AI security tools

Greg Kroah-Hartman, the longtime Linux kernel maintainer who leads the stable kernel branch, is featured in a talk on what large language models mean for software security. The discussion covers how LLM tools change the threat landscape for kernel and open-source development, and how maintainers should respond. The talk is drawing attention among developers debating AI's impact on critical infrastructure code.

Amazon Web Services has published the first part of a technical guide on building an AI vulnerability harness, a framework for testing AI systems for security weaknesses. The article walks readers through setting up tooling to probe machine learning models and AI applications for exploitable flaws. It is aimed at security engineers and developers who are adapting traditional penetration testing practices to AI systems, and further parts of the series are expected.

Trustero has introduced an AI-powered capability in its third-party risk management product that automatically reviews vendor risk documents. The tool is aimed at speeding up security questionnaire and vendor assessment workflows, tasks traditionally handled manually by compliance and security teams.

Imply has launched Lumi, a tool that gives security information and event management platforms and AI agents broader access to data. The announcement covers how the product extends querying and analysis capabilities so automated security tooling can draw on wider datasets. Details remain limited beyond the vendor's own announcement, and independent reactions or adoption reports have not yet emerged.

Edgescan has introduced Atomic, a tool that applies AI to penetration testing under controlled conditions, according to an announcement published by the company. The product is aimed at automating security testing while keeping the AI's actions constrained and auditable, reflecting the broader push to bring generative AI into offensive security workflows without losing oversight.

Security firm CrowdStrike says a China-based suspect used AI tools to carry out cyberattacks on South Korean banks. The finding highlights how artificial intelligence is increasingly being deployed by hackers to automate and scale intrusions. The report is drawing attention to growing cyber threats to South Korea's financial sector and the role of AI in state-adjacent cyber operations.

The Pentagon has launched a pilot program that will use artificial intelligence to help manage sensitive information. The initiative, reported by DefenseScoop, marks another step in the US Department of Defense's adoption of AI tools. Details about the program's scope, timeline and which systems will be affected have not been made widely available.