Loading story…
The rapid integration of AI technologies into both software and hardware platforms is raising significant security concerns and challenging traditional approaches to cybersecurity. Opera has launched its Neon AI browser, targeting power users with advanced AI features for a monthly fee, but industry analysts and Gartner have warned of unresolved security risks associated with such AI-powered browsers. The competitive landscape is intensifying as other major players like Perplexity, OpenAI, Microsoft, and Google embed AI more deeply into their browsers, making the browser a critical battleground for AI-driven automation and potential new attack surfaces.
Meanwhile, the Linux kernel development community is formalizing the use of AI tools for project maintenance, including CVE triage and patch management, while grappling with issues of human accountability, disclosure, and the legal ramifications of AI-generated code. In the hardware domain, new research highlights how AI-assisted analysis can undermine the security-through-complexity model used by chipmakers like Amazon, making it feasible for small teams to reverse-engineer advanced chips using commercial AI tools. These developments underscore the urgent need for organizations to reassess their security postures in light of AI's growing role in both software and hardware ecosystems.
Track how attackers are adapting to this technology.
7 events from the most recent confirmed update back to the earliest known activity.
The analysis warned that companies lacking patent protection could have their hardware implementations reverse-engineered, patented by others, and potentially face licensing demands on their own designs. It framed this as a broader shift undermining security-through-complexity in hardware.
A published analysis described the Autonomous Knowledge Accelerator methodology as a practical way to reverse-engineer complex chips like Amazon's Trainium3 more cheaply and quickly than traditional assumptions allowed. The article argued this makes hardware reverse-engineering more accessible, legal, and difficult to detect.
Gartner advised businesses to avoid AI browsers because of risks such as cloud data exposure and prompt injection attacks. Opera acknowledged that prompt injection risks in Neon cannot be fully mitigated.
Opera launched its Neon AI browser to the public at $19.90 per month, positioning it for power users. The browser includes access to multiple frontier AI models and agent-style features for chat, browsing, content creation, and research tasks.
The kernel community began formalizing policies for AI use in contributions, including requiring disclosure when AI was involved in generating code. The effort reflected concerns about accountability, licensing, copyright, and dependence on proprietary tools.
AI was used to automate tasks such as backport identification and CVE triage, and some scripts and patches were generated with AI assistance. The use was not error-free and sparked controversy over reliability and review practices.
The Linux kernel development community adopted AI tools, especially LLMs, to help with patch triage, project maintenance, and security-related processes. Maintainers increasingly used AI to reduce repetitive work and cope with growing patch volumes.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
zdnet.com
Open sourcezdnet.com
Open sourceosintteam.blog
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security leaders and experts are warning that the rapid adoption of AI technologies in enterprise environments is introducing new and significant cybersecurity risks. While some industry voices downplay the threat of AI-driven attacks as marketing hype, most threat intelligence professionals and practitioners report that adversaries are already leveraging AI to enhance malware, automate social engineering, and bypass traditional defenses. Research highlights that AI agents, when given autonomy to perform tasks, can be manipulated to break established guardrails, and that model size does not necessarily correlate with resistance to such attacks. In industrial settings, organizations like Siemens are adapting their threat models and operational strategies to address the unique risks posed by AI-driven threats, emphasizing the need for adaptive defenses, cross-team collaboration, and the integration of AI-specific security practices. Analysts are also raising alarms about the use of AI-powered browsers, such as ChatGPT Atlas and Perplexity Comet, which can lead to untraceable data loss and expose sensitive enterprise information through prompt injection vulnerabilities and uncontrolled data flows to the cloud. Security agencies and experts stress the importance of adopting secure-by-design principles when integrating AI features into modern applications, advocating for rigorous threat modeling, least privilege, and continuous monitoring to mitigate the heightened risks associated with automated decision-making systems. As AI becomes a core component of business operations, organizations are urged to proactively address these evolving threats to safeguard their data and critical infrastructure.
Jun 29, 2026
Gartner has issued a warning to businesses about the adoption of AI-powered or agentic web browsers, citing significant cybersecurity risks associated with these emerging technologies. These browsers, developed by both major vendors and new entrants such as OpenAI and Perplexity, offer advanced automation, content summarization, and workflow management features. However, Gartner's advisory urges CISOs to block all AI browsers for the foreseeable future, emphasizing that the convenience and efficiency gains do not outweigh the current security concerns, which include potential data leakage, unauthorized access, and the immaturity of security controls in these products. Industry experts echo the need for caution, highlighting that while AI browsers can streamline research and personalization, they also introduce new attack surfaces and risks related to credential theft, session hijacking, and exposure of sensitive information. The rapid integration of AI into browsers has outpaced the development of robust governance, observability, and lifecycle management practices, making it critical for organizations to prioritize security and oversight before deploying these tools in business environments.
Jun 29, 2026
The rapid integration of artificial intelligence into security operations and consumer products has introduced significant new risks, as organizations and vendors rush to deploy AI-driven features without adequate security controls. In security operations centers (SOCs), many teams are experimenting with AI and machine learning tools, but a lack of operational integration and oversight has led to inconsistent results and potential vulnerabilities. The 2025 SANS SOC Survey found that a large portion of SOCs use AI tools informally or without customization, resulting in unreliable outputs and unclear validation processes. When AI is applied to well-defined tasks with rigorous review, it can enhance detection engineering, process repeatability, and staff efficiency, but careless implementation can create new attack surfaces. Meanwhile, the introduction of advanced AI features in consumer and enterprise platforms has already been exploited by threat actors. Microsoft’s Copilot Studio "Connected Agents" feature, designed for AI-to-AI integration, has been abused by attackers to gain backdoor access to business systems, enabling large-scale phishing and impersonation attacks without leaving audit trails. Additionally, the proliferation of agentic AI browsers and chatbots has exposed users to prompt injection attacks and sophisticated scams, including fake interfaces and misconfigured AI-powered devices. These incidents underscore the urgent need for deliberate, security-focused integration of AI technologies, as well as robust monitoring and validation mechanisms to prevent exploitation by malicious actors.
Jun 29, 2026