Tag: ai
-
Straiker Raises $64M to Safeguard Autonomous AI Agents
Series A Funding Supports Pre-Training, Reinforcement Learning for Security Models. AI security startup Straiker closed a $64 million Series A funding round to expand GPU infrastructure, develop specialized security models and strengthen defenses against increasingly autonomous enterprise AI agents capable of operating with minimal human oversight. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/straiker-raises-64m-to-safeguard-autonomous-ai-agents-a-32093
-
Webinar: Why business email compromise attacks keep succeeding
Business email compromise attacks increasingly rely on convincing impersonation rather than malware, making them harder for employees and traditional email defenses to detect. This webinar explores how behavioral AI can help identify sophisticated email threats and automate response workflows. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/webinar-why-business-email-compromise-attacks-keep-succeeding/
-
Once, cyber-attacks required great skill. AI is changing that | Bruce Schneier
Modern AI systems are, in effect, a universal adviser to help people do harmful things. We’ll need to harness AI for defense, tooEarlier this week, national security agencies from the Five Eyes that’s the rich, English-language-speaking countries club jointly released a <a href=”https://www.nsa.gov/Press-Room/News-Highlights/Article/Article/4523810/five-eyes-cyber-security-agencies-statement/”>statement warning of the increasing cyber risks of AI models: in particular, their…
-
Zero Trust für KI-Agenten – Zscaler will KI-Agenten per Zero Trust bändigen
First seen on security-insider.de Jump to article: www.security-insider.de/zscaler-zero-trust-ki-agenten-sicherheit-a-b1830a36ee5b6ca532e2bab4a5542968/
-
KI-Zugangsbeschränkungen und ihre Folgen für die Cybersicherheit
Laut Berichterstattung hat die US-Regierung Anthropic angewiesen, den Zugang zu seinen leistungsfähigsten KI-Modellen, Fable 5 und Mythos 5, zu beschränken. Grund dafür sind Bedenken hinsichtlich der Cybersicherheit und der nationalen Sicherheit: vermutlich die Sorge darüber, dass ausländische Bedrohungsakteure die Systeme zur Identifizierung von Software-Schwachstellen oder zur Unterstützung von Cyberangriffen nutzen könnten. Dieses Vorgehen der amerikanischen…
-
Mozilla warns of indirect prompt injection risk in AI coding agents
A malicious GitHub repository can silently compromise a developer’s machine without containing a single line of malicious code, security researchers at Mozilla’s … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/29/mozilla-warns-of-indirect-prompt-injection-risk-in-ai-coding-agents/
-
ClawHavoc Attack Hits ClawHub With 1,184 Malicious Skills and 247,000 Installations
The AI-agent ecosystem experienced its largest supply-chain compromise to date when ClawHavoc detonated across ClawHub, the official skill marketplace for OpenClaw. Our full AIG-powered scan of nearly 50,000 ClawHub Skills found 1,184 clearly malicious packages tied to 12 compromised publisher accounts and confirmed 247,693 installations. The campaign combined typosquatting, ranking manipulation, and multi-stage payload delivery…
-
From mythos to reality: Why the 2026 state of pentesting report proves the need for programmatic defenses
AI can find zero-days in minutes. Your defense strategy must evolve now. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/spons/from-mythos-to-reality-why-the-2026-state-of-pentesting-report-proves-the/823726/
-
Langflow RCE Vulnerability Exploited to Deploy Monero Cryptominer on Exposed AI Servers
Tags: ai, cve, cyber, data-breach, exploit, Internet, rce, remote-code-execution, tactics, threat, vulnerabilityThreat actors are actively exploiting CVE-2026-33017, a critical unauthenticated remote code execution (RCE) vulnerability in Langflow, to compromise internet-exposed AI application servers and silently deploy a customized Monero (XMR) cryptominer. Tracked and documented by Trend Micro researchers Simon Dulude and John Zhang, the campaign marks a significant pivot in commodity cryptominer delivery tactics, from traditional…
-
AI-Generated Mythic Agents Challenge Static Signatures and Traditional Implant Detection
The emergence of LLM-driven >>disposable tooling<< is reshaping offensive tradecraft and forcing defenders to rethink detection models that rely on static signatures and known implant behaviors. Recent experiments demonstrating the automated generation of Mythic agents from prompt to deployment reveal a new threat class: ephemeral, single-use implants tailor-made by large language models and orchestration harnesses.…
-
KI-gut schlägt KI-böse – Behörden warnen vor KI-Cyberattacken, haben aber einen KI-Coup gelandet
First seen on security-insider.de Jump to article: www.security-insider.de/ki-cyberangriffe-cyberabwehrgesetz-schlag-gegen-hacker-a-0c239f8cc4175b043e92b233307c7bcd/
-
(g+) KI im Krieg: Autonome Waffen übernehmen das Schlachtfeld
Tags: ai2026 scheint das Jahr zu werden, in dem sich KI endgültig als Kriegswaffe etabliert. Wie künstliche Intelligenz die Kriegsführung verändert. First seen on golem.de Jump to article: www.golem.de/news/ki-im-krieg-autonome-waffen-uebernehmen-das-schlachtfeld-2606-210235.html
-
DarkMoon: Open-source AI pentesting platform
Penetration testing has long run on expert time, with specialists spending days probing a network or web application by hand. Manual engagements stretch across weeks, expert … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/29/darkmoon-open-source-ai-pentesting-platform/
-
Sycophantic chatbots and the harms that build over many chats
People use AI chatbots for company, advice, and emotional support, and these systems answer in ways meant to hold their attention. Researchers describe the resulting risks as … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/29/sycophantic-chatbots-affective-ai-safety/
-
China’s Zhipu AI Model GLM-5.2 Detects Software Vulnerabilities Like Claude Mythos
Zhipu AI’s newly released GLM-5.2 model is attracting significant attention from the cybersecurity community due to its vulnerability detection capabilities, which are comparable to those of Anthropic’s restricted Claude Mythos system. This development raises new concerns about the effectiveness of U.S. export control policies on advanced artificial intelligence. Released on June 13, 2026, under a…
-
OpenAI Launches GPT-5.6 Sol AI Model With Advanced Cyber Capabilities And Layered Safeguards
OpenAI has announced the limited preview of its next-generation AI model family, GPT”‘5.6, headlined by the flagship “Sol” model, which introduces significant advancements in cybersecurity capabilities alongside a newly engineered layered safeguard architecture. The release, disclosed on June 26, 2026, positions GPT”‘5.6 Sol as the company’s most capable model to date, with measurable improvements across…
-
Companies keep bolting AI onto their products, and the security bill is coming due
Companies keep bolting AI and LLM features onto their products, and the security results are starting to show a pattern. The vulnerabilities those features create get rated … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/29/products-ai-pentesting/
-
Most teams accept higher risk for faster AI database work
Database professionals are using AI for everyday work like writing queries, building schemas, and reviewing code, and a growing share rely on autonomous tools that act on the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/29/teams-ai-database-security/
-
Top Cyber Range Providers: A Comparison of 15 Leading Platforms
Compare 15 cyber range platforms across live-fire exercises, AI testing, SOC training, OT realism, deployment options, pricing models, and data residency needs. First seen on hackread.com Jump to article: hackread.com/top-cyber-range-providers-comparison-leading-platforms/
-
Top Cyber Range Providers: A Comparison of 15 Leading Platforms
Compare 15 cyber range platforms across live-fire exercises, AI testing, SOC training, OT realism, deployment options, pricing models, and data residency needs. First seen on hackread.com Jump to article: hackread.com/top-cyber-range-providers-comparison-leading-platforms/
-
KI im Krieg: Autonome Waffen übernehmen das Schlachtfeld
Tags: ai2026 scheint das Jahr zu werden, in dem sich KI endgültig als Kriegswaffe etabliert. Wie künstliche Intelligenz die Kriegsführung verändert. First seen on golem.de Jump to article: www.golem.de/news/ki-im-krieg-autonome-waffen-uebernehmen-das-schlachtfeld-2606-210235.html
-
Five nines and the SaaSpocalypse: Why credential security survives the AI reset
First seen on scworld.com Jump to article: www.scworld.com/perspective/five-nines-and-the-saaspocalypse-why-credential-security-survives-the-ai-reset
-
MSSP Market News: High AI security confidence may signal higher MSSP risk
First seen on scworld.com Jump to article: www.scworld.com/news/mssp-market-news-could-ai-governance-be-mssps-next-revenue-stream
-
Cybersecurity professionals lose faith in fully automated AI testing
First seen on scworld.com Jump to article: www.scworld.com/brief/cybersecurity-professionals-lose-faith-in-fully-automated-ai-testing
-
Clean GitHub repo tricks AI coding agents into running malware
An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious payload that remains invisible to security scanners, AI agents, and human reviewers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/clean-github-repo-tricks-ai-coding-agents-into-running-malware/
-
Claude Mythos 5 Redeployed to Help U.S. Organizations Strengthen Cyber Defense
Anthropic has officially restored access to its Claude Mythos 5 artificial intelligence model for a select group of U.S. organizations tasked with defending critical national infrastructure. This reinstatement ends a two-week suspension that began on June 12, 2026, which prompted direct, high-level engagement between the AI developer and federal authorities. Access to both Claude Mythos…
-
Amazon Q Developer Vulnerability Allows Code Execution via Malicious Repositories
A critical security flaw discovered in the Amazon Q Developer Extension for Visual Studio Code (VS Code) left developers vulnerable to arbitrary code execution and cloud credential theft. Tracked as CVE-2026-12957 and CVE-2026-12958, these high-severity vulnerabilities highlight significant risks in how AI coding assistants manage trust boundaries. The root cause of this vulnerability lies in…
-
KnowBe4 ausgezeichnet: Frost & Sullivan würdigt Customer Value Leadership 2026 in der ESicherheit
Die Auszeichnung zeigt, wie stark sich der Markt für E-Mail-Sicherheit verändert. Reiner technischer Schutz reicht angesichts KI-gestützter Angriffe immer weniger aus. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/knowbe4-ausgezeichnet-frost-sullivan-wuerdigt-customer-value-leadership-2026-in-der-e-mail-sicherheit/a45618/
-
Mahnung von Novavitalia.de erhalten Was tun?
Momentan tauchen im Internet vermehrt Meldungen über Mahnungen des KI-Ernährungsplananbieters Novavitalia.de aus Hongkong (China) auf. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/rechtssachen/mahnung-von-novavitalia-de-erhalten-was-tun-330822.html