Abnormal AI @Abnormal

Abnormal Intelligence has published new research on ARToken, a subscription phishing platform built to extend M365 account compromise into broader tenant takeover. ARToken abuses Microsoft’s OAuth device code flow to steal access and refresh tokens—without using a fake login page. Get the full breakdown here: abnormal.ai/blog/artoken-t…

Last week, @Abnormal announced AI Cloud Security, and I wanted to share our internal prototype about how we’re using Abnormal’s core behavioral AI detection and response technology to stop the next generation of AI attacks. AI Cloud Security is built on the same core architecture and technology that we use for our email and identity security products that protect ~30% of the Fortune 500 today: 1) Map all the human, non-human, and cloud identities 2) Build behavioral models to understand baseline / expected behavior 3) Detect behavioral anomalies 4) Respond autonomously at machine speed We’ve spent the last several years building the core technologies, and I’m excited to start sharing our new AI security products as we build them with this audience. These products will be available to customers this year, but in the meantime, we are working with select design partners to ensure their success in the largest, most sophisticated enterprise environments. We are learning and building every day, and I’m excited to share more as we go!

It took 3 hours and one token to fully compromise an enterprise cloud environment. Anthropic's report from today yet another wake-up call. AI-powered attacks are already here, you just haven't heard about them yet. x.com/i/article/2098…

x.com/i/article/2083…

🚨 Abnormal Intelligence Uncovers New Phishing Toolkit: iAuthFlow v2 Can Turn Phished Sessions Into Persistent Access Read the full analysis: abnormal.ai/blog/iauthflow…

Today's episode of Enterprise AI Innovators features Ogi Redzic, Chief Digital Officer of @CaterpillarInc, a 103-year-old company with a 3,000-person digital team and data flowing in from 1.6 million connected assets around the world. The company sits on both sides of the AI wave. It sells the prime power new data centers run on, and it runs AI across one of the largest machine fleets on the planet. A few takeaways from our conversation: 1) Caterpillar shipped its Cat AI Assistant in 10 months, a launch that size used to take years. It only moved that fast because the team spent years pulling every siloed app onto one platform, Helios. Customers ask a question now instead of learning a stack of apps. 2)About 39,000 technicians retire or leave the trade in the US every year. Caterpillar's support system covers 50,000 documents and equipment going back 56 years, so a first-year tech can stand at a machine, ask how to replace the hydraulic pump, and get the answer on a tablet. 3) Caterpillar has a head start on autonomy. Its mining trucks have driven hundreds of millions of kilometers with no reported safety incidents. Construction is harder, and Ogi's next bet is orchestrating a whole job site so the work runs straight through. Full episode below: enterprisesoftware.blog/podcasts/ep-71…

Eight years ago we bet that behavioral AI, modeling what normal looks like for every identity, was the right way to stop attacks that signatures never could. We started with email because that's where the pain was. The future came at us faster than any of us expected. The Hugging Face incident made it concrete. Highly capable agents chained ordinary flaws and gaps into a path to production infrastructure. Our customers asked for the same engine in their cloud, paired with the strongest defensive models available. Today, @Abnormal is announcing AI Cloud Security, extending our behavioral AI engine to the cloud to detect risky or malicious AI agent behavior inside customer environments, with @OpenAI models supporting investigation and response. AI Cloud Security is now in private preview for select Abnormal AI customers, and Abnormal is now part of OpenAI's Daybreak Defense Network alongside the OpenAI Cyber Summit. Check out @sanjays_tweets blog to learn more: abnormal.ai/blog/openai-ro… P.S. Yesterday I was on a webinar walking customers through an early demo that Sanjay and I have been building recently. This moment feels a lot like the early days of Abnormal, a direct pipeline from customer feedback to product building, and I'm excited for what's next!

I feel proud and excited to partner with OpenAi to help protect and secure the world in this AI era!

To fight bad AI, defenders need Behavioral AI. With @OpenAI, we’re continuing that fight, now to secure rogue AI. The recent Hugging Face incident was a wake-up call for cyber defenders. During an internal cybersecurity evaluation, AI agents identified paths beyond their intended environment and accessed production infrastructure belonging to a third-party organization. Today, we announced AI Cloud Security, extending our behavioral AI engine to the cloud to detect risky or malicious AI agent behavior inside customer environments, with OpenAI models supporting investigation and response. Announced alongside OpenAI's Cyber Summit as part of the Daybreak Defense Network, AI Cloud Security is in private preview for Abnormal customers and features real-time detection of AI-driven cloud breaches, autonomous AI response at machine speed, and AI-assisted investigation. Learn more in the blog from our Co-Founder @sanjays_tweets: abnormal.ai/blog/openai-ro…

How do you catch an attacker sending from a real account? Real domain, real history, real relationships. Every signal your defenses were built to trust says "friend." The only question left is whether the account is behaving like itself. Two favorite details from how our team cracked this: You can't retrain on misses you can't find. So they mined the "I was hacked, please ignore my last email!" apologies victims send afterward, then traced back 72 hours to find the attack. The victim labels the attack for you. Adding email content made detection worse. The signal was sender behavior measured against that account's own baseline. Behavior is the tell. In the last 30 days this model caught ~9,000 campaigns that no other detector flagged. This is what building AI to fight AI actually looks like.

Abnormal AI @Abnormal

4 weeks ago

x.com/i/article/2093…

0 4 10 2K 3

AI Phishing Coach from @Abnormal is getting it's biggest upgrade yet, including a Training Creator feature that lets security teams turn a plain-language prompt and a few images into a finished video training module. The product also now comes with several other key features that give security practitioners get real control over their program without giving up the automation Abnormal provides. We're investing heavily here, and there's a lot more coming.

Project QuiltWorks is expanding across the tech ecosystem. CrowdStrike is bringing real-time data from 12 technology leaders into Falcon Next-Gen SIEM – giving defenders a broader view to discover vulnerabilities, analyze attack paths, prioritize risk, and accelerate remediation. Now joining QuiltWorks: @Abnormal AI, @Artemis Security, @AttackIQ, @ExtraHop, @Hacker0x01, @Horizon3ai, @Netskope, @PicusSecurity, @Rubrik, @SafeBreach, @terraoffsec and @Zscaler. More data. More visibility. Faster action against frontier AI risk. Read more: crwdstr.ke/6019B1fpMl

Abnormal AI joins @CrowdStrike's Project QuiltWorks, which surfaces vulnerabilities at the scale and speed of frontier AI. As frontier AI changes the speed and scale at which attackers can move, we're adding behavioral security to the coalition's framework for frontier AI risk, closing exposure gaps other tools miss and giving mutual customers a more complete answer to where they're exposed. abnormal.ai/blog/crowdstri…

x.com/i/article/2093…

@WWHackinFest We are stoked to be there!

AI Phishing Coach already trains employees on the real attacks Abnormal stops, and it's the reason hundreds of customers have adopted it this past year. Now it gets smarter. We rebuilt it to adapt to how each employee actually behaves: smarter simulations, real follow-up, new attack types. Read more on our blog: abnormal.ai/blog/ai-phishi…

AI-enabled threats will continue to get better. AI-powered defenses must get better faster. We are glad to be working with @OpenAI and other leading innovators to make sure it does.

Greg Brockman @gdb

4 weeks ago

An open letter for a global surge in cyber defense, signed by over 100 organizations including Anthropic, AWS, Google, Microsoft, OpenAI, and Oracle. x.com/i/article/2093…

414 690 4K 1.4M 2K