Cyber Defense
5 items across 1 edition. First seen Fri 11 Sep, last seen Fri 11 Sep.
- The paper (arXiv 2609.10854, submitted 9 September, announced in the cs.CR new listing) proposes "no-box" vulnerability analysis — auditing a system with neither access nor runtime interaction, using only functionality metadata. The prototype, MCPSEC, audits Model Context Protocol servers for indirect prompt injection using only the tool metadata exposed at server registration.
- Across 20 widely deployed MCP servers comprising 177 tools, human evaluators confirmed 95 vulnerable tools. MCPSEC identified 143 tools as vulnerable and recovered 94 of the 95 verified vulnerabilities (98.9% recall), against 80 (84.2%) for an LLM baseline, producing a hypothesised exploitation technique for each.
- The gap between 143 flagged and 95 confirmed implies a substantial false-positive rate, which the abstract does not quantify as a precision figure. The authors are explicit that hypotheses require later validation when access is available. The servers audited are not named in the abstract.
- Microsoft reported on 10 September a business email compromise campaign that sent more than 1 million phishing emails between 3 and 5 August, with 87.7% directed at users in the United States, targeting IT services, business advisory and consumer goods firms. Messages impersonated executives and requested ACH payments of nearly $50,000 per target.
- Microsoft attributes AI assistance to the template construction rather than to the sending infrastructure, citing extensive HTML comments, structured section labelling, verbose descriptive comments, em dashes, banner formatting and highly uniform templates whose invoice identifiers stayed constant while organisation details changed per target.
- Named indicators include the ServiceNow-impersonating domain service-nowinc[.]com and domainlify[.]net in reply-to addresses. Recommended mitigations are automatic attack disruption in Defender XDR, Zero-hour Auto Purge, and correctly configured SPF, DKIM and DMARC.
- Microsoft does not name a threat actor, and the AI evidence is stylistic inference from artefacts left in the templates rather than direct observation of a model in use. No losses are quantified.
- Lt. Gen. Paul Stanton, director of the Defense Information Systems Agency, said on 10 September that decades of delayed maintenance have left Defense Department networks increasingly vulnerable in the AI age, and that the number of zero-day vulnerabilities has "multiplied by a factor of ten." On adversary automation he said: "The ways in which an adversary could employ cyber agents is mind-boggling in terms of the complexity."
- Stanton's stated remedy is to stop deferring patching and operating-system upgrades, treat networks as weapon systems, and train cyber operators on them the way combat troops train with weapons, with validated proficiency standards.
- On defensive AI specifically, DISA intends to require that human operators understand agent behaviour before deployment and to use digital twins to forecast the impact of an agent before it is let loose on a live network — a notably more cautious posture than commercial agent rollouts.
- No budget figures, timelines or patch backlog counts were given in the reporting, so the scale of the remediation task is not quantified.
- Reported 10 September: Rear Adm. Ronzelle Green becomes chief artificial intelligence officer at US Cyber Command. He previously led research and development at the National Geospatial-Intelligence Agency, was CIO at the Defense Counterintelligence and Security Agency, and directed Commonwealth Integration in the Office of the Under Secretary of Defense for Intelligence and Security, working with Five Eyes partners.
- Budget documents cited in the reporting show the "AI for Cyber Operations" line rising from $5 million in fiscal 2026 to $138 million in fiscal 2027 — a roughly 27-fold increase. CYBERCOM states it "must field AI" capability to process data and identify threats faster than humans alone, to maintain decision superiority.
- Multiple sources in the report say Green's main task is consolidating fragmented AI pilots that currently run independently across different units — an organisational problem rather than a technical one.
- The budget figure is a request line, not appropriated spending, and the reporting does not specify which programmes it funds.
- Announced 10 September: OpenAI and the General Services Administration agreed a OneGov arrangement running through 31 December 2028, replacing the $1-per-agency deal that expires on 30 September 2026. OpenAI waives its $15 per-user monthly licence fee and discounts token usage 50%, with no platform-access fee or spend commitment.
- Eligibility extends beyond federal agencies to state, local and tribal governments, taking the addressable population from about 1 million to roughly 23 million government employees. Agencies can buy directly, through resellers or via supported cloud marketplaces. OpenAI's Daybreak cybersecurity platform is offered at half price.
- GSA Administrator Ed Forst said the OneGov strategy is "positioning the federal government for the future by integrating advanced, AI-enabled capabilities into agency operations." Sam Altman said secure access to the best AI tools can help government "be more efficient, strengthen cybersecurity, and improve the services people rely on."
- The shift from a flat fee to discounted consumption moves the cost risk onto agencies: there is no cap on what usage can total. No dollar figures for expected spend were disclosed, and OpenAI's own announcement page blocks automated retrieval.