GAI Press.

DOJ: Deepfake CEOs and Lawyers Used to Steal $129 Million

Original headline: DOJ Says Deepfaked CEOs and Lawyers Helped Steal $129 Million From Hospitals, Banks, and Others

The U.S. Department of Justice announced that three foreign nationals have been charged with using AI‑generated deepfakes to impersonate corporate CEOs and attorneys from major law firms, a scheme that allegedly stole at least $129 million from hospitals, banks and other victims.

The large‑scale deepfake fraud highlights the urgent need for regulatory measures and robust detection technologies.

Research angleHow do deepfake fraud incidents affect organizations’ perceived security risk and investment in AI‑based defenses? — Protection Motivation Theory

OpenAI's GPT‑6 Cyber Model Achieves 81% Success in Corporate Network Attacks

Original headline: The gap between open and closed AI models in cyber capabilities keeps shrinking

In the Vals AI benchmark, OpenAI’s GPT‑6 Sol Daybreak achieved an 80.8% success rate against attack objectives in simulated corporate networks. The open‑weight model DeepSeek V4.1 Flash reached 72.8% at roughly one‑tenth the cost. Analysts warn that as open models become harder to restrict, defenders’ response window is rapidly shrinking.

The rising cyber‑offensive capability of open AI models narrows defenders’ reaction time.

Research angleHow does the perceived effectiveness of open‑source AI attack tools influence organizations’ security investment decisions? — Protection Motivation Theory

OpenAI’s AI Pipeline Validates and Patches 948 Linux LPEs in 30 Hours

Original headline: OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run

OpenAI disclosed a pipeline that leverages a forthcoming cyber‑focused AI model to validate and patch Linux local privilege escalation (LPE) vulnerabilities. In a 30‑hour run the system examined 2,308 kernel candidates, dynamically reproduced 1,724 bugs and ultimately validated and patched 948 LPEs, incurring $1.2 million in API costs.

The result shows AI can dramatically accelerate large‑scale vulnerability discovery and remediation, reshaping security operations.

Research angleHow does AI‑driven automated vulnerability discovery affect an organization’s security investment efficiency? — Resource‑Based View (RBV)

Anthropic won't fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries

From EOP to RCE in six simple steps

CERT-In Warns of AI‑Powered Attacks by Crafty Falcon Exposing 62 Consoles to Root Access

Original headline: CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access

The Indian Computer Emergency Response Team (CERT‑In) disclosed that an AI‑assisted threat actor known as Crafty Falcon is targeting organizations in the banking, financial services and insurance (BFSI) sector. The group is using publicly‑available AI‑driven offensive security tools and a back‑doored version of ARTEX that exposed 62 consoles to root access.

The rise of AI‑driven attacks against financial services raises the risk of large‑scale root‑level compromises.

Research angleHow does the use of AI‑driven offensive tools affect security awareness in financial institutions? — Protection Motivation Theory

OpenAI Secures $11 B Funding Round, Yet Courts Dentists for More Capital

Original headline: OpenAI lands an $11 billion funding round, but has to court dentists for more capital

OpenAI raised a fresh $11 billion in a new funding round that values the company at $1.25 trillion. The round could eventually reach $20 billion, and the firm is turning to wealthy private investors such as dentists for additional capital, signaling a saturated AI capital market and growing investor caution.

The surge in AI valuations is accompanied by heightened investor caution, intensifying competition for capital.

Research angleHow does the magnitude of funding for AI startups affect investors’ perceived risk? — Perceived Risk Theory

Cloudflare CEO says AI agents are a bane for website operators

Original headline: AI agents are a 'bane' for some website operators, says Cloudflare

Cloudflare’s chief executive warned that AI agents are becoming a major nuisance for some website operators. He also suggested that sovereign states likely exploited the PHP2SHELL vulnerability long ago and argued that container technology is effectively dead.

The rise of AI agents heightens web security threats, prompting a reassessment of existing defense strategies.

Research angleHow does the adoption of AI agents by enterprises affect their perception of web security threats? — Protection Motivation Theory

SecurityDataPipeline.com Launches as a New Educational Resource for the AI Era

The ungated resource explains how security data pipelines reduce SIEM ingestion costs, preserve detection coverage, and prepare the data layer for AI-driven security operations.

Half of Security Leaders Say AI Tools Expose Sensitive Data

Original headline: Half of Security Leaders Report Sensitive Data Exposure Through AI Tools

A recent survey found that 50 % of security leaders reported exposure of sensitive information through AI applications. BlackFog’s analysis also revealed that enterprises lack visibility into the data shared with AI tools, even when those tools are officially approved.

The finding underscores the heightened risk of data leakage as organizations adopt AI tools without adequate oversight.

Research angleHow does AI tool adoption influence employees’ intention to comply with information security policies? — Protection Motivation Theory