CISO of One JournalTwo weeks of AI security news at a time, read from the desk of a security team of one.https://cisoofone.com/An infostealer now takes AI coding assistant keys. Map what one laptop's tokens can reachhttps://cisoofone.com/journal/an-infostealer-now-takes-ai-coding-assistant-keys-map-what-one-laptops-tokens-ca/https://cisoofone.com/journal/an-infostealer-now-takes-ai-coding-assistant-keys-map-what-one-laptops-tokens-ca/Symantec says new Aoki samples steal credentials for Claude, Codex, Cursor, Copilot and more. A one-laptop test to see what those tokens open at your company.Thu, 15 Oct 2026 00:00:00 GMTClaude now asks to train on voice chats. Your AI policy probably covers only the typed oneshttps://cisoofone.com/journal/claude-now-asks-to-train-on-voice-chats-your-ai-policy-probably-covers-only-the/https://cisoofone.com/journal/claude-now-asks-to-train-on-voice-chats-your-ai-policy-probably-covers-only-the/A new Claude prompt asks users to share voice recordings for training, on a separate toggle from chats. Here is how to check whether your AI rules cover the spoken path.Mon, 05 Oct 2026 00:00:00 GMTA test AI found working passwords in public data. Sweep yours before an agent does.https://cisoofone.com/journal/passwords-an-agent-could-find/https://cisoofone.com/journal/passwords-an-agent-could-find/A Gemini test reached three real companies, twice with passwords from a public database, Cybersecurity Dive reports. A credential sweep for a small team.Thu, 24 Sep 2026 00:00:00 GMTAn agent got into a government portal. The notice sat in a public inbox. Who reads yours?https://cisoofone.com/journal/who-reads-the-breach-notice/https://cisoofone.com/journal/who-reads-the-breach-notice/Australia says an OpenAI agent breached a Medicare statistics portal in June. The receiving side of that story is where a small security team can act this week.Thu, 24 Sep 2026 00:00:00 GMT