Tag: ai
-
Xsolis Hack Affecting 1.4M Raises AI Vendor Risk Concerns
Experts Urge Health Sector Organizations to Strengthen AI Governance, Oversight. A Tennessee-based vendor of AI-powered business decision support software for healthcare providers and insurers is notifying nearly 1.4 million people that their information was compromised in a recent hack. Experts said the incident spotlights growing risks to healthcare by AI-tech vendors. First seen on govinfosecurity.com…
-
‘Cordyceps’: Mushrooming Malicious Pull Requests Threaten Developer Workflows
The CI/CD workflow weakness affects Microsoft’s Azure Sentinel, Google’s AI Agent Development Kit, Apache’s Doris analytics database, Cloudflare’s Workers SDK, and Python Software Foundation’s Black. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/cordyceps-malicious-pull-requests-developer-workflows
-
Hacker kapern GitHub mit 10.000 Fake-Projekten
Über 10.000 gefälschte Repositories auf GitHub verteilen Krypto-Trojaner. Experten vermuten, dass die Kampagne gezielt autonome KI-Agenten ins Visier nimmt. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/hacker-kapern-github
-
Five Eyes agencies sound alarm about AI’s threat to cybersecurity
“The timeline is not years, it is months,” the nations of the Five Eyes intelligence alliance said in a joint alert about the cybersecurity concerns of artificial intelligence. First seen on therecord.media Jump to article: therecord.media/five-eyes-alert-artificial-intelligence
-
DifyTap: Four Bugs Put over 1 million AI Apps at Risk
Four flaws in Dify exposed cross-tenant data, documents and AI conversations. Two critical bugs enabled unauthenticated access and data theft. Zafran Labs researchers disclosed four vulnerabilities in Dify, the open-source AI platform used by major companies like Volvo and Maersk to run over a million applications across over 60 industries. Two vulnerabilities are of critical…
-
The New Boardroom Mandate: Building Barriers to Limit Cyber Impact
As agentic AI expands the attack surface and accelerates cyberattacks, organizations must focus on containing breaches rather than preventing every intrusion, says Akamai’s Mani Sundaram. He explores AI-powered segmentation, securing AI factories and the convergence of browser security. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/new-boardroom-mandate-building-barriers-to-limit-cyber-impact-i-5549
-
Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents
Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says it reached roughly 26,000 agents, including some on corporate accounts.Every skill security scanner the firm tested it against marked it safe. The payload was harmless by design: it collected the user’s email address…
-
Agentische KI erhöht Sicherheitsrisiken durch neue Identitäts- und Angriffspfade
Tags: aiEs reicht nicht mehr, einzelne Zugriffsrechte statisch zu verwalten. Unternehmen müssen verstehen, welche Identität welches System tatsächlich erreichen kann. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/agentische-ki-erhoeht-sicherheitsrisiken-durch-neue-identitaets-und-angriffspfade/a45577/
-
Looming AI-fueled threats require urgent cybersecurity improvements, Five Eyes members say
The intelligence-sharing alliance said advanced AI models will surpass expectations in a matter of months. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-cyberattacks-five-eyes-frontier-models-warning/823526/
-
The Rise of AI-Powered Academic Fraud: Beyond Traditional Plagiarism
AI has changed academic fraud. It now creates original-looking work, fake sources, and hidden misconduct that schools must learn to detect. First seen on hackread.com Jump to article: hackread.com/rise-of-ai-powered-academic-fraud-plagiarism/
-
HR must have a say in AI policy to forestall legal risks
In this Q&A, employment attorney Deepa Menon explains the legal risks of using AI for workforce decisions and why lawyers, HR and IT must agree on a framework before implementing AI. First seen on techtarget.com Jump to article: www.techtarget.com/searchhrsoftware/news/366644954/HR-must-have-a-say-in-AI-policy-to-forestall-legal-risks
-
10 Major Cyberattacks And Data Breaches In 2026 (So Far)
Major cyberattacks and data breaches in 2026 so far include attacks against Cisco and Fortinet devices as well as Microsoft environments, while AI-driven vulnerability discovery showed signs of increasing. First seen on crn.com Jump to article: www.crn.com/news/security/2026/10-major-cyberattacks-and-data-breaches-in-2026-so-far
-
KI-Entwicklung schreitet schneller voran als Compliance und Datenkontrolle folgen können
Eine neue Studie von Veeam Software, dem Unternehmen für Data- und AI-Trust, zeigt eine zunehmende Compliance-Kluft in Unternehmen der EMEA-Region. 99 % der befragten Entscheidungsträger sind zwar der Meinung, dass Datenhoheit von entscheidender Bedeutung ist. Allerdings rückt die Mehrheit (72,5 %) das Thema zugunsten beschleunigter KI-Einführung in den Hintergrund. Das Ergebnis: KI-Workflows sind zur größten…
-
Zero-Trust-SASE für das KI-Zeitalter
Zscaler erweitert die Zscaler-Zero-Trust-SASE-Lösung mit der Einführung des <>. Diese Neuerung ist darauf ausgelegt, die gesamte Kommunikation vom Browser bis hin zu den Workloads auf einer einzigen Cloud-nativen Architektur zu sichern. Arbeitsprozesse finden heute zunehmend auf nicht verwalteten Geräten und über Lieferketten hinweg statt und KI-gesteuerte Angriffe verbreiten sich schneller, als sie abgewehrt werden […]…
-
Using Reddit to manipulate AI search results is surprisingly easy
Tags: aiA Reddit comment that takes only a few seconds to write can end up influencing the answers generated by AI research tools. A Cornell Tech study found that a short snippet of … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/23/reddit-ai-search-poisoning-research/
-
Zero-Trust für KI-Agenten
Der Spezialist für Secure-Access-Service-Edge (SASE), Versa, stellt eine neue Zero-Trust-Architektur für das Model-Context-Protocol (MCP) vor. Bei diesem zum Patent angemeldeten Ansatz wird keiner KI-Aktion implizit vertraut. Jeder von einem Agenten generierte Schritt wird vor der Ausführung anhand der Benutzeridentität, rollenbasierter Zugriffskontrollen und Systemrichtlinien überprüft. Zudem kann eine explizite menschliche Validierung auf der Grundlage von entsprechend…
-
Webinar: Why email security teams are drowning in alerts
Phishing, BEC, and account takeover attacks continue to overwhelm security teams with alerts and investigations. This webinar explores how behavioral AI can help automate detection and response workflows, reducing alert fatigue and improving operational efficiency. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/webinar-why-email-security-teams-are-drowning-in-alerts/
-
Five Eyes Agencies Warn AI Is Accelerating Cyber Threats and Zero-Day Exploitation
The Five Eyes cyber security agencies have issued a joint warning that artificial intelligence is rapidly accelerating cyber threats, including the exploitation of zero day vulnerabilities, and urged organizations to act immediately. In a statement released on June 22, 2026, senior leaders from agencies across the United States, United Kingdom, Canada, Australia, and New Zealand…
-
DifyTap Flaws Expose AI Data Across Tenants on Platform Powering 1M+ Apps
A series of critical vulnerabilities in the widely used open-source LLMOps platform Dify, which powers over one million AI applications. These vulnerabilities, collectively referred to as “DifyTap,” include four flaws, two rated as critical and two that require no authentication. They expose cross-tenant data leakage risks, allowing attackers to access private AI conversations, preview sensitive…
-
DifyTap Bugs Let Attackers ‘Wiretap’ AI Chat Histories
Four vulnerabilities allow attackers to exploit Dify, a platform for AI application building and management, to silently access and exfiltrate sensitive data. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/difytap-bugs-wiretap-ai-chat-histories
-
The Evolution of iGaming Fraud: What Security Teams Should Expect in 2027
Learn how AI, deepfakes, synthetic identities and fraud-as-a-service may reshape iGaming risk, and what security teams can do to detect future threats in 2027. First seen on hackread.com Jump to article: hackread.com/igaming-fraud-security-teams-expect-in-2027/
-
Agentic AI: The Weapon That No Longer Needs a Warrior
Tags: aiEvery weapon begins as an extension of the hand that holds it. The spear lengthened the reach of the arm. The bow sent the point flying without the throw. The rifle placed a man’s death a quarter mile beyond his sight, and the aircraft carried that death across oceans. At each turn, the distance between…
-
Claude Mythos und Co.: BSI warnt vor wachsender Cyberbedrohung durch KI
IT-Admins haben wegen KI immer weniger Zeit, um auf neue Cyberbedrohungen zu reagieren. Das BSI schlägt Alarm und gibt schützende Empfehlungen. First seen on golem.de Jump to article: www.golem.de/news/claude-mythos-und-co-bsi-warnt-vor-wachsender-cyberbedrohung-durch-ki-2606-210081.html
-
Claude Mythos und Co.: BSI warnt vor wachsender Cyberbedrohung durch KI
IT-Admins haben wegen KI immer weniger Zeit, um auf neue Cyberbedrohungen zu reagieren. Das BSI schlägt Alarm und gibt schützende Empfehlungen. First seen on golem.de Jump to article: www.golem.de/news/claude-mythos-und-co-bsi-warnt-vor-wachsender-cyberbedrohung-durch-ki-2606-210081.html
-
Claude Mythos und Co.: BSI warnt vor wachsender Cyberbedrohung durch KI
IT-Admins haben wegen KI immer weniger Zeit, um auf neue Cyberbedrohungen zu reagieren. Das BSI schlägt Alarm und gibt schützende Empfehlungen. First seen on golem.de Jump to article: www.golem.de/news/claude-mythos-und-co-bsi-warnt-vor-wachsender-cyberbedrohung-durch-ki-2606-210081.html
-
(g+) J.A.R.V.I.S. für jeden: Wo bleibt unser persönlicher KI-Assistent?
Tags: aiVersprochen wird bei KI immer viel. Wir erklären, warum der KI-Agent für die Hosentasche immer noch weit entfernt ist. First seen on golem.de Jump to article: www.golem.de/news/j-a-r-v-i-s-fuer-jeden-wo-bleibt-unser-persoenlicher-ki-assistent-2606-208234.html
-
Schwachstellen-Benchmark – GPT-5.5-Cyber von OpenAI übertrifft Claude Mythos 5
Codex Security kann nun automatisiert Schwachstellen analysieren und beheben. Erste Benchmarks sehen das KI-Modell vor Claude Mythos 5. First seen on computerbase.de Jump to article: www.computerbase.de/news/apps/schwachstellen-benchmark-gpt-5-5-cyber-von-openai-uebertrifft-claude-mythos-5.98051
-
Neue Initiative von OpenAI – ‘Patch the Planet” soll kritische Open-Source-Software stärken
Bei ‘Patch the planet” sollen KI-Sicherheitsanalysen mit menschlicher Expertise kombiniert werden, um Schwachstellen schneller zu erkennen. First seen on computerbase.de Jump to article: www.computerbase.de/news/apps/neue-initiative-von-openai-patch-the-planet-soll-kritische-open-source-software-staerken.98050
-
Neue Initiative von OpenAI – ‘Patch the Planet” soll kritische Open-Source-Software stärken
Bei ‘Patch the planet” sollen KI-Sicherheitsanalysen mit menschlicher Expertise kombiniert werden, um Schwachstellen schneller zu erkennen. First seen on computerbase.de Jump to article: www.computerbase.de/news/apps/neue-initiative-von-openai-patch-the-planet-soll-kritische-open-source-software-staerken.98050
-
Australian government cloud mandate sparks migration warnings
As Australia prepares to enforce its whole-of-government cloud policy, industry experts warn agencies against rushed migrations, vendor lock-in and treating AI readiness as an afterthought First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366644964/Australian-government-cloud-mandate-sparks-migration-warnings