Tag: ai
-
Unternehmen nutzen zunehmend hybride Sicherheitsmodelle
KI allein reicht nicht: Zwei Drittel setzt bei IT-Sicherheit auf ein Zusammenspiel von KI und menschlicher Expertise. Künstliche Intelligenz ist längst Teil moderner IT-Sicherheitsstrategien. Doch die aktuelle Studie »Cybersicherheit in Zahlen« von G DATA CyberDefense, Statista und brand eins zeigt: Wirklich sicher fühlen sich die meisten Unternehmen erst dann, wenn KI und menschliche Expertise… First…
-
Google Chrome now lets you turn off on-device AI model powering scam detection
Google Chrome now lets you delete the local AI models that power the “Enhanced Protection” feature, which was upgraded with AI capabilities last year. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/google-chrome-now-lets-you-turn-off-on-device-ai-model-powering-scam-detection/
-
Cyberkriminelle bringen Copilot zum Plaudern: Wie sie Microsofts KI austricksen, um an eure Daten zu gelangen
First seen on t3n.de Jump to article: t3n.de/news/cyberkriminelle-bringen-copilot-zum-plaudern-tricksen-microsoft-ki-aus-1725442/
-
Building a scalable approach to PII protection within AI governance frameworks
Learn how to scale PII protection within your AI governance framework using automated detection, data masking, and access controls”, without sacrificing speed or data utility. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/building-a-scalable-approach-to-pii-protection-within-ai-governance-frameworks/
-
Google Vertex AI Flaw Lets Low-Privilege Users Escalate to Service Agent Roles
Security researchers have discovered critical privilege escalation vulnerabilities in Google’s Vertex AI platform that allow attackers with minimal permissions to hijack high-privileged Service Agent accounts. The flaws affect the Vertex AI Agent Engine and Ray on Vertex AI, where default configurations enable low-privileged users to access powerful managed identities with project-wide permissions. As enterprises rapidly…
-
US Hackers Reportedly Caused a Blackout in Venezuela
Plus: AI reportedly caused ICE to send agents into the field without training, Palantir’s app for targeting immigrants gets exposed, and more. First seen on wired.com Jump to article: www.wired.com/story/security-news-this-week-us-hackers-reportedly-caused-a-blackout-in-venezuela/
-
Bug-Bounty-Programm: Curl-Entwickler dreht dem KI-Schrott den Geldhahn zu
Massen an KI-generierten Bug-Reports belasten Open-Source-Entwickler. Das Curl-Projekt streicht die Prämien – und nimmt damit die Anreize. First seen on golem.de Jump to article: www.golem.de/news/bug-bounty-programm-curl-entwickler-dreht-dem-ki-schrott-den-geldhahn-zu-2601-204260.html
-
News alert: BreachLock unveils agentic AI pen testing that mimics attacker behavior on web apps
NEW YORK, Jan. 15, 2026, CyberNewswire, BreachLock, a global leader in offensive security, today announced that its Adversarial Exposure Validation (AEV) solution now supports autonomous red teaming at the application layer, expanding beyond its initial network-layer capabilities introduced… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/news-alert-breachlock-unveils-agentic-ai-pen-testing-that-mimics-attacker-behavior-on-web-apps/
-
News alert: AppGuard reopens insider program as AI-enhanced malware outpaces detection defenses
MCLEAN, Va., Jan.15, 2026, CyberNewswire, A new Top 10 Cybersecurity Innovators profile by AppGuard has been released, spotlighting growing concerns over AI-enhanced malware. AI makes malware even more difficult to detect. Worse, they use AI to assess, adapt, and… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/news-alert-appguard-reopens-insider-program-as-ai-enhanced-malware-outpaces-detection-defenses/
-
Insider risk in an age of workforce volatility
Tags: access, ai, api, authentication, automation, backdoor, backup, china, ciso, control, credentials, cyber, cybersecurity, data, data-breach, exploit, framework, governance, government, identity, jobs, least-privilege, malicious, mitigation, monitoring, network, risk, strategy, supply-chain, threat, zero-trustEarly warnings: The machine as insider risk/threat: These dynamics are not emerging in a vacuum. They represent the culmination of warnings that have been building for years.As early as 2021, in my CSO opinion piece “Device identity: The overlooked insider threat,” Rajan Koo (then chief customer officer at DTEX Systems, now CTO) observed: “There needs…
-
As AI raises the stakes, app modernization and security are becoming inseparable
Tags: aiSecurity leaders are under pressure to support AI programs that move from pilots into production. New Cloudflare research suggests that success depends less on experimentation … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/16/cloudflare-ai-application-modernization-report/
-
New intelligence is moving faster than enterprise controls
AI is being integrated into core enterprise systems faster than many organizations can secure and govern it. A new global study from NTT shows companies expanding AI … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/16/ntt-data-enterprise-ai-governance/
-
Healthcare’s blind spot: What happens after our data is shared?
A recent healthcare lawsuit exposes how data governance breaks down once records leave the EHR, highlighting the risks of unstructured text in an AI-driven ecosystem. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/healthcares-blind-spot-what-happens-after-our-data-is-shared/
-
How safe are your secrets with agentic AI handling them
How Secure Are Your Secrets When Managed by Non-Human Identities? What is the risk associated with non-human identities (NHIs) in cybersecurity? Understanding this concept is vital for the protection of your organization’s digital assets. NHIs”, the machine identities in cybersecurity”, have become increasingly critical in our cloud-driven environments. When these identities proliferate, so too does…
-
How does Agentic AI deliver value in SOC operations
Are Organizations Maximizing the Value of Agentic AI in SOC Operations? Where security threats evolve with alarming speed, security operations centers (SOCs) must remain at the forefront of innovation. One intriguing advancement capturing the attention of cybersecurity professionals is Agentic AI. Agentic AI offers a transformative approach to monitoring and managing non-human identities (NHIs), crucial……
-
Are AI managed NHIs reliable in identity management
What Are Non-Human Identities and Why Are They Critical in Cybersecurity? The concept of managing non-human identities (NHIs) is increasingly gaining traction. But what exactly are these NHIs, and why are they pivotal in securing modern digital infrastructures? Let’s delve into AI-managed NHIs and uncover their crucial role in identity management. Understanding Non-Human Identities Non-Human……
-
Do AI-driven security systems empower compliance
Are Non-Human Identities the Missing Link in AI-Driven Security? Are traditional methods enough to protect our digital assets, or is there a growing need for more sophisticated approaches? With the advent of AI-driven security systems, the focus is turning towards Non-Human Identities (NHIs) and Secrets Security Management as key components in empowering compliance and enhancing……
-
AI Security Testing, Most AI Attacks Are Noise, a Few Leave Craters
Some AI attacks are noise, others can change your organization. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/ai-security-testing-most-ai-attacks-are-noise-a-few-leave-craters/
-
Quantum-resistant zero trust architecture for MCP hosts
Learn how to build a quantum-resistant zero trust architecture for MCP hosts. Protect AI infrastructure with lattice-based crypto and 4D access control. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/quantum-resistant-zero-trust-architecture-for-mcp-hosts/
-
Sicherer Umgang mit persönlichen KI”‘Agenten
Gefahren, Risiken und konkrete Schutzmaßnahmen von persönlichen KI-Assistenten Persönliche KI”‘Agenten entwickeln sich rasant schneller als Vertrauen, Regulierung und Nutzerbewusstsein. Behörden, Sicherheitsforscher und IT”‘Experten warnen deshalb vor realen Risiken, die über klassische IT”‘Sicherheitsprobleme hinausgehen. Zentrale Gefahren Datenmissbrauch & Privatsphäre KI”‘Agenten verarbeiten oft hochsensible Informationen (E”‘Mails, Kalender, Dokumente, Passwörter). Cloud”‘basierte Agenten können Daten weiterverarbeiten, speichern oder… First…
-
One click is all it takes: How ‘Reprompt’ turned Microsoft Copilot into data exfiltration tools
What devs and security teams should do now: As in usual security practice, enterprise users should always treat URLs and external inputs as untrusted, experts advised. Be cautious with links, be on the lookout for unusual behavior, and always pause to review pre-filled prompts.”This attack, like many others, originates with a phishing email or text…
-
Torq Gets $140M Series D to Fuel AI-Powered SOC Capabilities
Funding at $1.2B Valuation to Propel Federal Market Entry and R&D in GenAI. Torq secured $140 million in Series D funding at a $1.2 billion valuation to expand its generative AI-powered security operations platform. With backing from Merlin Ventures, Torq will grow internationally, deepen AI research and pursue U.S. federal opportunities including FedRAMP certification. First…
-
Swedish welfare authority suspends ‘discriminatory’ AI model
A machine learning model used by Sweden’s social security agency to flag benefit fraud has been discontinued following investigations by media outlets and the country’s data protection watchdog First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366634703/Swedish-welfare-authorities-suspend-discriminatory-AI-model
-
Infoblox Buys Axur to Expand Cyberthreat Takedown Power
AI-Powered Axur Brings Digital Risk Protection, 99% Takedown Rate to Infoblox. Infoblox is acquiring Axur, a Brazilian leader in digital risk protection, to bolster its preemptive cyberthreat defense. Axur automates phishing and rogue site takedowns using AI, delivering near-instant response and visibility into attacker infrastructure. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/infoblox-buys-axur-to-expand-cyberthreat-takedown-power-a-30532
-
CISA Issues New AI Security Guidance for Critical Infrastructure
CISA and international partners issued new guidance on securing AI in operational technology, warning of OT risks and urging stronger governance and safeguards. The post CISA Issues New AI Security Guidance for Critical Infrastructure appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-cisa-ai-security-guidance-2026/
-
Elon Musk’s Grok ‘Undressing’ Problem Isn’t Fixed
X has placed more restrictions on Grok’s ability to generate explicit AI images, but tests show that the updates have created a patchwork of limitations that fail to fully address the issue. First seen on wired.com Jump to article: www.wired.com/story/elon-musks-grok-undressing-problem-isnt-fixed/
-
Predicting 2026
In this week’s newsletter, Martin examines the evolving landscape for 2026, highlighting key threats, emerging trends like AI-driven risks, and the continued importance of addressing familiar vulnerabilities. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/predicting-2026/
-
Contagious Claude Code bug Anthropic ignored promptly spreads to Cowork
Office workers without AI experience warned to watch for prompt injection attacks – good luck with that First seen on theregister.com Jump to article: www.theregister.com/2026/01/15/anthropics_claude_bug_cowork/
-
2025 Threat Landscape in Review: Lessons for Businesses Moving Into 2026
Tags: access, ai, application-security, attack, authentication, awareness, backdoor, breach, business, captcha, cloud, compliance, container, control, credentials, credit-card, cybersecurity, data, data-breach, ddos, defense, encryption, exploit, finance, firewall, flaw, google, identity, infrastructure, intelligence, leak, malicious, mitigation, monitoring, network, pypi, risk, service, software, strategy, supply-chain, threat, tool, vulnerability, windows2025 Threat Landscape in Review: Lessons for Businesses Moving Into 2026 andrew.gertz@t“¦ Thu, 01/15/2026 – 16:48 Nadav Avital – Senior Director of Threat Research at Thales More About This Author > 2025 was a year that tested how businesses think about security. Some attacks happened in new, unexpected ways, while others employed old tricks, taken…
-
AI, agents, and the trust gap
A look into how Kasada approaches verifying AI bots, managing access, and giving security teams control as AI traffic grows. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/ai-agents-and-the-trust-gap/