Tag: ai
-
AI Assistants Used as Covert CommandControl Relays
AIs like Grok and Microsoft Copilot can be exploited as covert C2 channels for malware communication First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-assistants-covert-c2-relays/
-
Deepfakes, Betrug und unsichere Inhalte – 2025 gab es 346 KI-Vorfälle, ChatGPT am häufigsten beteiligt
First seen on security-insider.de Jump to article: www.security-insider.de/steigende-vorfaelle-von-ki-missbrauch-2025-a-7188b0190068b40db2b49da6c7830a1f/
-
Securing OpenClaw Against”ClawHavoc”
As of February 2026, OpenClaw (formerly Clawdbot and Moltbot ) is a popular platform for autonomous AI agents. Its “sovereign” architecture, which gives AI direct access to file systems and terminals, significantly increases its attack surface”, leading to elevated risks, most notably illustrated by the ClawHavoc supply-chain campaign, which exposed thousands of deployments to potential…
-
Palo Alto Networks CEO: AI Won’t Replace Security Tools ‘Any Time Soon’
Investor fears that AI poses more of a risk than an opportunity for cybersecurity vendors are unfounded, with LLMs unlikely to become capable of displacing security products in the foreseeable future, Palo Alto Networks CEO Nikesh Arora said Tuesday. First seen on crn.com Jump to article: www.crn.com/news/security/2026/palo-alto-networks-ceo-ai-won-t-replace-security-tools-any-time-soon
-
Your AI-generated password isn’t random, it just looks that way
Seemingly complex strings are actually highly predictable, crackable within hours First seen on theregister.com Jump to article: www.theregister.com/2026/02/18/generating_passwords_with_llms/
-
(g+) Anthropics Bericht über KI-Hacker: Keine CVE-ID – didn’t happen!
Ohne gründliche Dokumentation sind Anthropics Berichte über KI-Hacker unglaubwürdig. Das heißt nicht, dass LLMs kein Risiko darstellen. First seen on golem.de Jump to article: www.golem.de/news/anthropics-bericht-ueber-ki-hacker-keine-cve-id-didn-t-happen-2602-205498.html
-
AI Found Twelve New Vulnerabilities in OpenSSL
The title of the post is”What AI Security Research Looks Like When It Works,” and I agree: In the latest OpenSSL security release> on January 27, 2026, twelve new zero-day vulnerabilities (meaning unknown to the maintainers at time of disclosure) were announced. Our AI system is responsible for the original discovery of all twelve, each…
-
AI Found Twelve New Vulnerabilities in OpenSSL
The title of the post is”What AI Security Research Looks Like When It Works,” and I agree: In the latest OpenSSL security release> on January 27, 2026, twelve new zero-day vulnerabilities (meaning unknown to the maintainers at time of disclosure) were announced. Our AI system is responsible for the original discovery of all twelve, each…
-
OpenClaw AI Framework v2026.2.17 Adds Anthropic Model Support Amid Credential Theft Bug Concerns
OpenClaw, the open-source autonomous AI assistant that has gained widespread adoption in early 2026, released version v2026.2.17 on February 17, 2026, introducing support for Anthropic’s latest Claude Sonnet 4.6 model. The release comes amid growing security concerns after researchers documented the first in-the-wild credential theft targeting OpenClaw configuration files by infostealer malware. New Anthropic Model…
-
Cybersecurity Tech Predictions for 2026: Operating in a World of Permanent Instability
In 2025, navigating the digital seas still felt like a matter of direction. Organizations charted routes, watched the horizon, and adjusted course to reach safe harbors of resilience, trust, and compliance.In 2026, the seas are no longer calm between storms. Cybersecurity now unfolds in a state of continuous atmospheric instability: AI-driven threats that adapt in…
-
Cybersecurity Tech Predictions for 2026: Operating in a World of Permanent Instability
In 2025, navigating the digital seas still felt like a matter of direction. Organizations charted routes, watched the horizon, and adjusted course to reach safe harbors of resilience, trust, and compliance.In 2026, the seas are no longer calm between storms. Cybersecurity now unfolds in a state of continuous atmospheric instability: AI-driven threats that adapt in…
-
From Shadow APIs to Shadow AI: How the API Threat Model Is Expanding Faster Than Most Defenses
The shadow technology problem is getting worse. Over the past few years, organizations have scaled microservices, cloud-native apps, and partner integrations faster than corporate governance models could keep up, resulting in undocumented or shadow APIs. We’re now seeing this pattern all over again with AI systems. And, even worse, AI introduces non-deterministic behavior, autonomous actions,…
-
Keenadu: Android malware that comes preinstalled and can’t be removed by users
Embedded in core system apps: Keenadu can control legitimate system applications on affected devices. Kaspersky observed it inside critical components such as face unlock applications, raising the possibility that attackers could access biometric data. The malware was also found operating within the home screen app that controls the device’s primary interface.The researchers warned that the…
-
Microsoft says bug causes Copilot to summarize confidential emails
Microsoft says a Microsoft 365 Copilot bug has been causing the AI assistant to summarize confidential emails since late January, bypassing data loss prevention (DLP) policies that organizations rely on to protect sensitive information. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-says-bug-causes-copilot-to-summarize-confidential-emails/
-
Prompt Control is the New Front Door of Application Security
Discover how AI-driven systems are redefining application security. Research highlights the importance of focusing on inference layers, prompt control, and token management to effectively secure AI inference services and minimize risks associated with cost, latency, and data leakage. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/prompt-control-is-the-new-front-door-of-application-security/
-
HackerOne ‘updating’ Ts&Cs after bug hunters question if they’re training AI
CEO lauds security researchers, insists they’re not ‘inputs’ First seen on theregister.com Jump to article: www.theregister.com/2026/02/18/hackerone_ai_policy/
-
ClawHavoc Infects OpenClaw’s ClawHub with 1,184 Malicious Skills, Exposing Data Theft Risks
A large-scale supply chain poisoning campaign dubbed ClawHavoc has hit OpenClaw’s official skill marketplace, ClawHub, with at least 1,184 malicious “Skills” historically published on the platform. The incident highlights how fast-growing AI agent ecosystems can become high-value malware distribution channels when plugins are easy to publish and users routinely grant agents broad system access. OpenClaw (previously known…
-
3 Ways to Start Your Intelligent Workflow Program
Security, IT, and engineering teams today are under relentless pressure to accelerate outcomes, cut operational drag, and unlock the full potential of AI and automation. But simply investing in tools isn’t enough. 88% of AI proofs-of-concept never make it to production, even though 70% of workers cite freeing time for high-value work as the primary…
-
A new approach for GenAI risk protection
Solution 1: GenAI enterprise model: Implement enterprise licenses for approved GenAI solutions (such as ChatGPT Enterprise or Microsoft CoPilot 365, which is integrated into existing O365 tenants). Enterprise GenAI solutions typically include a robust set of built-in security tools that allow organizations to secure their data and implement DLP controls within the enterprise GenAI solution…
-
Palo Alto Networks to Acquire Koi Security for Enhanced Agentic Endpoint Security
Palo Alto Networks announced on February 17, 2026, that it has entered a definitive agreement to acquire Koi Security, a pioneer in Agentic Endpoint Security. The acquisition aims to address a critical security gap created by AI agents and tools that operate with extensive permissions and data access while bypassing traditional security controls. AI agents…
-
AI Act macht Cybersicherheit zur Compliance-Pflicht – AI Act bringt neue Cybersicherheitspflichten für KI-Systeme
First seen on security-insider.de Jump to article: www.security-insider.de/ai-act-cybersicherheit-hochrisiko-ki-a-0dadcded50bf31221902a7f1f917aa80/
-
Notepad mit KI: Wie Microsoft einen 42 Jahre alten Editor zum Sicherheitsrisiko machte
First seen on t3n.de Jump to article: t3n.de/news/notepad-mit-ki-wie-microsoft-einen-42-jahre-alten-editor-zum-sicherheitsrisiko-machte-1729667/
-
Scammers use fake “Gemini” AI chatbot to sell fake “Google Coin”
An AI chatbot posing as Google’s Gemini is being used to pitch fake “Google Coin,” promising 7x returns. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/scammers-use-fake-gemini-ai-chatbot-to-sell-fake-google-coin/
-
Malware Campaign Targets Crypto Users with Fake MetaMask Wallet and Remote Access Backdoor
An aggressive malware campaign targeting IT professionals in cryptocurrency, Web3, and AI to steal sensitive data and live crypto funds from victim wallets. The attackers pose as recruiters and use trojanized coding tasks to deliver two core malware families, BeaverTail and InvisibleFerret, which have been steadily upgraded with new data theft and wallet-targeting features. The…
-
Autonome KI als neue Angriffsfläche in der IT-Sicherheit
Tags: ai2026 markiert einen Wendepunkt. KI ist nicht mehr nur Hilfsmittel, sondern Teil der Angriffsfläche. Autonome Agenten, dynamische Infrastrukturen und beschleunigte Entwicklung verändern die Spielregeln grundlegend. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/autonome-ki-als-neue-angriffsflaeche-in-der-it-sicherheit/a43750/
-
Claude Sonnet 4.6 launches with improved coding and expanded developer tools
Anthropic released Claude Sonnet 4.6, marking its second major AI launch in less than two weeks. Scores prior to Claude Sonnet 4.5 (Source: Anthropic) According to Anthropic, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/18/anthropic-claude-sonnet-4-6-release/
-
The new paradigm for raising up secure software engineers
Tags: ai, application-security, awareness, ceo, ciso, compliance, control, cyber, data, governance, login, risk, skills, software, threat, tool, training, vulnerabilityThreat modeling as a core competency: This system-level thinking should also elevate the need for greater developer fluency in threat modeling, says Yasar. He notes that threat modeling has historically been difficult for product security and engineering teams to operationalize at scale. One of the longstanding barriers to practical threat modeling was the knowledge required…
-
AWS coding agents gain new plugin support across development tools
AI coding assistants have become a routine part of many development workflows, helping engineers write, test, and deploy code from IDEs or command line interfaces. One recent … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/18/agent-plugins-for-aws-now-available/
-
AWS coding agents gain new plugin support across development tools
AI coding assistants have become a routine part of many development workflows, helping engineers write, test, and deploy code from IDEs or command line interfaces. One recent … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/18/agent-plugins-for-aws-now-available/
-
Banks Need Revocable AI Identities, Continuous Trust Models
Fraud Specialist David Barnhardt on Addressing Authentication Risks of Agentic AI. Financial institutions are racing to deploy AI agents that can initiate payments, approve transactions and freeze accounts. But traditional authentication frameworks assume there’s a human on the other end. As agentic AI use grows, banks are facing an authentication crisis that demands new controls.…