Tag: ai
-
Anthropic releases Claude Opus 4.7 with automated cybersecurity safeguards
Software teams building agentic AI workflows have been pushing frontier models toward longer, unsupervised task runs. Claude Opus 4.7, now generally available from Anthropic, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/16/claude-opus-4-7-released/
-
»Human in the Loop« verwandelt KI in einen steuerbaren Schlüsselfaktor
Eine aktuelle Studie des Branchenverbands Bitkom zeigt, dass viele Nutzer dem Einsatz von KI weiterhin skeptisch gegenüberstehen [1]. Zugleich verbindet sich mit der Technologie das Risiko sogenannter Halluzinationen und fehlerhafter Ergebnisse. Der Ansatz »Human in the Loop« minimiert diese Vorbehalte und Risiken weitgehend durch Kontrolle der Ergebnisse und Training von KI-Modellen, wie Thomas Uber, Geschäftsführer……
-
Curity looks to reinvent IAM with runtime authorization for AI agents
Multiple approaches to agent security: Today, agent security falls into one of several camps, which include increasingly inadequate inline approaches such as API gateways and web application firewalls (WAFs), and out-of-band analysis systems that infer intent by analyzing agent behavior against a baseline.Curity’s Access Intelligence, by contrast, is a self-hosted microservice that acts as a…
-
Ransomware-Bedrohungen und KI-Transformation verschieben Fokus von Recovery hin zu Resilienz
Der neue ‘Veeam Data Trust and Resilience Report” von Veeam Software stellt fest, dass 90 Prozent der Sicherheitsverantwortlichen davon überzeugt sind, Daten schnell wiederherstellen zu können. Allerdings schaffen es letztlich nur 28 Prozent, die Daten nach einem Ransomware-Angriff auch tatsächlich vollständig wiederherzustellen. Veeam hat den ‘Data Trust and Resilience Report 2026″ veröffentlicht, der eine wachsende…
-
Anthropic tests user trust with ID and selfie checks for Claude
Anthropic announced identity verification for Claude using government ID and selfie checks, becoming the first major AI chatbot to do so, a move that may prove unpopular with … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/04/16/anthropic-claude-identity-verification-government-id/
-
AI Risk Management in SaaS: A Practical Guide
Learn how to manage AI risk in SaaS environments across identity, access, and integrations. A practical guide for modern AI governance. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/ai-risk-management-in-saas-a-practical-guide/
-
Cyberrisiko Digitalisierung und KI warum Identitäten zum zentralen Sicherheitsfaktor in Kliniken werden
Tags: aiStatement zur DMEA 2026 von Olaf Milde, Manager Solutions Engineering Central Europe bei Imprivata Mit der wachsenden digitalen Vernetzung der Akteure im Gesundheitswesen und dem Einsatz von KI-Agenten steigt auch die Angriffsfläche für Cyberkriminelle. Krankenhäuser gelten heute als besonders attraktive Ziele für Angreifer: Sie verarbeiten hochsensible Patientendaten, betreiben komplexe IT-Infrastrukturen und sind gleichzeitig auf… First…
-
Curity looks to reinvent IAM with runtime authorization for AI agents
Multiple approaches to agent security: Today, agent security falls into one of several camps, which include increasingly inadequate inline approaches such as API gateways and web application firewalls (WAFs), and out-of-band analysis systems that infer intent by analyzing agent behavior against a baseline.Curity’s Access Intelligence, by contrast, is a self-hosted microservice that acts as a…
-
AgentManager schützt die hybride Belegschaft aus Menschen und KI-Agenten
Der Anbieter der weltweit bekannten Plattform, die sich umfassend mit dem Human-Risk-Management und KI-Agenten befasst, KnowBe4, führt den Agent-Risk-Manager ein. Das branchenweit erste Verteidigungssystems, das darauf ausgelegt ist, das Verhalten autonomer KI-Agenten zu sichern, zu überwachen und zu steuern. Der Agent-Risk-Manager ist ein Eckpfeiler der KnowBe4-HRM+-Plattform und verändert grundlegend, wie Unternehmen die Risiken der menschlichen…
-
The Deepfake Nudes Crisis in Schools Is Much Worse Than You Thought
An analysis by WIRED and Indicator found nearly 90 schools and 600 students around the world impacted by AI-generated deepfake nude images”, and the problem shows no signs of going away. First seen on wired.com Jump to article: www.wired.com/story/deepfake-nudify-schools-global-crisis/
-
Analyze AI Agent Access: Introducing the Aembit MCP Server
4 min readTeams can query workload identity data in plain language, investigate activity, and move faster without leaving the Aembit platform. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/analyze-ai-agent-access-introducing-the-aembit-mcp-server/
-
Island stellt SASE für das KI-Zeitalter neu auf im Rahmen der Perfect-Packet-Architektur
Bei Fortune-500-Firmen in der Praxis bewährt: Die Perfect-Packet-Architektur analysiert, prüft und schützt Datenverkehr genau dort, wo es sinnvoll ist auf dem Endgerät oder in der Cloud. So entfallen Reibungsverluste klassischer SASE-Modelle. Island, die Plattform für Enterprise Work und Entwickler des Enterprise Browsers, präsentiert eine grundlegend neue Secure Access Service Edge (SASE)-Architektur [1]. Ihr… First seen…
-
Databricks verkündet ein 400-Millionen-Dollar Investment in Deutschland, um die Daten- und KI-Adaption zu beschleunigen, KI-Talente auszubilden und Standorte auszubauen
Das Daten- und KI-Unternehmen Databricks gibt Pläne bekannt, in den nächsten drei Jahren mehr als 400 Millionen Dollar in Deutschland zu investieren. Diese Investition wird die Präsenz des Unternehmens ausbauen und Spitzenkräfte im Bereich KI anziehen. Außerdem wird es die steigende Nachfrage nach Lakebase und Genie bedienen. Das Engagement umfasst die Eröffnung eines Büros in Frankfurt, den Ausbau…
-
NTT Research Launches Scale Academy to Bring Lab Technology to Market
NTT Research launches Scale Academy to turn AI and security research into real products, debuting SaltGrain, a zero-trust data security platform. The post NTT Research Launches Scale Academy to Bring Lab Technology to Market appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ntt-research-scale-academy/
-
Best AI Governance Tools for Enterprises (2026)
Compare the best AI governance tools for enterprises in 2026. Learn what most platforms miss and how to actually control AI risk. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/best-ai-governance-tools-for-enterprises-2026/
-
RCE by design: MCP architectural choice haunts AI agent ecosystem
sh, bash, powershell, curl, rm, and other high-risk binaries, they added.The core issue is that there’s currently no check in place to verify that a STDIO command is intended to initialize an MCP server rather than perform a malicious task. Furthermore, the researchers observed that even if the sent command fails to start the server,…
-
Git identity spoof fools Claude into giving bad code the nod
Forged metadata made AI reviewer treat hostile changes as though they came from known maintainer First seen on theregister.com Jump to article: www.theregister.com/2026/04/16/git_identity_spoof_claude/
-
NTT Research Launches Scale Academy to Bring Lab Technology to Market
NTT Research launches Scale Academy to turn AI and security research into real products, debuting SaltGrain, a zero-trust data security platform. The post NTT Research Launches Scale Academy to Bring Lab Technology to Market appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ntt-research-scale-academy/
-
prompted 2026 Glass-Box Security: Operationalizing Mechanistic Interpretability
Author, Creator & Presenter: Carl Hurd, Co-Founder & CTO, Starseer Our thanks to [un]prompted for publishing their Creators, Authors and Presenter’s outstanding [un]prompted 2026 AI Security Practitioner content on the Organizations’ YouTube Channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/unprompted-2026-glass-box-security-operationalizing-mechanistic-interpretability/
-
NIST cuts down CVE analysis amid vulnerability overload
Tags: ai, automation, awareness, ceo, cve, cybersecurity, defense, exploit, flaw, government, group, incident response, nist, software, technology, threat, update, vulnerability, zero-daySOURCE: www.cve.org/about/Metrics CSOAs a result, NIST will now forego enrichment for all but the most critical of vulnerabilities.Backlogged CVEs received prior to March 1 will also be labeled “not scheduled.” None of those are critical vulnerabilities, NIST said, because those have always been handled first.”They’ve just come out and publicly stated, ‘We are never going…
-
Ghost breaches: How AI-mediated narratives have become a new threat vector
Three incidents. No actual breaches. Full-scale crisis response. AI hallucinations are creating a new threat vector that most organizations have yet to prepare for. First seen on cyberscoop.com Jump to article: cyberscoop.com/ai-generated-breach-narratives-ghost-threat-vector-op-ed/
-
AI-powered mainframe exits are a bubble set to pop
Tags: aiAnalysts reckon 70 percent of projects will fail, and 75 percent of vendors in the field will go away First seen on theregister.com Jump to article: www.theregister.com/2026/04/15/gartner_mainframe_exit_analysis/
-
What to do When Your AI Guardrails Fail
I want to talk about a bug. Not because the bug itself was exceptional, but because what it exposed should change how every organisation architects AI governance. For several weeks earlier this year, Microsoft 365 Copilot read and summarised confidential emails despite sensitivity labels and Data Loss Prevention policies being correctly configured to block that…
-
What Is AI Risk? A Clear Definition for 2026
What AI risk actually means, where it lives, and why most teams get it wrong. Data-backed insights from the 2026 SaaS + AI Security Report. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/04/what-is-ai-risk-a-clear-definition-for-2026/
-
Behind the Mythos hype, Glasswing has just one confirmed CVE
Why is Glasswing still a big deal: VulnCheck’s findings reframe Glasswing’s capabilities. The limited number of directly attributable CVEs is just one way of measuring its impact. Industry observers are interpreting Mythos much differently.Melissa Bischoping, a SANS Technology Institute board member and senior Director of security and product research at Tanium, thinks Mythos potential lies…
-
Smashing Security podcast #463: This AI company leaked its own code. It’s also built something terrifying
A hacking group claims to have broken into the flood defence system protecting Venice’s Piazza San Marco – and is offering to sell access to whoever wants it. The asking price? A frankly insulting $600. First seen on grahamcluley.com Jump to article: grahamcluley.com/smashing-security-podcast-463/
-
Fake Claude AI Installer Targets Windows Users with PlugX Malware
Fake Claude AI installer mimicking Anthropic spreads PlugX malware on Windows, using DLL sideloading to gain persistent remote access to infected systems. First seen on hackread.com Jump to article: hackread.com/fake-claude-ai-installer-plugx-malware-windows-users/
-
UK Government Sound Alarm Over AI Security Risk
This week, UK government leaders and cyber officials are sounding an increasingly urgent alarm over the security risks posed by artificial intelligence, warning that the technology is both amplifying existing cyber threats and reshaping the balance between attackers and defenders. In a joint open letter to business leaders, ministers and the National Cyber Security Centre…