Tag: ai
-
Op Bizarre Bazaar: New LLMjacking Campaign Targets Unprotected Models
Pillar Security Research has discovered Operation Bizarre Bazaar, a massive cyberattack campaign led by a hacker known as Hecker. Between December 2025 and January 2026, over 35,000 sessions were recorded targeting AI systems to steal compute power and resell access via silver.inc. First seen on hackread.com Jump to article: hackread.com/operation-bizarre-bazaar-llmjacking-unprotected-models/
-
The Agentic AI Posture Score: A New Metric for CISOs
In cybersecurity, we live by our metrics. We measure Mean Time to Respond (MTTR), Dwell Time, and Patch Cadence. These numbers tell the Board how fast we react when things go wrong. But in the era of Agentic AI, reaction speed is no longer enough. When an AI Agent or an MCP server is compromised,…
-
An AI Toy Exposed 50,000 Logs of Its Chats With Kids to Anyone With a Gmail Account
AI chat toy company Bondu left its web console almost entirely unprotected. Researchers who accessed it found nearly all the conversations children had had with the company’s stuffed animals. First seen on wired.com Jump to article: www.wired.com/story/an-ai-toy-exposed-50000-logs-of-its-chats-with-kids-to-anyone-with-a-gmail-account/
-
Palo Alto Networks Completes $3.3B Acquisition Of Chronosphere For AI Observability Push
Palo Alto Networks is giving a massive boost to its capabilities in AI observability and security with the completion Thursday of its $3.35 billion acquisition of Chronosphere, according to the company. First seen on crn.com Jump to article: www.crn.com/news/security/2026/palo-alto-networks-completes-3-3b-acquisition-of-chronosphere-for-ai-observability-push
-
BlackIce Introduced as Container-Based Red Teaming Toolkit for AI Security Testing
Databricks introduced BlackIce at CAMLIS Red 2025, an open-source containerized toolkit that consolidates 14 widely-used AI security tools into a single, reproducible environment. This innovation addresses critical pain points in AI red teaming by eliminating complex setup procedures and dependency conflicts that traditionally hinder security testing workflows. AI red teamers face four persistent obstacles that…
-
Researchers Uncover Semantic Chaining Attack That Defeats Grok 4, Gemini AI Safeguards
Security researchers have identified a sophisticated jailbreak technique called Semantic Chaining that successfully bypasses safety filters in leading multimodal AI models, including Grok 4 and Gemini Nano Banana Pro. The vulnerability exploits how these systems process multi-step reasoning, allowing attackers to generate prohibited content both text and text-in-image outputs that would normally trigger safety mechanisms.…
-
Weaponized VS Code Extension “ClawdBot Agent” Spreads ScreenConnect RAT
A malicious Visual Studio Code extension posing as an AI coding assistant has been caught secretly installing a fully functional remote access tool (RAT) on developer machines. The extension looks convincing at first glance: polished branding, a professional icon, and integration with several AI providers including OpenAI, Anthropic, Google, Ollama, Groq, Mistral, and OpenRouter. In…
-
MIND Extends DLP Reach to AI Agents
MIND extends its data loss prevention platform to secure agentic AI, enabling organizations to discover, monitor, and govern AI agents in real time to prevent sensitive data exposure, shadow AI risks, and prompt injection attacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/mind-extends-dlp-reach-to-ai-agents/
-
Microsoft Previews Windows 11 Update With Smarter AI and Phone Continuity
Here’s a peek at AI assistance, phone-to-PC handoff, accessibility improvements, security fixes, and stability updates. The post Microsoft Previews Windows 11 Update With Smarter AI and Phone Continuity appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-windows-11-preview-ai-phone-upgrades/
-
MIND Extends DLP Reach to AI Agents
MIND extends its data loss prevention platform to secure agentic AI, enabling organizations to discover, monitor, and govern AI agents in real time to prevent sensitive data exposure, shadow AI risks, and prompt injection attacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/mind-extends-dlp-reach-to-ai-agents/
-
MIND Extends DLP Reach to AI Agents
MIND extends its data loss prevention platform to secure agentic AI, enabling organizations to discover, monitor, and govern AI agents in real time to prevent sensitive data exposure, shadow AI risks, and prompt injection attacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/mind-extends-dlp-reach-to-ai-agents/
-
Digitale Bedrohungslage verschärft sich weiter: 14 Prozent mehr Angriffe in Deutschland
Künstliche Intelligenz sorgt in der IT-Sicherheit für einen der tiefgreifendsten Umbrüche, die die Branche je erlebt hat. Fähigkeiten, die früher hochspezialisierten Angreifer Gruppen vorbehalten waren, stehen heute einer breiten Masse zur Verfügung. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/digitale-bedrohungslage-verschaerft-sich-weiter-14-prozent-mehr-angriffe-in-deutschland/a43496/
-
EU’s answer to CVE solves dependency issue, adds fragmentation risks
Tags: access, ai, china, cisco, cve, cyber, cybersecurity, data, dos, exploit, finance, governance, grc, infrastructure, intelligence, international, nvd, open-source, risk, service, software, threat, tool, vulnerability, vulnerability-managementCoordinated disclosure: Nik Kale, principal engineer and product architect at Cisco Systems, says GCVE’s main challenge comes from building a platform that the security community can rely on for coordinated disclosure and remediation.”Viability depends far more on governance than on the data itself,” Kale says. “That includes clear attribution rules, transparent CNA processes, predictable decision-making,…
-
Cybersecurity Teams Embrace AI, Just Not at the Scale Marketing Suggests
Despite the seemingly widespread adoption of AI for security operations, security leaders primarily use it for “relatively basic use cases,” said a Sumo Logic study First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cybersecurity-teams-embrace-ai/
-
NSFOCUS Unveils Enhanced AI LLM Risk Threat Matrix for Holistic AI Security Governance
SANTA CLARA, Calif., Jan 29, 2026 Security is a prerequisite for the application and development of LLM technology. Only by addressing security risks when integrating LLMs can businesses ensure healthy and sustainable growth. NSFOCUS first proposed the AI LLM Risk Threat Matrix in 2024. The Matrix addresses security from multiple perspectives: foundational security, data security,…The…
-
NIST’s AI guidance pushes cybersecurity boundaries
Tags: access, ai, ciso, control, cybersecurity, data, defense, exploit, framework, intelligence, nist, risk, risk-assessment, software, threatThe limits of ‘AI is just software’: NIST’s instinct to frame AI as an extension of traditional software allows organizations to reuse familiar concepts, risk assessment, access control, logging, defense in depth, rather than starting from zero. Workshop participants repeatedly emphasized that many controls do transfer, at least in principle.But some experts argue that the…
-
A Lack of Spending Isn’t the Problem With Cloud Security, Structural Complexity Is
Cloud security is hard and getting harder, a Fortinet study says, as AI widens a complexity gap and empowers attackers. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/a-lack-of-spending-isnt-the-problem-with-cloud-security-structural-complexity-is/
-
Indurex startet neue Plattform für sichere und resiliente cyber-physische Systeme
KI-gestützt, aber mit menschlicher Kontrolle: Indurex macht aus komplexen Industriedaten verlässliche Entscheidungen für kritische Infrastrukturen. Die Indurex-Plattform wurde genau für diese neue Realität entwickelt. Sie betrachtet Sicherheit und Betrieb nicht als getrennte Disziplinen, sondern als eng miteinander verbunden und als gemeinsame Grundlage für echte Resilienz. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/indurex-startet-neue-plattform-fuer-sichere-und-resiliente-cyber-physische-systeme/a43492/
-
KI-Identitäten außer Kontrolle: Massive Governance-Lücken in deutschen Unternehmen
Künstliche Intelligenz ist längst kein Zukunftsthema mehr. Sie agiert in Arbeitsumgebungen bereits heute autonom. Das ist auf der einen Seite ein Riesenvorteil, auf der anderen Seite jedoch schwierig überwachbar. Eine neue internationale Umfrage, beauftragt von Saviynt und in Deutschland, Großbritannien und den USA durchgeführt, zeigt: KI-Identitäten greifen bereits tief in kritische Systeme ein [1]…. First…
-
Crooks are hijacking and reselling AI infrastructure: Report
Tags: access, ai, api, attack, authentication, business, cloud, communications, control, credentials, cybersecurity, data, data-breach, endpoint, exploit, firewall, group, infosec, infrastructure, intelligence, Internet, LLM, malicious, marketplace, risk, service, skills, technology, theft, threat, training, vulnerabilityexposed endpoints on default ports of common LLM inference services;unauthenticated API access without proper access controls;development/staging environments with public IP addresses;MCP servers connecting LLMs to file systems, databases and internal APIs.Common misconfigurations leveraged by these threat actors include:Ollama running on port 11434 without authentication;OpenAI-compatible APIs on port 8000 exposed to the internet;MCP servers accessible without…
-
Spies in the Spreadsheet: >>Sheet Attack<< Uses Google Sheets AI to Target India
The post Spies in the Spreadsheet: >>Sheet Attack<< Uses Google Sheets AI to Target India appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/spies-in-the-spreadsheet-sheet-attack-uses-google-sheets-ai-to-target-india/
-
How does Agentic AI improve platform security
Are Organizations Truly Safe Without Effective Non-Human Identity Management? The Growing Importance of Agentic AI in Platform Security How can organizations navigate the complex terrain of cybersecurity to ensure both human and machine identities are secure? The answer may lie within the burgeoning field of Agentic AI, which is transforming platform security. Where businesses increasingly……
-
AI Use by CISA Chief Alarms Cyber Officials
CISA Defends Director’s Use of AI Tool Despite Internal Compliance Review. Cybersecurity and Infrastructure Security Agency Acting Director Madhu Gottumukkala uploaded sensitive documents to ChatGPT under a temporary, approved exception, prompting internal alerts and reigniting concerns over the agency’s AI governance and leadership judgement. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-use-by-cisa-chief-alarms-cyber-officials-a-30620
-
‘AI-Powered’ Services Firm Says Hack Affects 3.1M
Reported Victim Tally in HCIactive’s Health Data Theft Incident Soars. The victim count in a 2025 hack against a Maryland-based firm that provides AI-powered administrative and technology services to healthcare practices soared to nearly 3.1 million nationwide, according to an updated breach report from Healthcare Interactive. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-powered-services-firm-says-hack-affects-31m-a-30618
-
ICE Is Using Palantir’s AI Tools to Sort Through Tips
ICE has been using an AI-powered Palantir system to summarize tips sent to its tip line since last spring, according to a newly released Homeland Security document. First seen on wired.com Jump to article: www.wired.com/story/ice-is-using-palantirs-ai-tools-to-sort-through-tips/
-
AI security startup Outtake raises $40M from Iconiq, Satya Nadella, Bill Ackman, and other big names
Outtake makes an agentic cybersecurity platform to help enterprises detect identity fraud. Its angel investors read like a who’s who of tech industry names. First seen on techcrunch.com Jump to article: techcrunch.com/2026/01/28/ai-security-startup-outtake-raises-40m-from-iconiq-satya-nadella-bill-ackman-and-other-big-names/
-
Critical bug in popular vm2 Node.js sandboxing library puts projects at risk
Promise.prototype.then Promise.prototype.catch callback sanitization can be bypassed,” the official advisory reads. “This allows attackers to escape the sandbox and run arbitrary code.” Sandboxes like vm2 are needed by web and other Node-based applications whose functionality enables users or tools to upload and execute scripts. Because user-controlled code is untrusted by nature, it cannot be allowed…
-
Video-KI: Europas strengste Datenschutz-Regeln prägen die Zukunft
Tags: aiFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/video-ki-europas-strenge-datenschutz-regeln-praegung-zukunft
-
Viral Moltbot AI assistant raises concerns over data security
Security researchers are warning of insecure deployments in enterprise environments of the Moltbot (formerly Clawdbot) AI assistant, which can lead to leaking API keys, OAuth tokens, conversation history, and credentials. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/viral-moltbot-ai-assistant-raises-concerns-over-data-security/
-
Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware
Cybersecurity researchers have flagged a new malicious Microsoft Visual Studio Code (VS Code) extension for Moltbot (formerly Clawdbot) on the official Extension Marketplace that claims to be a free artificial intelligence (AI) coding assistant, but stealthily drops a malicious payload on compromised hosts.The extension, named “ClawdBot Agent – AI Coding Assistant” (“clawdbot.clawdbot-agent”) First seen on…