Tag: ai
-
UK cyber agency warns LLMs will always be vulnerable to prompt injection
The comments echo many in the research community who have said the flaw is an inherent trait of generative AI technology. First seen on cyberscoop.com Jump to article: cyberscoop.com/uk-warns-ai-prompt-injection-unfixable-security-flaw/
-
Google Chrome adds new security layer for Gemini AI agentic browsing
Google Chrome is introducing a new security architecture designed to protect upcoming agentic AI browsing features powered by Gemini. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-chrome-adds-new-security-layer-for-gemini-ai-agentic-browsing/
-
Defense bill addresses secure phones, AI training, cyber troop mental health
The compromise legislation has other cyber provisions besides on commercial spyware, joint NSA-Cyber Command leadership and streamlining regulations. First seen on cyberscoop.com Jump to article: cyberscoop.com/2026-ndaa-cybersecurity-secure-phones-ai-training-cyber-troop-mental-health/
-
Privacy concerns raised as Grok AI found to be a stalker’s best friend
Grok, the AI chatbot developed by Elon Musk’s xAI, has been found to exhibit more alarming behaviour – this time revealing the home addresses of ordinary people upon request. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/privacy-concerns-raised-as-grok-ai-found-to-be-a-stalkers-best-friend
-
How Agentic BAS AI Turns Threat Headlines Into Defense Strategies
Picus Security explains why relying on LLM-generated attack scripts is risky and how an agentic approach maps real threat intel to safe, validated TTPs. Their breakdown shows how teams can turn headline threats into reliable defense checks without unsafe automation. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/how-agentic-bas-ai-turns-threat-headlines-into-defense-strategies/
-
KI schafft neue Sicherheitsrisiken für OT-Netzwerke
Sicherheitsbehörden sehen in der vermehrten Nutzung von KI eine Gefahr für die Sicherheit von OT-Systemen.Die Sicherheit der Betriebstechnik (Operational Technology OT) in kritischen Infrastrukturen ist seit Jahren ein immer wiederkehrendes Thema. Nach Ansicht von Sicherheitsorganisationen könnte die vermehrte Nutzung von KI in der OT die Lage noch verschlimmern.Die US-Cybersicherheitsbehörde CISA hat deshalb vor kurzem gemeinsam…
-
UK moves to strengthen undersea cable defenses as Russian snooping ramps up
Atlantic Bastion combines AI systems with warships to counter increased surveillance First seen on theregister.com Jump to article: www.theregister.com/2025/12/08/uk_subsea_cables_defense/
-
NVIDIA and Lakera AI Propose Unified Framework for Agent Safety
NVIDIA and Lakera AI have introduced a groundbreaking unified security and safety framework designed to address the emerging challenges posed by autonomous AI agents in enterprise environments. This collaborative effort represents a significant step forward in making agentic systems AI systems capable of independent planning, tool use, and multi-step task execution safer and more secure…
-
NVIDIA and Lakera AI Propose Unified Framework for Agent Safety
NVIDIA and Lakera AI have introduced a groundbreaking unified security and safety framework designed to address the emerging challenges posed by autonomous AI agents in enterprise environments. This collaborative effort represents a significant step forward in making agentic systems AI systems capable of independent planning, tool use, and multi-step task execution safer and more secure…
-
UK intelligence warns AI ‘prompt injection’ attacks might never go away
A top technologist at the U.K.’s National Cyber Security Centre said “there’s a good chance” that prompt injection attacks against AI will never be eliminated, and he warned of the related risks of embedding generative AI into digital systems globally. First seen on therecord.media Jump to article: therecord.media/prompt-injection-attacks-uk-intelligence-warning
-
UK intelligence warns AI ‘prompt injection’ attacks might never go away
A top technologist at the U.K.’s National Cyber Security Centre said “there’s a good chance” that prompt injection attacks against AI will never be eliminated, and he warned of the related risks of embedding generative AI into digital systems globally. First seen on therecord.media Jump to article: therecord.media/prompt-injection-attacks-uk-intelligence-warning
-
KnowBe4 als führendes Unternehmen im Gartner-Magic-Quadrant für ESicherheit ausgezeichnet
KnowBe4, Anbieter der bekannten Plattform, die sich umfassend mit KI und Human-Risk-Management befasst, wurde zum zweiten Mal in Folge als führendes Unternehmen im Gartner-Magic-Quadrant für E-Mail-Sicherheitsplattformen 2025 ausgezeichnet. KnowBe4 wurde für seine Umsetzungsstärke und seine umfassende Vision gewürdigt. Wir glauben, dass die Anerkennung von KnowBe4 als führendes Unternehmen im Gartner-Magic-Quadrant die folgenden Stärken von KnowBe4-Cloud-Email-Security widerspiegelt:…
-
Schwachstelle in OpenAI-Codex-CLI ermöglicht kritische Remote-Code-Execution
Die Sicherheitsforscher von Check Point Research (CPR), der IT-Forensik von Check Point Software Technologies, haben eine schwerwiegende Schwachstelle in OpenAI-Codex-CLI entdeckt. Dabei handelt es sich um das Command-Line-Tool von OpenAI, das KI-gestützte Programmierfunktionen direkt in Entwickler-Workflows integriert. Die Schwachstelle ermöglichte Remote-Code-Execution (RCE) allein durch das Öffnen eines manipulierten Projektordners und ohne Interaktion oder Zustimmung des…
-
KI-gestützte Angriffsmethoden, Risk-Operations sowie neue Anforderungen kommen auf die Security-Teams in 2026 zu
Qualys veröffentlicht seine zentralen Predictions für das Jahr 2026. Die Analysen der Qualys-Threat-Research-Unit (TRU) und führender Qualys-Expertinnen und -Experten zeigen: Unternehmen müssen im kommenden Jahr mit deutlich schnelleren Angriffsketten, wachsender Komplexität im KI-Einsatz und einem klaren Paradigmenwechsel in der operativen Sicherheitssteuerung rechnen. Attack-Path-Modeling wird 2026 erstmals voll nutzbar April Lenhard, Principal Product Manager bei Qualys,…
-
Hackers Target Developers Using Malicious VS Code and Cursor AI Extensions
Visual Studio Code and AI-powered IDEs such as Cursor AI and Windsurf are emerging as one of the most critical and overlooked attack surfaces in the modern software supply chain. Installed on millions of developer machines worldwide, these tools often run with access to source code, secrets, and production credentials. New research shows that compromising…
-
Hackers Target Developers Using Malicious VS Code and Cursor AI Extensions
Visual Studio Code and AI-powered IDEs such as Cursor AI and Windsurf are emerging as one of the most critical and overlooked attack surfaces in the modern software supply chain. Installed on millions of developer machines worldwide, these tools often run with access to source code, secrets, and production credentials. New research shows that compromising…
-
Hackers Target Developers Using Malicious VS Code and Cursor AI Extensions
Visual Studio Code and AI-powered IDEs such as Cursor AI and Windsurf are emerging as one of the most critical and overlooked attack surfaces in the modern software supply chain. Installed on millions of developer machines worldwide, these tools often run with access to source code, secrets, and production credentials. New research shows that compromising…
-
Erhebliches Sicherheitsrisiko: Analysten raten dringend von KI-Browsern ab
KI-Browser wie ChatGPT Atlas haben in einer sicheren IT-Umgebung nichts zu suchen, sagen Analysten von Gartner. Dafür gibt es mehrere gute Gründe. First seen on golem.de Jump to article: www.golem.de/news/erhebliches-sicherheitsrisiko-analysten-raten-dringend-von-ki-browsern-ab-2512-203000.html
-
Digitale Vertrauensrealität 2026: Wie KI, Quanten und Automatisierung das Sicherheitsfundament neu definieren
Das Vertrauen der Zukunft steckt tief in der Hardware, der Firmware und den kryptografischen Lebenszyklen. Maschinenvertrauen wird damit nicht nur ein Technologiethema, sondern das Fundament globaler digitaler Vernetzung. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/digitale-vertrauensrealitaet-2026-wie-ki-quanten-und-automatisierung-das-sicherheitsfundament-neu-definieren/a43084/
-
CISA Releases New AIOT Security Guidance: Key Principles Risks
CISA and global partners issue new guidance for secure AI integration in operational technology, highlighting risks, governance, behavioral analytics, and OT safety. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/12/cisa-releases-new-ai-in-ot-security-guidance-key-principles-risks/
-
Offensive security takes center stage in the AI era
Tags: ai, attack, automation, business, ciso, control, credentials, cyber, cybersecurity, data, defense, detection, encryption, framework, hacker, hacking, incident response, intelligence, malicious, offense, phishing, RedTeam, regulation, risk, skills, software, strategy, tactics, technology, threat, tool, vulnerability, vulnerability-management, windowsRed teaming, where ethical hackers simulate real-world attacks to test detection and response capabilities. Red teams aim to emulate threat actors by using stealthy tactics to bypass controls and achieve objectives such as data exfiltration or privilege escalation.Adversary emulation, where security pros re-create known threat actor tactics, techniques, and procedures (TTPs) based on threat intelligence…
-
Vaillant CISO: NIS2 complexity and lack of clarity endanger its mission
Tags: ai, attack, awareness, business, ciso, compliance, corporate, country, cyber, cyberattack, cybersecurity, dora, email, germany, infrastructure, intelligence, network, nis-2, office, organized, phishing, ransomware, regulation, risk, service, skills, supply-chain, threat, trainingCSO Germany: The energy sector is increasingly becoming a target for cybercriminals. Experts and the Federal Office for Information Security (BSI) believe that protection in this area must be significantly increased. How do you assess the current situation?Reiß: The geopolitical tensions we are currently witnessing are leading to an increased threat level. This naturally also affects the heating…
-
CISA Releases New AIOT Security Guidance: Key Principles Risks
CISA and global partners issue new guidance for secure AI integration in operational technology, highlighting risks, governance, behavioral analytics, and OT safety. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/12/cisa-releases-new-ai-in-ot-security-guidance-key-principles-risks/
-
Offensive security takes center stage in the AI era
Tags: ai, attack, automation, business, ciso, control, credentials, cyber, cybersecurity, data, defense, detection, encryption, framework, hacker, hacking, incident response, intelligence, malicious, offense, phishing, RedTeam, regulation, risk, skills, software, strategy, tactics, technology, threat, tool, vulnerability, vulnerability-management, windowsRed teaming, where ethical hackers simulate real-world attacks to test detection and response capabilities. Red teams aim to emulate threat actors by using stealthy tactics to bypass controls and achieve objectives such as data exfiltration or privilege escalation.Adversary emulation, where security pros re-create known threat actor tactics, techniques, and procedures (TTPs) based on threat intelligence…
-
Gartner warnt: Blockt aus Sicherheitsgründen alle KI-Browser auf absehbare Zeit
Analysten der Unternehmensberatung Gartner haben letzte Woche eine für mich überraschende, aber folgerichtige Empfehlung ausgesprochen. Unternehmen sollten bis auf weiteres die sogenannten KI-Browser aus Sicherheitsgründen blockieren, da die Risiken zu hoch seien. Nur wer sicherstellen kann, dass KI-Browser keinerlei Sicherheitsrisiko … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/12/08/gartner-warnt-blockt-aus-sicherheitsgruenden-alle-ki-browser-auf-absehbare-zeit/
-
NVIDIA research shows how agentic AI fails under attack
Enterprises are rushing to deploy agentic systems that plan, use tools, and make decisions with less human guidance than earlier AI models. This new class of systems also … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/12/08/nvidia-agentic-ai-security-framework/
-
Critical Vulnerabilities Found in GitHub Copilot, Gemini CLI, Claude, and Other AI Tools Affect Millions
A groundbreaking security research project has uncovered a new class of vulnerabilities affecting virtually every major AI-powered integrated development environment (IDE) and coding assistant on the market. Dubbed >>IDEsaster,
-
Critical Vulnerabilities Found in GitHub Copilot, Gemini CLI, Claude, and Other AI Tools Affect Millions
A groundbreaking security research project has uncovered a new class of vulnerabilities affecting virtually every major AI-powered integrated development environment (IDE) and coding assistant on the market. Dubbed >>IDEsaster,