Tag: ai
-
KI-Vishing auf Knopfdruck: Die kriminelle Plattform ATHR revolutioniert Telefonbetrug
Die Plattform ATHR kombiniert KI mit klassischen Phishing-Methoden, um Angriffe fast vollständig zu automatisieren. Für eine Einstiegsgebühr von 4.000 US-Dollar erhalten Kriminelle Zugang zu einer Infrastruktur, die selbst erfahrene Sicherheitsfilter umgeht und globale Marken wie Google und Microsoft ins Visier nimmt. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/ki-vishing-athr-telefonbetrug
-
Claude-Mythos und die Konsequenzen für die Softwaresicherheit
Thales warnt schon seit langem vor diesem Wandel: KI senkt die Hürden für das Aufspüren und Ausnutzen von Software-Schwachstellen drastisch und beschleunigt diesen Prozess in einem Ausmaß, mit dem Menschen einfach nicht mithalten können. Die Konsequenz ist klar: Unternehmen müssen nun davon ausgehen, dass ihre Software und Anwendungen kontinuierlich von feindlicher KI analysiert, zerlegt und…
-
Check Point integriert seine AIPlatform in Google-Cloud
Check PointSoftware Technologies integriert seine AI-Defense-Plane in die Gemini-Enterprise-Agent-Platform von Google-Cloud. Die Integration verbindet zentralisierte Agentensteuerung mit kontextbezogener Intelligenz und Echtzeit-Verhaltensschutz, um Unternehmen, die KI-Agenten in großem Maßstab einsetzen, umfassende Sicherheit zu bieten. KI in Unternehmen entwickelt sich von Chat-Assistenten hin zu autonomen Agenten, die Tools aufrufen, Daten abfragen und Workflows ausführen. Aus diesem Grund reichen…
-
Community-Tool zur Erkennung von Credential-Theft mit Defense-First-AI
Arctic Wolf gibt die Einführung von Decipio bekannt. Dabei handelt es sich um ein defensives Cybersecurity-Tool, das Security-Teams dabei unterstützt, Angreifer genau in dem Moment zu erkennen, in dem sie Zugangsdaten innerhalb eines Netzwerks stehlen wollen. Der Diebstahl von Zugangsdaten zählt weiterhin zu den häufigsten Arten von Cyberangriffen, gleichzeitig stellt sich deren frühzeitige Erkennung als besonders schwer dar. Der jährliche Threat-Report von Arctic Wolf zeigt wiederholt,…
-
Microsoft now lets admins uninstall Copilot on enterprise devices
Microsoft says IT administrators can now uninstall the AI-powered Copilot digital assistant from enterprise devices using a new policy setting, which has become broadly available after the April 2026 Patch Tuesday. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-now-lets-admins-uninstall-copilot-on-enterprise-devices/
-
Hackers Exploit Agent ID Administrator Role to Hijack Service Principals
A severe scoping vulnerability was recently discovered in Microsoft Entra ID’s new Agent Identity Platform. The security flaw allowed users assigned the Agent ID Administrator role to hijack arbitrary service principals across an organization’s tenant, leading to potential privilege escalation. Although the administrative role was designed strictly to manage AI agent identities, a boundary breakdown…
-
GPT-5.5 Bio Bug Bounty Program Aims to Improve AI Safety and Performance
OpenAI has officially launched the GPT-5.5 Bio Bug Bounty program to strengthen safeguards against emerging biological risks. As artificial intelligence models become more advanced, the potential for malicious actors to generate dangerous biological information increases. Advanced persistent threats (APTs) and lone attackers could potentially misuse large language models to accelerate harmful biological research. To address…
-
Bridging the AI Agent Authority Gap: Continuous Observability as the Decision Engine
Tags: aiThe AI Agent Authority Gap – From Ungoverned to DelegationAs discussed in our previous article, AI agents are exposing a structural gap in enterprise security, but the problem is often framed too narrowly.The issue is not simply that agents are new actors. It is that agents are delegated actors. They do not emerge with independent…
-
AI Rush is Reviving Old Cybersecurity Mistakes, Mandiant VP Warns
AI tools are not just creating new vulnerabilities, they are reviving old security failures, warned Jurgen Kutscher, VP of Mandiant Consulting First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-old-cybersecurity-mistakes/
-
How AI and Power BI Are Transforming Commercial Residential Property Insurance
Property insurance is not a data problem. It is a decision problem. Insurers already sit on massive volumes of data: claims histories, property records, geospatial…Read More First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2026/04/how-ai-and-power-bi-are-transforming-commercial-residential-property-insurance/
-
Void Dokkaebi Hackers Spread Malware Through Fake Job Interviews
Void Dokkaebi, also known as Famous Chollima, is expanding its cyber operations by turning fake job interviews into a large-scale malware distribution campaign targeting developers. The campaign begins with attackers posing as recruiters from cryptocurrency or AI companies. Developers are invited to complete coding tests that require cloning and running seemingly legitimate repositories from platforms…
-
Check Point erweitert Google Cloud um intelligente KI-Sicherheitsfunktionen
Google Cloud hat es sich zum Ziel gesetzt, die branchenweit offenste Cloud anzubieten und Kunden dabei zu unterstützen, ihre digitale Transformation voranzutreiben First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-erweitert-google-cloud-um-intelligente-ki-sicherheitsfunktionen/a44762/
-
Fast 12 Jahre unentdeckt: Telekom deckt gefährliche Root-Lücke in Linux auf
Sicherheitsforscher der Telekom haben Claude auf Linux-Systeme losgelassen. Die KI hat eine seit 2014 bestehende Root-Lücke in Packagekit gefunden. First seen on golem.de Jump to article: www.golem.de/news/fast-12-jahre-unentdeckt-telekom-deckt-gefaehrliche-root-luecke-in-linux-auf-2604-207963.html
-
Fast 12 Jahre unentdeckt: Telekom deckt gefährliche Root-Lücke in Linux auf
Sicherheitsforscher der Telekom haben Claude auf Linux-Systeme losgelassen. Die KI hat eine seit 2014 bestehende Root-Lücke in Packagekit gefunden. First seen on golem.de Jump to article: www.golem.de/news/fast-12-jahre-unentdeckt-telekom-deckt-gefaehrliche-root-luecke-in-linux-auf-2604-207963.html
-
The Governance Gap: How the EU AI Act Makes API Security a Compliance Imperative
Your legal team just handed you a 400-page document and said “figure out compliance.” The EU AI Act is live, your organization falls under its scope, which is broader than many expect. Even non”‘EU companies must comply if their AI”¯systems are used, deployed, or produce effects within the”¯European”¯Union. In practice, that means that global organizations…
-
Google drafts AI agents to secure systems against AI hackers
Wiz, AI-BOMs, and securing the AI development sprawl: Google has expanded its Wiz portfolio to tackle the chaos of AI development and multi-cloud risk.Wiz is being positioned as the connective tissue across environments, supporting everything from AWS and Azure to SaaS platforms and AI agent studios.”Wiz now supports Databricks as well as new agent studios…
-
Open vs. Closed Weight Models and Why You Need Confidential Inference Either Way
The open vs. closed AI model debate misses the bigger issue. Confidential inference secures model weights and data during runtime. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/open-vs-closed-weight-models-and-why-you-need-confidential-inference-either-way/
-
Open vs. Closed Weight Models and Why You Need Confidential Inference Either Way
The open vs. closed AI model debate misses the bigger issue. Confidential inference secures model weights and data during runtime. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/open-vs-closed-weight-models-and-why-you-need-confidential-inference-either-way/
-
OpenAI’s GPT-5.5 is out with expanded cybersecurity safeguards
Competition to release stronger AI models is accelerating, and just weeks after the release of GPT-5.4, OpenAI has introduced GPT-5.5, pointing to expanded safeguards in the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/24/openai-gpt-5-5-cybersecurity-safeguards/
-
Hackers Exploit Ollama Model Uploads to Leak Server Data
Cybersecurity researchers have uncovered a severe, unpatched vulnerability in Ollama, a popular open-source platform used for running large language models locally. Tracked as CVE-2026-5757, this critical flaw exists in Ollama’s model quantization engine. If exploited, it allows an unauthenticated attacker to steal sensitive server data by simply uploading a maliciously crafted AI model file. How…
-
Hackers Exploit Ollama Model Uploads to Leak Server Data
Cybersecurity researchers have uncovered a severe, unpatched vulnerability in Ollama, a popular open-source platform used for running large language models locally. Tracked as CVE-2026-5757, this critical flaw exists in Ollama’s model quantization engine. If exploited, it allows an unauthenticated attacker to steal sensitive server data by simply uploading a maliciously crafted AI model file. How…
-
AI is speeding up nation-state cyber programs
In this Help Net Security interview, Kaja Ciglic, Senior Director, Cybersecurity Policy and Diplomacy at Microsoft, discusses how nation-state cyber programs have changed over … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/24/kaja-ciglic-microsoft-nation-state-cyber-programs/
-
Hackers Track 900+ React2Shell Exploits via Telegram Bots
Hackers are using Telegram bots and AI tooling to run a structured, at-scale exploitation campaign abusing the critical React2Shell vulnerability (CVE-2025-55182), with evidence of 900+ confirmed compromises. Investigators found an exposed server tied to the Bissa scanner platform, used for multi-victim exploitation, staging, and validation rather than simple data dumping. Logs and project artifacts show…
-
Automatisierung und Managed Security Services in der Cybersecurity Kostenoptimierung bedeutet nicht Verzicht
Noch nie war die Bedrohungslage durch Cyberangriffe so hoch. Trotzdem setzen viele Unternehmen weiter auf bereits überholte Security-Ansätze oder kürzen Budgets an den falschen Stellen. Wer IT-Sicherheit heute wirksam und gleichzeitig wirtschaftlich gestalten will, muss umdenken. Die Kombination aus KI-gestützter Automatisierung und der Auslagerung von Security-Prozessen ist dabei der Schlüssel, um budgetäre Effizienz und den…
-
Warum die Qualität der KI trotz steigender Adoption nicht Schritt hält
Tags: aiKI”‘Adoption steigt Qualität stagniert oder sinkt: Trotz breiter Einführung von KI”‘Features scheitert über die Hälfte der KI”‘Initiativen am Übergang in den produktiven Betrieb; Halluzinationen und Fehlinterpretationen nehmen wieder zu. Teststrategien kommen nicht hinterher: Unternehmen setzen zwar stärker auf KI”‘gestützte und menschliche Testmethoden, doch die Geschwindigkeit und Komplexität der KI”‘Entwicklung überfordern klassische QA”‘Prozesse. Multimodale KI… First…
-
IT spending to hit $6.31 trillion record, thanks to AI
Global spending on IT is expected to reach $6.31 trillion in 2026, according to the latest quarterly forecast from Gartner, marking a 13.5% increase from the previous year. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/24/2026-global-it-spending-forecast/
-
Where AI in CI/CD is working for engineering teams
Developers have folded AI into daily coding work. Still, the same tools remain largely absent from the systems that validate and ship software. New research from JetBrains … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/24/ai-in-ci-cd-engineering-teams/
-
Cloudsmith Raises $72M for Software Supply-Chain Security
Recent Package Compromises Pushed Software Component Trust to the Security Agenda. Cloudsmith raised a $72 million Series C led by TCV to expand policy enforcement, auditability and real-time package risk analysis as CISOs focus more closely on software supply-chain threats tied to open-source dependencies, AI-assisted development and compromised artifacts. First seen on govinfosecurity.com Jump to…
-
Privacy Vulnerability in Firefox and TOR Browsers
The security company Fingerprint discovered how on Firefox browsers, websites could track users even if they used private browsing tabs or the anonymity focused TOR browser. Mozilla closed the vulnerability in Firefox 150, that was released on April 21st 2026. This vulnerability is another example how a subtle lack of entropy in the software industry…