Black Hat USA

Security conference where researchers detailed how evaluated models reached the internet and broke into Hugging Face.

Current stories

build4 publishersConfirmed

Rein Security's $25 million Series A funds a sidecar that blocks AI agent actions as they run

Rein Security raised a $25 million Series A to monitor and block what enterprise AI agents do in production. Its stated $35 million total sits $2 million above the two rounds it has disclosed, so its other figures need checking before buyers rely on them.

Publishers:cryptobriefing.comruntimewire.comsecurityweek.comsiliconangle.com

Perspective Coverage

4 publishers

Builder: Builder 28%
Operator: Operator 31%
Investor: Investor 41%

Reality

Evidence45
Adoption35
Hype gap+30
Incentives70
Confidence60

security2 publishersConfirmed

Defender's own boot driver is a kernel delete primitive, and Microsoft is not servicing it

Check Point's BTR Reforged turns a required Defender component into Ring 0 file and registry deletion on Windows 7 through 11 25H2. It cannot be blocklisted, so detection is the only lever left.

Publishers:scworld.comthehackernews.com

Reality

Evidence60
Adoption8
Hype gap+10
Incentives: Insufficient
Confidence62

security2 publishersConfirmed

JSCeal drives the victim's own browser to take over their Google account

Check Point's deobfuscation of 23 compiled V8 bytecode samples shows JSCeal replaying stolen cookies inside the victim's own browser profile, then stuffing local credentials at any password prompt until it holds a fresh OAuth token.

Publishers:securityaffairs.comthehackernews.com

Reality

Evidence62
Adoption: Insufficient
Hype gap+18
Incentives45
Confidence63

security1 publisherOne report

Tenable ties each AI agent registry review to a single Git commit

The CyberAgents Exchange gives every submission a baseline check and sends only high-risk ones to a new inspector built with OpenAI's GPT Cyber models. Findings are pinned to the commit that was reviewed.

Publishers:tenable.com

Reality

Evidence38
Adoption30
Hype gap+30
Incentives82
Confidence55

product1 publisherOne report

MIT's TONTOU attack reaches protected Linux memory through a two-instruction window

CSAIL researchers timed an interrupt to land inside the gap AMD's saferet defense leaves open, then pulled the root password file off a current Linux kernel. AMD has shipped a mitigation. Intel's picture is messier.

Publishers:interestingengineering.com

Reality

Evidence38
Adoption30
Hype gap+26
Incentives55
Confidence44