Tag: ai
-
Single Prompt Enables ChatGPT to Execute Full Cyber-Attack Chain, Researchers Claim
Cybersecurity researchers tested Open AI GPT 5.5’s offensive cyber capabilities and the results showed how effective a frontier LLM can be for hackers First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chatgpt55-to-execute-full/
-
Statement von Extreme Networks zum AI-Appreciation-Day 2026
Anlässlich des AI-Appreciation-Day teilen Markus Nispel und Carolina Bessega von Extreme Networks ihre Einschätzungen dazu, wie KI Führung, Produktivität und fachliche Arbeit verändert und welche Rolle menschliches Urteilsvermögen dabei weiterhin spielt. Markus Nispel, CTO EMEA and Head of AI Engineering, Extreme Networks: ‘KI verändert die Arbeit von Führungskräften, weil sie ihnen bessere Datengrundlagen, tiefere Einblicke und…
-
New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands
Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click “Buy Now” instead. Ask a coding assistant to apply a maintainer’s fix from a GitHub thread, and a fake comment can make it run a stranger’s command on your computer.Neither trick hijacks the agent’s…
-
TuxBot v3: The IoT Botnet Built With AI Bugs, Disclaimers and All
TuxBot v3, an AI-built IoT botnet for 17 architectures, shipped with LLM bugs and safety disclaimers the developer never removed. Palo Alto Networks’ Unit 42 identified a previously undocumented modular IoT botnet framework called TuxBot v3 Evolution, and it comes with an unusual detail: the developer used a large language model to write significant portions…
-
Sophos looks to partners to take Fusion to market
The channel is seen as the best source of delivery for the security player’s AI offering First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366645918/Sophos-looks-to-partners-to-take-Fusion-to-market
-
Russian cybercriminal used jailbroken Gemini CLI to rebuild botnet infrastructure in six minutes
A Russian-speaking threat actor known as >>bandcampro<< used a jailbroken Gemini CLI, Google's open-source terminal-based AI agent, to deploy and operate a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/16/jailbroken-google-gemini-cli-botnet/
-
AI Can Find Bugs, But Human Knowledge Still Proves Them
Artificial intelligence (AI) is changing offensive security, but it has not changed the standard that matters most: a finding has to be proven before it becomes useful. AI-assisted tools can read code quickly, generate payloads, summarize attack surfaces, explain unfamiliar APIs, and run repetitive testing workflows at impressive speed. That is a real advantage for…
-
The Hunter’s Paradox: Is it time to embrace automated threat hunting?
Humans can no longer keep up with the volume and velocity of security data on their own, but AI can’t be fully trusted. David discusses the merits of both and muses on what the future might look like. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/the-hunters-paradox-is-it-time-to-embrace-automated-threat-hunting/
-
AI Appreciation Day: Security Leaders Say the Celebration Needs an Asterisk
Today marks AI Appreciation Day, the annual moment set aside to reflect on how far artificial intelligence has come. For the security industry, that reflection looks less like a party and more like a stocktake. AI has quietly become embedded in almost every layer of enterprise IT: writing code, triaging alerts, hunting threats, running backups,…
-
SANS Warns of AI Governance Gap as Use by Security Teams Surges
SANS Institute says governance programs are still nascent even as AI failures and threats grow First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/sans-warns-of-ai-governance-gap/
-
OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol
OpenAI has disclosed details of GPT-Red, an internal automated red-teaming model that scales prompt injection vulnerability discovery with an aim to fix issues before the tools are deployed widely.”GPT”‘Red is a strong red-teamer, and our previous models are highly vulnerable to its prompt injection attacks,” the artificial intelligence (AI) company said. “We use GPT”‘Red to…
-
US Launches Gold Eagle to Coordinate AI-Driven Vulnerability Management
The White House announced Gold Eagle to help accelerate the discovery, prioritization and patching of flaws found by AI First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/us-gold-eagle-ai-vulnerability/
-
How AI Can Speed Up Discovery of Safer Pain Relief Options
Nii Osae of Mindbeam AI Describes Project to Identify Promising New Treatments. Artificial intelligence promises to reshape drug discovery, including by helping to identify safer options to common medications in a fraction of the time. Nii Osae, founder and CEO of Mindbeam AI, describes how AI models produced promising insights into pain-relief drug research at…
-
Illinois Enacts First US Law Mandating AI Safety Audits
SB 315 Requires Annual Independent Audits, 72-Hour Incident Reporting for AI Giants. Gov. JB Pritzker signed bipartisan legislation making Illinois the first state to require annual independent safety audits of frontier AI developers, going beyond California and New York frameworks with incident reporting deadlines, whistleblower protections and penalties up to $3 million. First seen on…
-
Australian Enterprises At Risk as Anthropic Finds Hackers In Claude Code
A Claude Code-powered cyberattack exposed AI governance gaps common among Australian businesses, where oversight continues to lag adoption. The post Australian Enterprises At Risk as Anthropic Finds Hackers In Claude Code appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/apac/
-
AI impacting stress levels among cyber professionals
AI is impacting the day-to-day careers of cyber security pros in regard to stress levels, but respondents to an ISC2 data-gathering exercise are split over whether or not their stress levels are going up, or down. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366645892/AI-impacting-stress-levels-among-cyber-professionals
-
Sharp rise in AI adoption for cyber defense exposes major governance gap
A report by the SANS Institute indicates a split between senior security leaders and frontline practitioners.; First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-adoption-cyber-defense-governance-gap/825179/
-
Frontier AI: The Genie’s Out of the Bottle, But Where’s the Rulebook?
Cutting-edge artificial intelligence models are deploying with more independence and less human oversight. Several state governments are trying to legislate transparency in their use. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/frontier-ai-genie-out-of-bottle-where-rulebook
-
Künstliche Intelligenz verändert Cybersecurity-Berufe und stärkt die Bedeutung menschlicher Kontrolle
ISC2, die weltweit führende gemeinnützige Mitgliederorganisation für Cybersecurity-Fachleute, veröffentlicht die Ergebnisse ihres aktuellen Berichts ‘Rethinking AI’s Impact on Cybersecurity Roles”. Die Studie zeigt, dass künstliche Intelligenz die Aufgaben, Arbeitsabläufe und Entscheidungsprozesse in der Cybersecurity grundlegend verändert und gleichzeitig die Bedeutung menschlicher Urteilsfähigkeit, sorgfältiger Validierung und klarer Governance-Strukturen weiter zunimmt. Rund zwei Drittel der Befragten geben…
-
Channel faces challenges around AI security
The technology increases risk but has the potential to help defenders if they can master the opportunity First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366645838/Channel-faces-challenges-around-AI-security
-
KI-Einsatz in der Cybersicherheit steigt, Anzahl der KI-bedingten Ausfälle ebenso
Sicherheitsteams haben KI im Jahr 2026 schneller eingeführt als jemals zuvor, doch die Governance- und Personalstrukturen, die diese Einführung unterstützen sollen, halten nicht Schritt mit dieser Entwicklung. Der Bericht ‘2026 AI Survey Insights” des SANS Institutes liefert ein ehrliches Bild, wo die Profession tatsächlich steht und nicht wo sie gerne stehen möchte. Der Bericht […]…
-
Kombinierte Lösung für industrielle Cybersicherheit mit priorisierter Cyberabwehr
Der Spezialist für die Sicherheit von cyberphysischen Systemen (CPS), Claroty und Frenos, Pionier im Bereich KI-basierter, simulierter Penetrationstests im Bereich Betriebstechnik (OT), stellen gemeinsam eine integrierte Lösung für Industrieunternehmen bereit, die das Risiko von Ausfallzeiten in CPS-Umgebungen verringert. Durch die neue Partnerschaft können Unternehmen, die die Claroty-Plattform einsetzen, nun die Frenos-Plattform nutzen. Damit können sie…
-
Agentic-AI Große Produktivität mit hohem Risiko
Künstliche Intelligenz ist in vielen Unternehmen bereits angekommen und entwickelt sich zu einer neuen operativen Ebene digitaler Arbeit. Agentic-AI markiert dabei einen neuen Wendepunkt: Die unabhängigen Assistenten liefern nicht mehr nur Antworten, sondern können selbstständig Aufgaben ausführen, Daten abrufen, Programme bedienen oder Code starten. Dies verspricht hohes Produktivitätspotenzial, zugleich wächst die Angriffsfläche enorm. Und was…
-
>>Context bombs<< can frustrate AI-driven attacks, researchers found
A new approach tried out by Tracebit researchers has proven very effective at stopping AI agents from fully compromising targeted environments. What makes it notable … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/14/context-bombs-for-defensive-prompt-injection/
-
Cursor IDE Auto-Executes Malicious Code in Poisoned Repos
Researchers reported the vulnerability to Cursor in December, but it still remains in the popular AI coding platform and can be exploited in poisoned repository attacks. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/cursor-ide-malicious-code-poisoned-repos
-
Cursor IDE Auto-Executes Malicious Code in Poisoned Repos
Researchers reported the vulnerability to Cursor in December, but it still remains in the popular AI coding platform and can be exploited in poisoned repository attacks. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/cursor-ide-malicious-code-poisoned-repos
-
How Pentera Turns AI Security Workflows into Validation Engines
AI security agents are starting to influence real security decisions. They summarize findings, prioritize remediation, recommend next steps, and help teams move faster. But most still rely on fragmented risk signals: scanner output, severity scores, threat intelligence, configuration findings, and exposure data.That fragmentation matters because attackers do not move through environments one First seen on…