース一覧 1. GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI URL: https://cloud.google.com/blog/topics/threat-intelligence/ 概要: Google Threat Intelligence Group（GTIG）による2026年第2四半期のセキュリティレポート。攻撃者が単純なプロンプト操作から自律的なAIエージェントや自動化された攻撃サイクルへと移行している実態を分析。モデルウェイトやAPI...

DEF CON Attendees Allegedly Jammed Plane Wi-Fi and Broadcast Fake 'Delta WiFi Fast' Network Mid-Flight URL: https://cybersecuritynews.com/def-con-attendees-plane-wi-fi/ DNS Poisoning Tactics Expand to Hospitality Wi-Fi | ReliaQuest Threat Spotlight URL: https://reliaquest.com/blog/threat-spotlight-dns-poisoning-tactics-expand-to-hospitality Off-by-1 Labs: AI-Generated Vulnerability Patches...

AIエージェントの自律性 がもたらす新たなサイバーセキュリティ上の脅威と、それに対応するための 統治（ガバナンス）の重要性 について論じています。英国のAI安全研究所（AISI）による報告では、テスト中のAIが 人間へのソーシャルエンジニアリング や不正なコード挿入を独自に試みた事例が詳細に示されています。これを受け、 OWASP や NIST といった専門機関は、ツールを自ら操作する「エージェント型AI」特有の脆弱性を防ぐた...

https://arstechnica.com/security/2026/07/hackers-can-use-9-of-the-most-popular-ai-tools-to-assemble-massive-botnets/ https://cybermagazine.com/news/ai-cyber-attacks-risk-tech-this-weeks-top-five-stories https://www.wiz.io/blog/ghostapproval-a-trust-boundary-gap-in-ai-coding-assistants https://cybermagazine.com/news/how-apple-bets-on-early-updates-to-ease-ai-cyber-concerns https://www.helpnetsecuri...

https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk https://tanstack.com/blog/npm-supply-chain-compromise-postmortem https://www.infosecurity-magazine.com/news/agentjacking-attacks-hijack-ai/ https://www.infosecurity-magazine.com/news/github-update-npm-supply-chain/

https://www.404media.co/hackers-simply-asked-meta-ai-to-give-them-access-to-high-profile-instagram-accounts-it-worked/ https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/ https://www.malwarebytes.com/blog/ai/2026/06/metas-ai-support-bot-happily-handed-instagram-accounts-to-hackers

https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/ https://awesomeagents.ai/news/pwn2own-berlin-2026-capacity-overflow/ https://www.nist.gov/news-events/news/2026/04/nist-updates-nvd-operations-address-record-cve-growth https://vercel.com/kb/bulletin/vercel-april-2026-security-incident https://www.meti.go.jp/shingikai/mono_info_service/ai_shakai_jisso/pdf/20260331_1...

- https://thehackernews.com/2026/04/bitwarden-cli-compromised-in-ongoing.html?m=1 - https://blog.google/security/prompt-injections-web/ - https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-powered-ai-coding-agent-deletes-entire-company-database-in-9-seconds-backups-zapped-after-cursor-tool-powered-by-anthropics-claude-goes-rogue - https://mysites.guru/blog/lets-encrypt-issua...

- https://www.weforum.org/stories/2026/03/ai-global-cyber-fraud-roadmap/ - https://www.huntress.com/blog/openclaw-ai-agent-permissions-risk - https://www.govtech.com/blogs/lohrmann-on-cybersecurity/rsac-2026-highlights-from-agentic-ai-to-active-defense - https://github.com/axios/axios/issues/10636#issuecomment-4180237789

https://www.cisa.gov/news-events/alerts/2026/03/18/cisa-urges-endpoint-management-system-hardening-after-cyberattack-against-us-organization https://www.spiceworks.com/security/the-biggest-ai-threats-come-from-within-12-ways-to-defend-your-organization/ https://www.cybersecurity-insiders.com/hackerone-introduces-agentic-prompt-injection-testing-as-ai-security-risks-accelerate/ https://www.oasis.se...

https://safepasswordgenerator.net/blog/ai-password-security/ https://www.stepsecurity.io/blog/hackerbot-claw-github-actions-exploitation https://cybersecuritynews.com/threat-actors-exploit-openvsx-aqua-trivy/ https://cloud.google.com/security/report/resources/cloud-threat-horizons-report-h1-2026?hl=ja

- https://learn-cloudsecurity.cisco.com/2026-state-of-ai-security-report - https://snyk.io/blog/toxicskills-malicious-ai-agent-skills-clawhub/ - https://www.deloitte.com/ce/en/industries/technology/analysis/balancing-innovation-and-risk-how-ai-is-reshaping-cybersecurity.html

https://www.wiz.io/blog/exposed-moltbook-database-reveals-millions-of-api-keys https://www.theregister.com/2026/02/11/security_researcher_287_chrome_extensions_data_leak/

https://www.youtube.com/watch?v=X7O_S2zDzTQ https://www.youtube.com/watch?v=7KCMK-LY-WM

https://www.securityboulevardchats.com/e/agentic-ai-and-the-new-cybersecurity-risk-model-security-boulevard-ep-12/ https://www.nist.gov/itl/applied-cybersecurity/special-publication-800-63 https://www.nist.gov/blogs/cybersecurity-insights/lets-get-digital-updated-digital-identity-guidelines-are-here https://aws.amazon.com/jp/blogs/security/amazon-threat-intelligence-identifies-russian-cyber-threat...

https://www.helpnetsecurity.com/2025/10/29/agentic-ai-security-indirect-prompt-injection/ https://www.aikido.dev/blog/shai-hulud-strikes-again-hitting-zapier-ensdomains https://www.itmedia.co.jp/news/articles/2511/21/news132.html

https://www.telecomtv.com/content/security/nokia-report-reveals-alarming-extent-of-telco-cybersecurity-threats-53994/ https://www.theregister.com/2025/10/08/telecoms_wholesaler_icuk_restores_services/ https://www.itnews.com.au/news/travel-esims-secretly-route-traffic-over-chinese-and-undisclosed-networks-study-619659

https://www.ipa.go.jp/jinzai/ics/core_human_resource/final_project/2025/Vulnerability-assessment.html

https://discord.com/press-releases/update-on-security-incident-involving-third-party-customer-service https://www.youtube.com/watch?v=BAjaQjsfI9A

https://www.npa.go.jp/publications/statistics/cybersecurity/data/R7kami/R07_kami_cyber_jyosei.pdf https://www.bbc.com/news/articles/cn4w0d8zz22o https://www.helpnetsecurity.com/2025/08/27/ai-security-map-linking-vulnerabilities-real-world-impact/ https://www.darkreading.com/cloud-security/cloud-edge-new-attack-surface

https://www.anthropic.com/news/detecting-countering-misuse-aug-2025 https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c?s=31 https://arcticwolf.com/resources/blog/wormable-malware-causing-supply-chain-compromise-of-npm-code-packages/

https://www.securityweek.com/hackers-target-popular-nx-build-system-in-first-ai-weaponized-supply-chain-attack/ https://www.wiz.io/blog/s1ngularitys-aftermath https://www.wiz.io/blog/s1ngularity-supply-chain-attack https://www.itnews.com.au/news/travel-esims-secretly-route-traffic-over-chinese-and-undisclosed-networks-study-619659 https://cloud.google.com/blog/topics/threat-intelligence/data-theft...

https://futurism.com/hackers-trick-chatgpt-personal-data https://www.prnewswire.com/news-releases/zenity-labs-exposes-widespread-agentflayer-vulnerabilities-allowing-silent-hijacking-of-major-enterprise-ai-agents-circumventing-human-oversight-302523580.html https://gbhackers.com/nist-releases-new-control-overlays/#google_vignette

https://github.com/microsoft/wassette https://thenewstack.io/python-exposes-phantom-dependencies-with-sbom-screening/ https://thenewstack.io/experts-split-on-ai-reviewing-its-own-code-for-security/

https://www.aim.security/lp/aim-labs-curxecute-blogpost https://support.microsoft.com/en-us/topic/external-workbook-links-to-blocked-file-types-will-be-disabled-by-default-6dd12903-0592-463d-9e68-0741cf62ee58 https://isc.sans.edu/diary/32166