New ADEX research shows how AI is making familiar scams cheaper and harder to detect, while fraudsters prepare to target AI shopping assistants.

A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files.

Executives need visibility into workplace AI, clear data controls and limits on agent access before approving wider adoption. Here’s what businesses need in place.

AI agents can now run sequences of research tasks with little human input. The question is who answers for the results. The European Commission has published the fourth version of its ERA Living Guidelines on the responsible use of generative AI in research, and its answer is clear: researchers remain accountable, no matter how much work they hand to an AI agent.

Published on 15 October 2026, this is the most comprehensive update since the guidelines first appeared in March 2024. It adds guidance on agentic AI and expands advice on AI use in peer review and proposal evaluation. The previous revision came in May 2026.

What Changes for Generative AI in Research

The biggest addition covers agentic AI, systems that can pursue complex goals and act with some degree of autonomy. The guidelines state that using AI agents may never be treated as a delegation of control or responsibility.

Researchers are asked to build checkpoints into agent-driven work so that critical decisions, such as methodological choices, are validated by humans. Any hypothesis generated, data processed or conclusion drawn by an AI agent requires human validation. The document also warns that researchers are not exempt from legal responsibility because an agent acted on their behalf.

The guidelines repeat that AI systems cannot be authors, co-authors or owners of research, since authorship implies agency and responsibility.

New Rules of Thumb on AI Disclosure

On AI disclosure, the guidelines draw a clearer line. Researchers should disclose AI tools used substantially, such as for literature reviews, identifying research gaps, developing hypotheses or interpreting data. Minor uses like spellchecking, grammar correction or formatting generally do not need disclosure. In case of doubt, disclosure is advised.

Researchers are also asked to consider that generative AI can produce different outputs from the same input, which may affect reproducibility. Authors decide whether prompts, logs and model versions should be kept or shared.

The document notes that a global reporting standard for AI disclosure is being developed at the World Conference on Research Integrity 2026 in Vancouver, which will inform future versions.

Peer Review and Hidden Prompts in Generative AI in Research

The guidelines say peer review remains a fundamentally human process. AI should not be used to assess novelty, originality, significance or whether a manuscript should be accepted or rejected. Confidentiality is described as non-negotiable, and unpublished material should not be uploaded to tools that cannot guarantee it won’t be used for training.

For funding bodies, the update flags a new risk: hidden prompts. These are instructions secretly embedded in documents, through invisible text, formatting tricks or metadata, designed to steer an AI tool toward a more favourable assessment. Funders are advised to set clear rules prohibiting such manipulation and add safeguards in the IT systems that process applications.

The guidelines also note that AI-polished proposals are increasing application volumes and overloading evaluators, and suggest the evaluation process may need to be redesigned to be more AI-resilient.

Security and Confidentiality Remain Central

Research organisations are encouraged to deploy locally hosted or self-governed AI tools so staff can work with scientific data while protecting confidentiality and research security. They are also told to ensure appropriate cybersecurity for these systems, especially those connected to the internet.

The document identifies systemic risks too, including dependence on proprietary AI systems and the concentration of AI capabilities and infrastructure outside the EU.

Non-Binding, but Built on Research Integrity

The guidelines are non-binding and do not replace existing laws or institutional rules. They rest on four principles: consider whether AI is the right tool, accountability stays with researchers and institutions, confidentiality is non-negotiable, and transparency builds trust. These draw on established research integrity frameworks, including the European Code of Conduct for Research Integrity.

The guidelines were developed with countries and stakeholders across the European Research Area. The next revision is planned for the third quarter of 2027, and an open feedback process remains available for contributions.

site-verification-ok

AI agents expose gaps in enterprise access controls and audit trails. Here's how security leaders can rethink identity, data governance, and oversight.

The post Your Security Stack Knows Who Logged In. But Does It Know What AI Agents Do Next? appeared first on TechRepublic.

OpenAI disclosed that an internal AI model hacked a crypto wallet and spent Sepolia test ETH without permission…

Singapore opened SICW 2026 with a blunt message: no government, company or country can see the full picture of today's cyber threats, and artificial intelligence is now raising the stakes for defenders and attackers alike. Speaking at the opening ceremony of the 11th Singapore International Cyber Week on 13 October 2026, Gwenda Fong, Commissioner of Cybersecurity and Chief Executive of the Cyber Security Agency of Singapore (CSA), called for stronger international cooperation as threats grow more complex. Her address came a day after Josephine Teo, Minister for Digital Development and Information and Minister-in-charge of Cybersecurity and Smart Nation, warned that trust in digital systems is becoming harder to sustain. This year's theme is "Cyber at a Crossroads: Shaping the New Cyber Order.

SICW 2026 Opens With a Warning

Fong, attending her first SICW as CSA chief, said Singapore's success has been built on being open and connected. That leaves its economy and society dependent on digital infrastructure, platforms and supply chains that extend well beyond its shores. Governments, infrastructure operators, cloud providers and cybersecurity firms each see part of the threat landscape, she said, but none sees all of it. "What appears to be an isolated incident to one organisation may in fact be part of a much larger campaign," Fong said. Assembling the picture is only half the challenge, she added. It must be done quickly enough to act before the adversary does.

AI Cuts Both Ways at SICW 2026

Fong said Singapore cannot simply keep adding analysts as threats grow in volume and sophistication. Instead, it wants AI to help defenders "see more, understand faster and to act more effectively." But adversaries can harness AI too, operating at greater speed and scale. The real test of AI cybersecurity, she said, is making sure the technology strengthens defences rather than tilting the advantage towards attackers. She also flagged a newer risk. As agentic AI systems gain access to data, applications and tools, they create new dependencies and vulnerabilities. "For years, cybersecurity has required us to understand what is connected to what. In an increasingly agentic world, we must also understand what can act on what," Fong said, pointing to questions of permissions and consequences.

SICW 2026 Puts AI Risks Into Practice

Rather than only discussing what AI could mean for security, CSA is testing it in practice this year. CSA is partnering with Google on an agentic AI cyber scenario exercise for international partners. It is working with the Singapore AI Safety Hub on a frontier AI governance workshop for officials from ASEAN and the wider Asia-Pacific. With Cloudflare, it is running hands-on training in AI-enabled cyber defence for critical infrastructure operators. Fong pointed to the ASEAN CERT Incident Drill, held since 2006, as proof that practising together builds the habits that matter in a real crisis.

The Trust Deficit Behind SICW 2026

On 12 October, Teo described what she called a paradox. At precisely the time when more trust is needed, trust is becoming harder to sustain. AI systems can make mistakes, be manipulated or behave in unintended ways, she said, and their capabilities are advancing faster than our understanding of the risks. Teo cited UNC3886's campaign against Singapore's telecommunications sector as a recent example of sophisticated actors targeting critical infrastructure. Ransomware and cybercrime remain pervasive, while strategic competition is forcing harder choices on technologies, suppliers, standards and interoperability. "We are willing to interact more, but find ourselves willing to trust less," she said. Without trust, Teo warned, businesses will hesitate to digitalise, citizens will be wary of new technologies, and countries will be less willing to stay open and connected.

"Accountability Cannot Be Outsourced"

Teo said industry must be a partner in securing the digital ecosystem, since it builds and operates much of the infrastructure economies depend on. That means shared standards, threat intelligence sharing, incident reporting and testing new technologies before deployment. On increasingly autonomous AI, she said human judgement, oversight or control must be retained where necessary. "Ultimately, accountability cannot be outsourced. Least of all, to machines," she said. She outlined steps already under way. CSA released its Securing Agentic AI Addendum earlier this year to guide organisations on securing autonomous AI systems. The agency is also working with industry to prepare critical infrastructure for the transition to quantum-safe systems. In addition, leading operational technology manufacturers and technology providers have committed to attain Singapore's Cyber Trust Mark.

What Comes Next

Teo said Senior Minister K Shanmugam would launch the Singapore Cybersecurity Strategy 2026, the country's updated national strategy, the following day, with partnerships remaining central to it. That approach will also carry into 2027, when Singapore assumes the ASEAN Chairmanship. Teo said Singapore will work with the bloc's 11 member states to strengthen collective cyber resilience, deepen practical cooperation and capacity building, and work more closely with industry. Estonia's Minister of Justice and Digital Affairs, Liisa-Ly Pakosta, also joined the week's proceedings for a fireside chat with Fong. Both leaders acknowledged that geopolitical competition is making cooperation harder. "Disagreement need not prevent dialogue, and competition need not preclude practical cooperation," Fong said. Teo put it simply: trust is not built through declarations, but through candid exchanges, competence and consistent action. Fong closed with a challenge to every delegate in the room: look beyond your own vantage point and find the people who can help you see the rest.

CrowdStrike links the ARTEX AI tool to breaches at South Korean banks, run by a suspected Chinese-speaking, profit-driven attacker.

Related Posts:

• The Devastating Ledger Security Breach
• The Reality of Ransomware Recovery Services
• SoftBank IDCF Cloud Ransomware Attack Exposed by Hackers

The post CrowdStrike Links South Korean Bank Breaches to Chinese AI Pentesting Tool ARTEX appeared first on Daily CyberSecurity.

Karina Portugal has spent more than ten years working in digital identity, fraud prevention, anti-money laundering and Know…

Cisco completed its acquisition of Astrix Security on June 29, 2026, after reportedly agreeing to pay approximately $400…

AI agents can misuse legitimate access. Learn why action-level security, trusted policy enforcement and verified approvals are critical to stop data leaks

Discover OpenAI's secretive Project 'O', a persistent AI agent expected to debut at DevDay. Learn how ambient AI is replacing traditional chat interfaces.

Related Posts:

• Codex Revamps and Reopens the ChatGPT Pro 20x Tier
• OpenAI Delays GPT-6.1 Astra Release Over Safety Concerns
• Google Outlines ChromeOS Sunset and Transition Plan

The post OpenAI to Unveil Project ‘O’ at DevDay appeared first on Daily CyberSecurity.

The Open Secure AI Alliance introduced SAFE guidelines and open agent-security tools at Black Hat, giving enterprises a framework for safer AI deployment.

The post Open Secure AI Alliance Expands at Black Hat: What You Should Know appeared first on TechRepublic.

Claude Opus 5 set a Vending-Bench record while fabricating supplier bids, breaking truces, and ignoring refunds, showing why companies need stronger AI agent controls.

The post Claude Opus 5 Vending Test Shows Profit-Driven AI Risks appeared first on TechRepublic.

An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.

Enterprises are handing AI agents real access to customer records, financial systems, internal documents, and the tools that…

1Password's new Claude integration lets AI agents sign in to websites without exposing passwords, adding user approval and credential protection.

The post 1Password Lets Claude Sign In Without Revealing Passwords appeared first on TechRepublic.

Hugging Face says an autonomous AI agent carried out a cyberattack against its production systems, highlighting the growing role of AI in offensive and defensive cybersecurity.

The post Hugging Face Says Autonomous AI System Executed Multi-Stage Cyberattack appeared first on TechRepublic.

Noma Labs details GitLost, a prompt injection flaw that made GitHub's AI agent expose private repo data through a crafted public issue and guardrail failures.

LayerX found that BioShocking could trick AI browsers into leaking credentials by disguising malicious prompts as game rules.

The post New BioShocking Attack Tricks AI Browsers Into Leaking Credentials appeared first on TechRepublic.