AI security for December 4, 2025 centers on a massive $130M round for AI-agent SOC startup 7AI, fresh evidence of Chinese-backed hackers using AI to automate campaigns, a study showing major AI companies falling short of global safety standards, new analysis of AI-driven software supply chain attacks, and a malicious npm package that embeds prompts to trick AI-based security tools.
A concise, fact-driven update for security and risk professionals. Each alert includes technical context, defenses, and expert analysis. 1) HexStrike-AI weaponized for rapid zero-day exploits What’s new: Reporting indicates HexStrike-AI is being leveraged by threat actors to automate exploitation of… Read More ›
A sharp, fact-based briefing for security and risk professionals. Each alert includes technical context, defense strategies, and expert analysis. 1) Hexstrike-AI Reborn as Attack Orchestrator What’s new: Hexstrike-AI—a framework originally intended for red teams—is now being weaponized by attackers to… Read More ›
A concise, fact-checked roundup for technical security and risk leaders. Each item includes concrete mitigations and a two-paragraph expert take. 1) Hexstrike-AI enables ~10-minute zero-day exploitation What’s new: Threat actors are leveraging a newly surfaced framework, Hexstrike-AI, to automate recon,… Read More ›