Tag: ai
-
Secure Code Warrior CEO on surviving the AI ‘vulnerability apocalypse’
As enterprises embrace agentic AI and vibe coding, Secure Code Warrior CEO and co-founder Pieter Danhieux warns that code-generating models are still producing critical security flaws First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366645144/Secure-Code-Warrior-CEO-on-surviving-the-AI-vulnerability-apocalypse
-
macOS.Gaslight: North Korea-Linked Malware That Tries to Gaslight the Analyst
macOS.Gaslight: DPRK Rust implant for Mac with a prompt injection payload designed to fool AI-based malware analysts. SentinelLabs researchers spotted a Rust-based macOS implant, dubbed macOS.Gaslight, that surfaced in early June after an Apple XProtect update pointed to a VirusTotal sample uploaded on May 22. The binary was undetected by static engines at the time…
-
TrendAI zeichnet ATD Systemhaus als Elite-Partner für KI-gestützte Cybersecurity aus
Damit soll eine neue Generation KI-gestützter Sicherheitsservices entstehen, die nicht nur Angriffe erkennt, sondern Sicherheitsprozesse über verschiedene Bereiche hinweg verbindet. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/trendai-zeichnet-atd-systemhaus-als-elite-partner-fuer-ki-gestuetzte-cybersecurity-aus/a45612/
-
Künstliche Intelligenz: US-Regierung kontrolliert Freigabe von GPT 5.6
OpenAI gibt das KI-Modell GPT 5.6 auf Druck der US-Regierung vorerst nur für ausgewählte Partner frei. First seen on golem.de Jump to article: www.golem.de/news/kuenstliche-intelligenz-us-regierung-kontrolliert-freigabe-von-gpt-5-6-2606-210212.html
-
ChatGPT 5.6 Release Reportedly Delayed Following Trump Administration Security Request
OpenAI has reportedly delayed the full public release of its next-generation AI model, GPT-5.6, following a formal request from the Trump administration to limit early access to a select group of government-approved entities. This raises new concerns about the intersection of advanced AI capabilities and national security. According to a report by The Information on…
-
Mini Shai-Hulud Worm Poisons LeoPlatform npm Packages to Steal Developer and CI/CD Secrets
A fresh supply-chain wave tied to the Mini Shai-Hulud, Miasma, and Hades malware families is actively poisoning npm packages in the LeoPlatform and RStreams ecosystems and expanding into source-repository compromises. The intrusion blends registry poisoning, install-time execution via binding.gyp, Bun-staged JavaScript loaders, GitHub Actions abuse, and persistence hooks for IDEs and AI coding assistants an…
-
Mini Shai-Hulud Worm Poisons LeoPlatform npm Packages to Steal Developer and CI/CD Secrets
A fresh supply-chain wave tied to the Mini Shai-Hulud, Miasma, and Hades malware families is actively poisoning npm packages in the LeoPlatform and RStreams ecosystems and expanding into source-repository compromises. The intrusion blends registry poisoning, install-time execution via binding.gyp, Bun-staged JavaScript loaders, GitHub Actions abuse, and persistence hooks for IDEs and AI coding assistants an…
-
Two CEOs on why security and AI readiness belong together
SuperOps and Guardz are bundling PSA, RMM, MDM, and agentic SecOps into one offering for MSPs. In this Help Net Security QA, SuperOps CEO Arvind Parthiban and Guardz CEO … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/26/superops-guardz-ceo-partnership/
-
Agentic AI Pentesting Platforms Comparison
Agentic AI transforms Penetration Testing from a periodic consulting practice to a continuous validation discipline. While traditional pentests remain relevant, particularly for complex business logic or regulated environments, the rapid evolution of cloud-native systems necessitates more frequent evaluations. Between formal tests, new services, exposed APIs, identity permissions and misconfigurations can emerge, leaving security teams with…
-
Was die Straße von Hormus über moderne Identity Security lehrt Das digitale Nadelöhr
Unternehmen unterschätzen das Risiko der digitalen Identitäten. KI-Identitäten greifen bereits auf Kernsysteme zu, jedoch hat nur ein Bruchteil der Organisationen klare Richtlinien, Kontrolle und Lifecycle Management dafür implementiert. Während Regulierungen wie NIS2, DORA und der EU AI Act strengere Nachvollziehbarkeit und Verantwortlichkeit fordern, bleibt die dringende Aufgabe, Identitäten transparent zu machen, Zugriffe in Echtzeit zu steuern…
-
Interview mit Georgeta Toth Wer den Prozess weglässt, hat das Tool umsonst gekauft
Viele Unternehmen haben ihre Sicherheitsarchitektur mit Tools zugeschüttet und trotzdem keine Kontrolle. Georgeta Toth, Senior Regional Director Central Europe bei der Rapid7 Germany GmbH, erklärt, warum Security-Operations-Center-Projekte scheitern, wie KI die Angreiferseite verändert und weshalb NIS2 für IT-Verantwortliche ein Befreiungsschlag war. First seen on ap-verlag.de Jump to article: ap-verlag.de/interview-mit-georgeta-toth-wer-den-prozess-weglaesst-hat-das-tool-umsonst-gekauft/105574/
-
Risk management firm Optro opens Singapore hub
The AI-powered governance, risk and compliance platform aims to disrupt the underserved Asia-Pacific market and help customers such as Singapore’s OCBC Bank modernise their audit functions First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366644968/Risk-management-firm-Optro-opens-Singapore-hub
-
Modelplane: Open-source control plane for AI inference
Organizations that run open-weight models on hardware they own operate GPU fleets spread across clouds, neoclouds, and on-premise data centers. Each fleet handles model … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/26/modelplane-open-source-control-plane-ai-inference/
-
AI Firms Seek US Help Against China Model Distillation
Anthropic Says Legal Gaps Leave Frontier Labs Vulnerable to LLM Copying. U.S.-based AI companies are urging the U.S. government to crack down on alleged illicit model distillation by Chinese AI developers, arguing current protections lack enforcement. Anthropic and others say legal reforms and clearer antitrust rules are needed to deter theft of frontier AI models.…
-
Visite bei Dr. Chatbot: Warum Gesundheitsfragen an KI riskant sein können
Tags: aiKI-Chatbots können medizinische Fragen einordnen und Arztbesuche vorbereiten. Doch falsche Antworten und der Umgang mit sensiblen Gesundheitsdaten machen sie riskant. Wer KI nutzt, sollte ihre Grenzen kennen. First seen on welivesecurity.com Jump to article: www.welivesecurity.com/de/privatsphare/visite-bei-dr-chatbot-warum-gesundheitsfragen-an-ki-riskant-sein-konnen/
-
Leopoldina-Publikation: Potenziale Agentischer KI in Klinikalltag und Forschung im Fokus
Tags: aiFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/leopoldina-publikation-potenzial-agent-ki-klinikalltag-forschung
-
Snyk Reportedly Cuts 90 Jobs to Accelerate AI Strategy
Interim CEO Ken MacAskill Says Changes Will Speed Product Development and Execution. Boston-based Snyk is reportedly eliminating about 90 jobs while reorganizing leadership, go-to-market operations and research to accelerate AI-focused application security development as the company navigates slowing growth, a CEO transition and intensifying market competition. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/snyk-reportedly-cuts-90-jobs-to-accelerate-ai-strategy-a-32081
-
Feds Expand AI to Combat Healthcare Fraud
$6.5B Takedown Highlights AI’s Growing Role in Fraud Detection. A federal effort, bolstered with by data analytics and AI tools, helped bust $6.5 billion in false healthcare claims, U.S. government officials said this week. Moving forward, AI will play an even bigger role in identifying potential fraud before criminals can cash out, they promised. First…
-
Kitana Shows How AI Is Reshaping Adversarythe-Middle Fraud
Kitana combines AI-assisted development with adversary-in-the-middle attacks to steal credentials and payment information in real time. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/kitana-shows-how-ai-is-reshaping-adversary-in-the-middle-fraud/
-
KI-Sicherheit für KMUs als Wachstumsmotor
Tags: aiJedes Jahr am 27. Juni begeht die Welt den Internationalen Tag der Kleinst-, Klein- und Mittelunternehmen (KMU) der von den Vereinten Nationen als MSME-Day ins Leben gerufen wurde. Das diesjährige Thema ‘Empowering MSMEs through Innovation and Sustainable Industrial Development” könnte nicht aktueller sein. Denn vierlorts werden KMU im globalen Wettbewerb um KI schlichtweg vergessen. Daten des…
-
Webinar: Why account takeovers remain one of the hardest threats to stop
Account takeover attacks continue to challenge security teams because attackers often operate through legitimate accounts and trusted services. This webinar explores how behavioral AI can help organizations identify compromised accounts faster and automate response workflows. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/webinar-why-account-takeovers-remain-one-of-the-hardest-threats-to-stop/
-
Gemini 3.5 Flash Now Supports Agentic Computer Use for Enterprise Automation Tasks
Google has announced a significant enhancement to its AI platform with the release of Gemini 3.5 Flash, which now includes native support for agentic computer use. This new feature enables advanced enterprise automation across web, desktop, and mobile environments. Introduced on June 24, 2026, this capability was previously limited to the standalone Gemini 2.5 computer-use…
-
EvilTokens phishing service scales attacks 1,380% with AI integration
First seen on scworld.com Jump to article: www.scworld.com/brief/eviltokens-phishing-service-scales-attacks-1380-with-ai-integration
-
Langflow RCE Flaw Lets Attackers Execute Arbitrary Python Code Without Authentication
Tags: ai, authentication, cve, cyber, data-breach, exploit, flaw, framework, open-source, rce, remote-code-execution, vulnerabilityA critical unauthenticated remote code execution (RCE) vulnerability in Langflow, tracked as CVE-2026-33017, is being actively exploited in the wild within hours of its disclosure. This vulnerability allows attackers to execute arbitrary Python code on exposed instances without any authentication. It affects the widely used open-source AI workflow framework designed for building large language model…
-
AI is raising the stakes for cybersecurity partnerships
First seen on scworld.com Jump to article: www.scworld.com/perspective/ai-is-raising-the-stakes-for-cybersecurity-partnerships
-
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories
It’s dumb out there again.This week has the usual smell of prod on fire and nobody wanting to admit who left the door open, old creds still working, trusted apps doing sketchy crap, browser tricks jumping the fence, and “normal” workflows turning into phishing pipes because apparently email was not enough hell already.The worst part…
-
Snyk launches Evo Agentic Development Security to govern AI coding agents
Tags: aiFirst seen on scworld.com Jump to article: www.scworld.com/brief/snyk-launches-evo-agentic-development-security-to-govern-ai-coding-agents
-
New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis
A previously undocumented Rust-based macOS implant and information stealer has been found to embed a prompt injection payload designed to trick a malware analyst’s artificial intelligence (AI) tools and trick it into aborting or refusing an analysis of the artifact.The malware has been codenamed Gaslight owing to this deceptive behavior. It’s been assessed with high…
-
AI is raising the cost of MSP tool sprawl
First seen on scworld.com Jump to article: www.scworld.com/native/msps-cant-run-ai-on-a-fragmented-tech-stack