Collecting Cyber-News from over 60 sources

Tag: ai

Automated data poisoning proposed as a solution for AI theft threat

Jan 7, 2026 6:52 AM

Tags: ai, breach, business, cyber, data, encryption, framework, intelligence, LLM, malicious, microsoft, resilience, risk, risk-management, technology, theft, threat

Knowledge graphs 101: A bit of background about knowledge graphs: LLMs use a technique called Retrieval-Augmented Generation (RAG) to search for information based on a user query and provide the results as additional reference for the AI system’s answer generation. In 2024, Microsoft introduced GraphRAG to help LLMs answer queries needing information beyond the data on…
Ausblick 2026: Agentic AI und KI-basierte Angriffe prägen Cyberresilienz-Strategien

Jan 7, 2026 6:52 AM

Tags: ai, cyberattack, governance, resilience

Mit Blick auf das Jahr 2026 werden Innovationen wie Agentic AI und immer mehr KI-basierte Angriffe Cyberresilienz, Governance und Identitätssicherheit in den Mittelpunkt von Sicherheitsstrategien rücken. Wie können Unternehmen das Spannungsfeld zwischen Innovationsdruck, neuen Bedrohungen und Widerstandsfähigkeit meistern? Wiederherstellung und Resilienz: So lässt sich die Herausforderung durch KI-gesteuerte Angriffe bewältigen Künstliche Intelligenz (KI) beschleunigt… First…
Gen AI data violations more than double

Jan 7, 2026 6:52 AM

Tags: ai, cloud, data, saas, service, tool

Security teams track activity that moves well beyond traditional SaaS platforms, with employees interacting daily with generative AI tools, personal cloud services, and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/07/gen-ai-data-violations-2026/
Algorithmic Agility in MCP Server-Client Cryptographic Negotiation

Jan 7, 2026 5:52 AM

Tags: ai, cryptography, infrastructure

Learn how to implement algorithmic agility and post-quantum cryptography in MCP server-client negotiations to secure AI infrastructure against future threats. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/algorithmic-agility-in-mcp-server-client-cryptographic-negotiation/
Seceon Launches aiBAS360: AI-Powered Breach Attack Simulation Platform Enables Organizations to Test Defenses Against Real-World APTs and Threat Actors

Jan 7, 2026 5:52 AM

Tags: ai, apt, attack, breach, cybersecurity, defense, framework, mitre, mssp, threat

New Platform Features MITRE ATT&CK Framework Mapping and is Now Available Within OTM Platform as well as in aiSIEM-CGuard 2.0; Global Webinar Series Underway to Showcase Capabilities to MSSP Partners Worldwide WESTFORD, Mass., Jan. 6, 2026 /PRNewswire/, Seceon Inc., a global leader in AI/ML-driven cybersecurity solutions, today announced the general availability of aiBAS360, its innovative Breach First…
How does Agentic AI drive business value?

Jan 7, 2026 1:52 AM

Tags: ai, business, cybersecurity, data

What Role Does Agentic AI Play in Enhancing Business Value? A pertinent question arises: How can organizations leverage Agentic AI to enhance business value effectively? Where a data management and cybersecurity expert specializing in Non-Human Identities (NHIs) and secrets security management, exploring the strategic implementation of Agentic AI in various industries is crucial. This AI……
Why Palo Alto Is Eyeing a $400M Buy of Endpoint Vendor Koi

Jan 7, 2026 12:52 AM

Tags: ai, container, endpoint, network, risk, software, startup

Deal Represents Return to Tuck-In M&A for Palo After 3 Multi-Billion Dollar Deals Palo Alto Networks is in talks to buy Washington D.C-based endpoint security startup Koi for $400 million. Koi is focused on securing extensions, AI models, code packages and containers, and its differentiation lies in mapping, assessing risk and govern the software landscape…
Grok Is Pushing AI ‘Undressing’ Mainstream

Jan 6, 2026 11:52 PM

Tags: ai, Internet, tool

Paid tools that “strip” clothes from photos have been available on the darker corners of the internet for years. Elon Musk’s X is now removing barriers to entry”, and making the results public. First seen on wired.com Jump to article: www.wired.com/story/grok-is-pushing-ai-undressing-mainstream/
AI SOC Anxiety: Does More Control Equal More Complexity?

Jan 6, 2026 10:52 PM

Tags: ai, control, soar, soc

SOC teams want AI they can control without recreating SOAR sprawl. This post explores why control and complexity feel linked, and how autonomy with guardrails breaks the tradeoff. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/ai-soc-anxiety-does-more-control-equal-more-complexity/
Nvidia Bets on Reasoning AI for Self-Driving Cars

Jan 6, 2026 10:52 PM

Tags: ai, ceo, nvidia, technology

Chipmaker CEO Huang Launches Alpamayo Models, Rubin Platform. Nvidia CEO Jensen Huang launched Alpamayo, an open reasoning AI model family for autonomous vehicles, and Rubin, a six-chip platform promising AI tokens at one-tenth prior costs. Mercedes Benz CLA will feature the technology in the US this year. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/nvidia-bets-on-reasoning-ai-for-self-driving-cars-a-30454
Two cybersecurity experts plead guilty to running ransomware operation

Jan 6, 2026 8:52 PM

Tags: ai, cybersecurity, data, ransomware

First seen on csoonline.com Jump to article: www.csoonline.com/article/4112400/two-cybersecurity-experts-plead-guilty-to-running-ransomware-operation.html
The Silent Threat to the Agentic Enterprise: Why BOLA is the #1 Risk for AI Agents

Jan 6, 2026 7:52 PM

Tags: access, ai, api, attack, breach, cloud, control, data, data-breach, exploit, flaw, infrastructure, jobs, LLM, risk, strategy, supply-chain, threat, tool, unauthorized, vulnerability, waf

In the race to deploy autonomous AI agents, organizations are inadvertently building on a foundation of shifting sand. While security teams have spent the last year focused on “Prompt Injection” and “Model Poisoning,” a much older, more dangerous adversary has quietly become the primary attack vector for the agentic era: Broken Object Level Authorization (BOLA).…
The Silent Threat to the Agentic Enterprise: Why BOLA is the #1 Risk for AI Agents

Jan 6, 2026 7:52 PM

Tags: access, ai, api, attack, breach, cloud, control, data, data-breach, exploit, flaw, infrastructure, jobs, LLM, risk, strategy, supply-chain, threat, tool, unauthorized, vulnerability, waf

In the race to deploy autonomous AI agents, organizations are inadvertently building on a foundation of shifting sand. While security teams have spent the last year focused on “Prompt Injection” and “Model Poisoning,” a much older, more dangerous adversary has quietly become the primary attack vector for the agentic era: Broken Object Level Authorization (BOLA).…
Two Chrome Extensions Caught Stealing ChatGPT and DeepSeek Chats from 900,000 Users

Jan 6, 2026 6:52 PM

Tags: ai, browser, chatgpt, chrome, cybersecurity, data, malicious, openai

Cybersecurity researchers have discovered two new malicious extensions on the Chrome Web Store that are designed to exfiltrate OpenAI ChatGPT and DeepSeek conversations alongside browsing data to servers under the attackers’ control.The names of the extensions, which collectively have over 900,000 users, are below -Chat GPT for Chrome with GPT-5, Claude Sonnet & DeepSeek AI…
Is GenAI Leaving Two-Thirds of Security Teams Behind?

Jan 6, 2026 5:52 PM

Tags: ai, network, tactics, threat

Security teams have a singular goal: detect and stop threats from disrupting business. Attackers change tactics and networks evolve constantly, but defenders are the ones who will always bear the burden. Businesses are heavily adopting AI to become more efficient, scale, and augment the human workforce, yet defenders must figure out how to secure any..…
How Leboncoin Blocks Millions of Malicious Requests Every Day

Jan 6, 2026 5:52 PM

Tags: ai, data, malicious, mobile

Learn how Leboncoin blocks 9.5M malicious requests daily with DataDome’s plug”‘and”‘play, AI-driven protection across web & mobile to safeguard user data & brand. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/how-leboncoin-blocks-millions-of-malicious-requests-every-day/
Risky shadow AI use remains widespread

Jan 6, 2026 5:52 PM

Tags: ai, governance

A new report offers fresh evidence for why enterprises should prioritize AI governance policies. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/shadow-ai-security-risks-netskope/808860/
High-Severity Flaw in Open WebUI Affects AI Connections

Jan 6, 2026 5:52 PM

Tags: ai, flaw, risk

A high-severity security flaw in Open WebUI Direct Connections risks account takeover and server compromises First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/flaw-open-webui-affects-ai/
How generative AI accelerates identity attacks against Active Directory

Jan 6, 2026 4:52 PM

Tags: ai, attack, credentials, exploit, identity, password, software

Generative AI is accelerating password attacks against Active Directory, making credential abuse faster and more effective. Specops Software explains how AI-driven cracking techniques exploit weak and predictable AD passwords. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/how-generative-ai-accelerates-identity-attacks-against-active-directory/
OpenAI warnt: KI-Browser wie Atlas könnten dauerhaft anfällig für Prompt-Injection-Angriffe bleiben

Jan 6, 2026 4:52 PM

Tags: ai, cyberattack, injection, openai

First seen on t3n.de Jump to article: t3n.de/news/openai-warnt-ki-browser-atlas-prompt-injection-angriffe-1723027/
Turning AI Risk Awareness Into Robust AI Governance – Kovrr

Jan 6, 2026 3:52 PM

Tags: ai, awareness, cyber, governance, risk, risk-management

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/turning-ai-risk-awareness-into-robust-ai-governance-kovrr/
Copilot, Recall, and Other AI Tools Can Be Removed from Windows 11 with New Tool

Jan 6, 2026 3:52 PM

Tags: ai, control, cyber, microsoft, tool, windows

A new community tool is giving Windows 11 users far more control over Microsoft’s growing stack of AI features. An open”‘source project called RemoveWindowsAI now lets administrators and power users disable or strip out components such as Copilot, Recall, and other AI integrations that are tightly integrated with the operating system and Microsoft apps. The tool targets…
Threat Actors Exploit Office Assistant to Deliver Malicious Mltab Browser Plugin

Jan 6, 2026 3:52 PM

Tags: ai, china, cyber, exploit, intelligence, malicious, malware, office, software, technology, threat

A sophisticated malware campaign has been discovered exploiting Office Assistant, a widely used AI-powered productivity software in China, to distribute a malicious browser plugin that hijacks user traffic and exfiltrates sensitive information. The RedDrip Team from QiAnXin Technology’s Threat Intelligence Center uncovered this operation, which has been active since at least May 2024 and has…
Cursor, Windsurf Google Antigravity IDEs Linked to Malicious Extension Exposure

Jan 6, 2026 3:52 PM

Tags: ai, cyber, google, malicious, malware, supply-chain, tool, vulnerability

A critical supply chain vulnerability has been discovered affecting millions of developers using popular AI-powered IDEs, including Cursor, Windsurf, and Google Antigravity. Security researchers revealed that these coding environments were actively recommending non-existent extensions, allowing potential attackers to upload malware that users would unthinkingly install. The issue stems from how these tools were built. Cursor,…
Guardrails Make AI-Assisted Development Safer By Design

Jan 6, 2026 2:52 PM

Tags: ai, software, tool
Dec Recap: New AWS Privileged Permissions and Services

Jan 6, 2026 2:52 PM

Tags: ai, cloud, identity, infrastructure, service, update

As December 2025 comes to a close, Sonrai’s latest review of newly released AWS permissions highlights a continued expansion of cloud privilege. This month’s updates span identity, observability, AI, and managed service infrastructure, with changes across CloudWatch, CloudFront, Bedrock, EKS, SageMaker, and emerging agent-based platforms. Together, these permissions reinforce a core reality of cloud security:……
Startup Trends Shaking Up Browsers, SOC Automation, AppSec

Jan 6, 2026 2:52 PM

Tags: ai, application-security, automation, soc, startup

In 2025, these startups have reimagined browser security, pioneered application security for AI-generated code, and are building consensus on agentic vs. human costs. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/startup-trends-shaking-up-browsers-soc-automation-appsec
Advisor360 Gets a Handle on Shadow AI via Automation

Jan 6, 2026 2:52 PM

Tags: ai, automation, control, fintech, intelligence

With employees looking for the benefits of artificial intelligence, a FinTech company stepped up controls with automation. First seen on darkreading.com Jump to article: www.darkreading.com/remote-workforce/advisor360-gets-handle-on-shadow-ai-via-automation
VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX

Jan 6, 2026 1:52 PM

Tags: ai, google, intelligence, malicious, microsoft, risk, supply-chain

Popular artificial intelligence (AI)-powered Microsoft Visual Studio Code (VS Code) forks such as Cursor, Windsurf, Google Antigravity, and Trae have been found to recommend extensions that are non-existent in the Open VSX registry, potentially opening the door to supply chain risks when bad actors publish malicious packages under those names.The problem, according to Koi, is…
Are Copilot prompt injection flaws vulnerabilities or AI limits?

Jan 6, 2026 12:52 PM

Tags: ai, flaw, injection, microsoft, risk, vulnerability

Microsoft has pushed back against claims that multiple prompt injection and sandbox-related issues raised by a security engineer in its Copilot AI assistant constitute security vulnerabilities. The development highlights a growing divide between how vendors and researchers define risk in generative AI systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/are-copilot-prompt-injection-flaws-vulnerabilities-or-ai-limits/