Tag: ai
-
OpenAI Launches EVMbench: A New Framework to Detect and Exploit Blockchain Vulnerabilities
Tags: ai, blockchain, crypto, cyber, exploit, framework, intelligence, open-source, openai, vulnerabilityOpenAI has collaborated with crypto investment firm Paradigm to release EVMbench, a new benchmark designed to evaluate how artificial intelligence agents interact with smart contract security. As smart contracts currently secure over $100 billion in open-source crypto assets, the ability of AI to successfully read, write, and audit code is becoming a critical component of…
-
New Threat Emerges as Attackers Leverage Grok and Copilot to Evade Security Monitoring
Researchers at Check Point Research (CPR) have uncovered a novel technique where cybercriminals utilize popular AI platforms like Grok and Microsoft Copilot to orchestrate covert attacks. This method transforms benign AI web services into proxies for Command and Control (C2) communication. By leveraging the web browsing and URL-fetching capabilities of these assistants, attackers can tunnel…
-
Consumers feel less judged by AI debt collectors
Tags: aiDebt collection agencies are starting to use automated voice systems and AI-driven messaging to handle consumer calls. These systems help scale outreach, reduce call center … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/19/consumer-ai-debt-collection/
-
Critical MCP Server Enables Arbitrary Code Execution and Sensitive Data Exfiltration
MCP servers can silently turn AI assistants into powerful attack platforms, enabling arbitrary code execution, large”‘scale data exfiltration, and stealthy user manipulation across both local machines and cloud environments. New research and recent real”‘world incidents show that this emerging ecosystem is already being abused in the wild, including a malicious Postmark MCP server that quietly…
-
A Busy Week for Cybersecurity Speaking Engagements
I have a busy week with podcasts, webinars, and a keynote! Communicating and sharing is vital to the cybersecurity industry. It is how we leverage shared knowledge and experiences to make more informed decisions and gain better positions against our adversaries. Yesterday (Tuesday Feb 17th) I was speaking on Convene Chats webinar with the amazing…
-
Adaptive HEAL Security for Multi-Agent Semantic Routing
Learn how to secure multi-agent semantic routing in MCP environments with Adaptive HEAL security, post-quantum cryptography, and zero-trust AI architecture. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/adaptive-heal-security-for-multi-agent-semantic-routing/
-
Chronosphere Deal Signals Security-Observability Convergence
Founder, CEO Martin Mao: AI-Driven Remediation, Data Optimization at Core of Deal. Palo Alto Networks’ acquisition of Chronosphere will help unify observability and security operations. The integration with Cortex AgentiX and Cortex XSIAM aims to automate remediation, optimize telemetry pipelines and help enterprises manage soaring data volumes from cloud-native and AI workloads. First seen on…
-
Koi Purchase Bolsters Palo Alto’s AI Attack Surface Defense
$300M Acquisition Strengthens Palo Alto Networks’ XDR and AI Governance Platform. Palo Alto Networks plans to acquire Koi Security for $300 million to address growing AI-driven endpoint risks. The startup’s technology adds deep visibility into AI agents plug-ins and nonbinary code, enhancing Cortex XDR and Prisma AIRS as enterprises confront a growing unmanaged AI attack…
-
How is secrets sprawl management getting better with AI?
How Are Non-Human Identities Revolutionizing Cybersecurity? Have you ever wondered how the intricate dance between security and innovation is managed? The answer is effective oversight of Non-Human Identities (NHIs) and secrets security management. With the increasing complexity of digital, the introduction of machine identities has paved the way in cybersecurity, particularly in cloud-driven infrastructures. Understanding……
-
Why are cybersecurity professionals confident in Agentic AI defenses?
How Are Non-Human Identities Reshaping Cloud Security Strategies? In what ways do organizations manage evolving digital machine identities? The rapid increase in machine-to-machine communications has brought about a new dimension of security considerations, particularly with the rise of Non-Human Identities (NHIs). NHIs, primarily composed of secrets like encrypted passwords, tokens, or keys, demand a strategic……
-
Scam Abuses Gemini Chatbots to Convince People to Buy Fake Crypto
A convincing presale site for phony Google Coin features an AI assistant that engages victims with a slick sales pitch, funneling payment to attackers. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/scam-abuses-gemini-chatbots-convince-people-buy-fake-crypto
-
Moltbook is Dangerous, but Scale Doesn’t Match the Hype: Zenity
Tags: aiZenity security researchers ran a controlled influence campaign to see how active AI agents are on the much-hyped Moltbook and whether they could be manipulated through the platform’s functions. What they found was that its scale doesn’t match what’s advertised but that presents significant security concerns. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/moltbook-is-dangerous-but-scale-doesnt-match-the-hype-zenity/
-
Palo Alto Networks Moves to Secure Agentic Endpoints with Koi Deal
Palo Alto Networks has agreed to acquire Israeli startup Koi Security, marking a timely strategic push to confront the risks of AI agents operating inside corporate systems with broad access to data yet limited oversight. Palo Alto Networks plans to integrate Koi’s technology, known as Agentic Endpoint Security, into its Prisma AIRS AI security platform..…
-
Microsoft Patches Security Flaw That Exposed Confidential Emails to AI
Microsoft Corp. confirmed it is addressing a significant security lapse that allowed its Copilot AI to bypass privacy protections and summarize users’ confidential emails without authorization. The bug, which has persisted since late January, effectively ignored data loss prevention (DLP) protocols designed to keep sensitive corporate information out of the reach of large language models..…
-
Microsoft Patches Security Flaw That Exposed Confidential Emails to AI
Microsoft Corp. confirmed it is addressing a significant security lapse that allowed its Copilot AI to bypass privacy protections and summarize users’ confidential emails without authorization. The bug, which has persisted since late January, effectively ignored data loss prevention (DLP) protocols designed to keep sensitive corporate information out of the reach of large language models..…
-
Hidden Commands Found in AI Summarize Buttons
Commands Push Lasting Preferences Into AI Assistants. Microsoft researchers found companies embedding hidden commands in summarize with AI buttons to plant lasting brand preferences in assistants’ memory. The tactic, dubbed AI recommendation poisoning, exploits persistent memory features to bias future responses. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/hidden-commands-found-in-ai-summarize-buttons-a-30784
-
AI platforms can be abused for stealthy malware communication
AI assistants like Grok and Microsoft Copilot with web browsing and URL-fetching capabilities can be abused to intermediate command-and-control (C2) activity. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ai-platforms-can-be-abused-for-stealthy-malware-communication/
-
‘Promptware’ Attacks Await an Unprepared AI Industry
Researchers Say AI Prompt Injection Has Emerged As a Dangerous New Class of Attacks. The large language model industry has mostly treated prompt injection attacks as a risk analogous to traditional web server prompt injection attacks. Researchers now say feeding rogue instructions to an artificial intelligence system merits its own classification as promptware. First seen…
-
A CISO’s Playbook for Defending Data Assets Against AI Scraping
Discover a strategic approach to govern scraping risks, balance security with business growth, and safeguard intellectual capital from automated data harvesting. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/ciso-playbook-defending-data-assets-against-ai-scraping
-
Firebase Misconfiguration Exposes 300M Messages From Chat Ask AI Users
A technical mistake in the popular Chat Ask AI app has left 300 million private messages from 25 million users exposed online. Discover what happened and how you can protect your personal data when using AI chatbots. First seen on hackread.com Jump to article: hackread.com/firebase-misconfiguration-chat-ask-ai-users-expose/
-
‘Pomptware’ Attacks Await an Unprepared AI Industry
Researchers Say AI Prompt Injection Has Emerged As a Dangerous New Class of Attacks. The large language model industry has mostly treated prompt injection attacks as a risk analogous to traditional web server prompt injection attacks. Researchers now say feeding rogue instructions to an artificial intelligence system merits its own classification as promptware. First seen…
-
‘Pomptware’ Attacks Await an Unprepared AI Industry
Researchers Say AI Prompt Injection Has Emerged As a Dangerous New Class of Attacks. The large language model industry has mostly treated prompt injection attacks as a risk analogous to traditional web server prompt injection attacks. Researchers now say feeding rogue instructions to an artificial intelligence system merits its own classification as promptware. First seen…
-
The 20 Coolest Web, Email and Application Security Companies Of 2026: The Security 100
CRN’s Security 100 list of the coolest web, email and application security companies includes AI-powered vendors protecting email inboxes and web browsers along with providers of modern code security. First seen on crn.com Jump to article: www.crn.com/news/security/2026/the-20-coolest-web-email-and-application-security-companies-of-2026-the-security-100
-
Agentic AI affecting the world of the SOC
While many are tempted to lean on agentic AI, the rush to do so is potentially creating more risk First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366639051/Agentic-AI-affecting-the-world-of-the-SOC
-
How synthetic data can help solve AI’s data crisis
As AI demand outpaces the availability of high-quality training data, synthetic data offers a path forward. We unpack how synthetic datasets help teams overcome data scarcity to build production-ready AI. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/how-synthetic-data-can-help-solve-ais-data-crisis/
-
Threat groups using AI to speed up and scale cyberattacks
A report from Palo Alto Networks finds hackers are increasingly using stolen identities and exploiting critical vulnerabilities within minutes of disclosure. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/threat-groups-ai-speed-scale-cyberattacks/812439/
-
Millionen Chrome-Erweiterungen geben Browserverlauf preis
Eine Sicherheitslücke in beliebten Chrome-Erweiterungen führt dazu, dass der Browserverlauf der Anwender offengelegt ist.Ein Sicherheitsforscher mit dem Pseudonym ‘Q Continuum” hat 287 Chrome-Erweiterungen entdeckt, die den Browserverlauf exfiltrieren. ‘Die Akteure hinter den Lecks sind vielfältig: Similarweb, Curly Doggo, Offidocs, chinesische Akteure, viele kleinere, unbekannte Datenbroker sowie ein mysteriöses Unternehmen namens “šBig Star Labs’, das offenbar…
-
AI Assistants Used as Covert CommandControl Relays
AIs like Grok and Microsoft Copilot can be exploited as covert C2 channels for malware communication First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-assistants-covert-c2-relays/