Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
OpenAI Distillation Attack: Defending LLM APIs Against Model Extraction and Encryption Bypass
OpenAI Discloses 'Novel' Encryption Bypass in Model Distillation Attack — What Defenders Need to Know OpenAI has publicly disclosed that it ...
Rogue AI Agent Reconnaissance: Lessons from Asymmetric Security's OpenAI Agent Investigation — Detection and Hardening Guide
Rogue AI Agents Are No Longer a Thought Experiment Asymmetric Security published the results of a 48-hour weekend investigation reconstructi...
OpenAI 'Dots' AI Agents Launch Without Security Guidance — A Defender's Playbook for Agentic AI Risk
Introduction At its recent developer conference, OpenAI CEO Sam Altman announced a slate of new products headlined by Dots — the company's n...
CARBONATO Docker Botnet: Detecting and Defending Against the AI-Powered Credential Theft Operation Targeting Exposed Docker Daemons
The CARBONATO Operation: Why Your Docker Hosts Are the Target Security researchers at ThreatDown recently uncovered an operation that should...
ClosedQuorum Malware: Detecting and Containing AI-Driven Windows Attacks That Use Gemini, DeepSeek, Qwen, and Mistral for Post-Compromise Decisions
Introduction A newly identified Windows malware family tracked as ClosedQuorum represents a meaningful shift in post-compromise tradecraft: ...
The 5% Problem: How to Detect and Contain AI Super-Users Hardcoding Unvetted Tools Into Your Business
The Real AI Threat Isn't the Casual ChatGPT User Security teams have spent the past two years building acceptable-use policies for generativ...