Tag: ai
-
FDA Takes Hands-Off Approach to AI Devices and Software
Agency: Guidance Favors Market Innovation Over Federal Scrutiny. New artificial intelligence-enabled health wearable devices and clinical decision support software will not face U.S. Food and Drug Administration regulatory scrutiny, providing the technology meets certain criteria, such as being low-risk, the agency said this week. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/fda-takes-hands-off-approach-to-ai-devices-software-a-30465
-
900,000 Users Hit as Malicious Chrome Extensions Steal ChatGPT, DeepSeek Chats
OX Security reveals how malicious Chrome extensions exposed AI chats from ChatGPT and DeepSeek, silently siphoning sensitive data from 900,000 users. The post 900,000 Users Hit as Malicious Chrome Extensions Steal ChatGPT, DeepSeek Chats appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-900k-users-chrome-extensions-steal-chatgpt-deepseek-chats/
-
Humanthe-Loop vs Autonomous Development for Enterprise Software
Enterprise software teams are standing at a crossroads. On one side is human-in-the-loop development, where AI accelerates delivery but humans stay firmly in control. On…Read More First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2026/01/human-in-the-loop-vs-autonomous-development-for-enterprise-software/
-
AI Risk Governance Suite for Enterprise Oversight – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/ai-risk-governance-suite-for-enterprise-oversight-kovrr/
-
Critical RCE flaw allows full takeover of n8n AI workflow platform
Tags: ai, api, attack, authentication, cloud, credentials, data, email, exploit, flaw, leak, LLM, password, rce, remote-code-execution, threat, vulnerabilityformWebhook function used by n8n Form nodes to receive data doesn’t validate whether the Content-Type field of the POST request submitted by the user is set to multipart/form-data.Imagine a very common use case in which n8n has been used to build a chat interface that allows users to upload files to the system, for example,…
-
Why AI Changes the Risk Model for Application Security
As AI becomes embedded in everyday development workflows, the security model for applications is shifting fast, and not always in ways teams are prepared for. James Wickett, CEO of DryRun Security, breaks down why “AI everywhere” is forcing organizations to rethink what application security should look like when developers are shipping faster than ever… First…
-
Researchers poison stolen data to make AI systems return wrong results
Wanted: Chief Disinformation Officer to pollute company knowledge graphs First seen on theregister.com Jump to article: www.theregister.com/2026/01/06/ai_data_pollution_defense/
-
NIST asks public for help securing AI agents
The agency is interested in case studies showing how best to protect agents from hackers. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/nist-ai-agent-security-guidance-public-feedback/808966/
-
In 2026, Hackers Want AI: Threat Intel on Vibe Hacking & HackGPT
Cybercriminals are increasingly using AI to lower the barrier to entry for fraud and hacking, shifting from skill-based to AI-assisted attacks known as “vibe hacking.” Flare examines how underground forums promote AI tools, jailbreak techniques, and so-called “Hacking-GPT” services that promise ease rather than technical mastery. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/in-2026-hackers-want-ai-threat-intel-on-vibe-hacking-and-hackgpt/
-
900,000 Users Hit as Chrome Extensions Steal AI Chat Data
Malicious Chrome extensions stole AI chat data from over 900,000 users. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/900000-users-hit-as-chrome-extensions-steal-ai-chat-data/
-
Fraud attacks expected to ramp up in AI ‘perfect storm’
2026 is poised to be “the year of impersonation attacks” amid an explosion of AI-powered tools, a fraud prevention expert;said. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/fraud-attacks-expected-ramp-up-amid-ai-perfect-storm/808960/
-
How to eliminate IT blind spots in the modern, AI-driven enterprise
Tags: access, ai, api, attack, automation, awareness, cio, cloud, control, data, detection, endpoint, governance, group, identity, injection, intelligence, metric, monitoring, network, radius, risk, service, technology, tool, training, vulnerabilityThe more organizations lean on artificial intelligence (AI), spread workloads across different environments, and tie systems together, the harder it becomes for traditional security practices to present a complete picture of what’s going on. The result is a growing number of blind spots hidden misconfigurations, inconsistent controls, and unpredictable behaviors across systems and AI agents…
-
How to eliminate IT blind spots in the modern, AI-driven enterprise
Tags: access, ai, api, attack, automation, awareness, cio, cloud, control, data, detection, endpoint, governance, group, identity, injection, intelligence, metric, monitoring, network, radius, risk, service, technology, tool, training, vulnerabilityThe more organizations lean on artificial intelligence (AI), spread workloads across different environments, and tie systems together, the harder it becomes for traditional security practices to present a complete picture of what’s going on. The result is a growing number of blind spots hidden misconfigurations, inconsistent controls, and unpredictable behaviors across systems and AI agents…
-
Zero Trust for the Age of Autonomous AI Agents – Part 1
Why Human-Centric Zero Trust Models Fail in a World of Autonomous AI Agents Zero trust was built for humans, not autonomous AI agents. As organizations adopt agentic AI at scale, human-centric security assumptions break down – creating a paradox between utility and least privilege that traditional zero trust models cannot resolve. First seen on govinfosecurity.com…
-
‘Cybersecurity Skills Gap 2025″-Report – KI allein kann das Skill Gap in der Cybersecurity nicht füllen
First seen on security-insider.de Jump to article: www.security-insider.de/ki-cybersicherheit-fachkraeftemangel-risiken-a-2e37ef77e250ea51362de81ca1073264/
-
Prompt-Hijacking bedroht MCP-Workflows in oatpp-mcp
Eine neue Untersuchung von JFrog Security Research offenbart in der Oat++-Implementierung des Model-Context-Protocol (MCP) eine Schwachstelle (CVE-2025-6515), über die Angreifer Sessions kapern und Antworten in laufende KI-Workflows einschleusen können. Betroffen sind Konfigurationen/Deployments, in denen oatpp-mcp den HTTP/SSE-Transport nutzt und aus dem Netzwerk erreichbar ist. Die Analyse zeigt, dass es sich nicht um eine klassische Modellschwachstelle…
-
Google Search AI hallucinations push Google to hire “AI Answers Quality” engineers
AI, including AI Overviews on Google Search, can hallucinate and often make up stuff or offer contradicting answers when asked in two different ways. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/google/google-search-ai-hallucinations-push-google-to-hire-ai-answers-quality-engineers/
-
Personal LLM Accounts Drive Shadow AI Data Leak Risks
Lack of visibility and governance around employees using generative AI is resulting in rise in data security risks First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/personal-llm-accounts-drive-shadow/
-
Why cybersecurity cannot hire its way through the AI era
AI can close the speed and scale gap in security, but only if organizations prioritize the risks that matter most. First seen on cyberscoop.com Jump to article: cyberscoop.com/cybersecurity-talent-shortage-ai-risk-operations-center-2026-op-ed/
-
The Future of Cybersecurity Includes Non-Human Employees
Non-human employees are becoming the future of cybersecurity, and enterprises need to prepare accordingly. As organizations scale Artificial Intelligence (AI) and cloud automation, there is exponential growth in Non-Human Identities (NHIs), including bots, AI agents, service accounts and automation scripts. In fact, 51% of respondents in ConductorOne’s 2025 Future of Identity Security Report First seen…
-
Webinar: Learn How AI-Powered Zero Trust Detects Attacks with No Files or Indicators
Security teams are still catching malware. The problem is what they’re not catching.More attacks today don’t arrive as files. They don’t drop binaries. They don’t trigger classic alerts. Instead, they run quietly through tools that already exist inside the environment, scripts, remote access, browsers, and developer workflows.That shift is creating a blind spot.Join us for…
-
Court Demands OpenAI Hand Over 20M Anonymized ChatGPT Chats in AI Copyright Dispute
A federal judge has ordered OpenAI to turn over 20 million anonymized ChatGPT conversation logs in a major copyright lawsuit, rejecting the company’s arguments that privacy concerns should limit the disclosure. District Judge Sidney H. Stein upheld a ruling by Magistrate Judge Ona T. Wang requiring OpenAI to produce records for news organization plaintiffs, including…
-
Malicious Chrome Extension Leaks ChatGPT and DeepSeek Chats of 900,000 Users
Over 900,000 Chrome users have been compromised by two malicious extensions that secretly exfiltrate ChatGPT and DeepSeek conversations to attacker-controlled servers. Security researchers discovered the extensions impersonating the legitimate AITOPIA AI sidebar tool, with one rogue extension even earning Google’s >>Featured
-
8 things CISOs can’t afford to get wrong in 2026
Tags: access, advisory, ai, attack, automation, awareness, breach, business, ciso, cloud, communications, compliance, control, cyber, cyberattack, cybersecurity, data, data-breach, defense, dora, encryption, finance, firmware, GDPR, healthcare, identity, incident response, india, infrastructure, injection, insurance, intelligence, iot, jobs, law, malicious, monitoring, network, privacy, ransom, regulation, resilience, risk, saas, scam, service, software, strategy, supply-chain, tactics, technology, theft, threat, tool, training, update, vulnerability, zero-trust“Identity and access controls for AI agents and AI platforms are one of the most important areas of concern for CISOs,” says Jason Stading, director at global technology research and advisory firm ISG. “Right now, permissions and access rights for AI are a black box in many areas. We will see a major push over…
-
Urban VPN Proxy sendet Prompts an Analytics-Server – Browser-Erweiterungen zapfen heimlich KI-Chats ab
First seen on security-insider.de Jump to article: www.security-insider.de/chrome-edge-erweiterung-ki-prompt-leak-a-b0cf000d4c491eb5a5e27c7528c2dcba/
-
When AI agents interact, risk can emerge without warning
System level risks can arise when AI agents interact over time, according to new research that examines how collective behavior forms inside multi agent systems. The study … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/07/research-interacting-ai-risks/
-
Automated data poisoning proposed as a solution for AI theft threat
Tags: ai, breach, business, cyber, data, encryption, framework, intelligence, LLM, malicious, microsoft, resilience, risk, risk-management, technology, theft, threatKnowledge graphs 101: A bit of background about knowledge graphs: LLMs use a technique called Retrieval-Augmented Generation (RAG) to search for information based on a user query and provide the results as additional reference for the AI system’s answer generation. In 2024, Microsoft introduced GraphRAG to help LLMs answer queries needing information beyond the data on…