Tag: ai
-
The Attack Surface of Cloud-Based Generative AI Applications is Evolving
It is the right time to talk about this. Cloud-based Artificial Intelligence, or specifically those big, powerful Large Language Models we see everywhere, they’ve completely changed the game. They’re more than just a new application tier. They’re an entirely new attack surface. You’ve moved your critical applications to the public cloud. You did it for..…
-
Hochsicherheits-Pakt – NATO und Google Cloud schließen Deal für KI-fähige Cloud
First seen on security-insider.de Jump to article: www.security-insider.de/google-cloud-nato-ncia-vertrag-ki-cloud-a-f3dae3879522c203fcae1c31bc97a2b0/
-
A CISO’s Perspective on Scaling GenAI Securely
Going Beyond the Copilot Pilot – A CISO’s Perspective. With 60% of businesses piloting M365 Copilot but only 6% scaling, this webinar explores why gen AI deployments stall, and what CISOs and IT leaders must know to roll out secure, compliant, and effective AI productivity tools. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/cisos-perspective-on-scaling-genai-securely-a-30141
-
New >>HashJack<< attack can hijack AI browsers and assistants
Security researchers at Cato Networks have uncovered a new indirect prompt injection technique that can force popular AI browsers and assistants to deliver phishing links or … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/11/26/hashjack-hijack-ai-assistants-browsers/
-
New >>HashJack<< attack can hijack AI browsers and assistants
Security researchers at Cato Networks have uncovered a new indirect prompt injection technique that can force popular AI browsers and assistants to deliver phishing links or … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/11/26/hashjack-hijack-ai-assistants-browsers/
-
Wie Unternehmen Observability und Sicherheit neu denken müssen
Tags: aiUnternehmensnetzwerke werden seit Jahren immer komplexer, doch was wir heute erleben, ist auf keine Weise vergleichbar. Der rasante Aufstieg der künstlichen Intelligenz, insbesondere der Übergang hin zur agentischen KI, führt zu einer völlig neuen Schicht architektonischer Komplexität. Es geht nicht einfach um mehr Systeme, mehr Daten oder mehr Cloud. Es handelt sich um eine fundamentale…
-
HashJack: A Novel Exploit Leveraging URL Fragments To Deceive AI Browsers
Security researchers at Cato CTRL have uncovered HashJack. This innovative indirect prompt-injection attack hides harmful commands in the fragment portion of URLs after the >>#
-
Reward-Hacking Training Produces Malicious Cross-Task Behaviors
Anthropic researchers have discovered a troubling phenomenon in the development of artificial intelligence: when large language models learn to >>reward hack
-
Reward-Hacking Training Produces Malicious Cross-Task Behaviors
Anthropic researchers have discovered a troubling phenomenon in the development of artificial intelligence: when large language models learn to >>reward hack
-
HashJack Indirect Prompt Injection Weaponizes Websites
A new vulnerability dubbed “HashJack” could enable attackers to booby trap websites when they interact with AI browsers First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/hashjack-indirect-prompt-injection/
-
Unifying Cloud Strategy to Unlock AI Potential
Talcott Financial Group’s Dalavi on Oracle to Azure Migration and AI Innovation. Talcott Financial Group’s move from a dual-cloud setup to a unified Azure environment is reshaping performance, efficiency and AI readiness, says Sudhakar Dalavi, head of software engineering. He explains how data unification and continuous learning drive the next phase of innovation. First seen…
-
Prompt Injection: Mehrere KI-Browser mit nur einem Zeichen überlistet
Eine Raute am Ende einer URL lässt KI-Assistenten nachfolgenden Text als Anweisung interpretieren. Das ermöglicht Datenklau und mehr. First seen on golem.de Jump to article: www.golem.de/news/prompt-injection-mehrere-ki-browser-mit-nur-einem-zeichen-ueberlistet-2511-202610.html
-
Automating Compliance to Boost Security and ROI
RegScale’s Dale Hoak on How Automating Telemetry Data, AI Improves Resilience. Compliance automation is evolving from a checkbox task to a strategic asset. RegScale’s Dale Hoak said teams that automate controls and evidence collection not only strengthen security but also cut costs, enhance agility and gain real-time visibility across the risk and compliance landscape. First…
-
AI Transforms Data Aggregation Speed for Energy Traders
S&P Global’s Stephanie Comardelle on Optimizing the Energy Value Chain With AI. Energy firms are using artificial intelligence to compress data analysis time frames that once required weeks into mere minutes, fundamentally changing how traders make critical operational decisions across the value chain, said Stephanie Comardelle, chief experience officer at S&P Global. First seen on…
-
AI Cybercriminals Target Black Friday and Cyber Monday
AI-enabled cybercriminals are exploiting the holiday shopping season with precision phishing, account takeovers, payment skimming and ransomware, forcing retailers to adopt real-time, adaptive defenses to keep pace. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/ai-cybercriminals-target-black-friday-and-cyber-monday/
-
Are AI Firewalls Worth the Investment?
AI-powered cyberattacks are rising fast, and AI firewalls offer predictive, adaptive defense”, but their cost, complexity and ROI must be carefully justified as organizations weigh upgrades. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/are-ai-firewalls-worth-the-investment/
-
Securing AI-Generated Code in Enterprise Applications: The New Frontier for AppSec Teams
AI-generated code is reshaping software development and introducing new security risks. Organizations must strengthen governance, expand testing and train developers to ensure AI-assisted coding remains secure and compliant. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/securing-ai-generated-code-in-enterprise-applications-the-new-frontier-for-appsec-teams/
-
AI Cybercriminals Target Black Friday and Cyber Monday
AI-enabled cybercriminals are exploiting the holiday shopping season with precision phishing, account takeovers, payment skimming and ransomware, forcing retailers to adopt real-time, adaptive defenses to keep pace. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/ai-cybercriminals-target-black-friday-and-cyber-monday/
-
Are AI Firewalls Worth the Investment?
AI-powered cyberattacks are rising fast, and AI firewalls offer predictive, adaptive defense”, but their cost, complexity and ROI must be carefully justified as organizations weigh upgrades. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/are-ai-firewalls-worth-the-investment/
-
Securing AI-Generated Code in Enterprise Applications: The New Frontier for AppSec Teams
AI-generated code is reshaping software development and introducing new security risks. Organizations must strengthen governance, expand testing and train developers to ensure AI-assisted coding remains secure and compliant. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/securing-ai-generated-code-in-enterprise-applications-the-new-frontier-for-appsec-teams/
-
How AI Threats Have Broken Strong Authentication
A look at why identity security is failing in the age of deepfakes and AI-driven attacks, and how biometrics, MFA, PAD, and high-assurance verification must evolve to deliver true, phishing-resistant authentication. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/how-ai-threats-have-broken-strong-authentication/
-
How AI Threats Have Broken Strong Authentication
A look at why identity security is failing in the age of deepfakes and AI-driven attacks, and how biometrics, MFA, PAD, and high-assurance verification must evolve to deliver true, phishing-resistant authentication. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/how-ai-threats-have-broken-strong-authentication/
-
How AI Threats Have Broken Strong Authentication
A look at why identity security is failing in the age of deepfakes and AI-driven attacks, and how biometrics, MFA, PAD, and high-assurance verification must evolve to deliver true, phishing-resistant authentication. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/how-ai-threats-have-broken-strong-authentication/
-
What I’m Thankful for in DevSecOps This Year: Living Through Interesting Times
Alan reflects on a turbulent year in DevSecOps, highlighting the rise of AI-driven security, the maturing of hybrid work culture, the growing influence of platform engineering, and the incredible strength of the DevSecOps community, while calling out the talent crunch, tool sprawl and security theater the industry must still overcome. First seen on securityboulevard.com Jump…
-
What I’m Thankful for in DevSecOps This Year: Living Through Interesting Times
Alan reflects on a turbulent year in DevSecOps, highlighting the rise of AI-driven security, the maturing of hybrid work culture, the growing influence of platform engineering, and the incredible strength of the DevSecOps community, while calling out the talent crunch, tool sprawl and security theater the industry must still overcome. First seen on securityboulevard.com Jump…
-
IT-Trends 2026: KI, Cyberrisiken und digitale Souveränität verändern die IT-Landschaft
Tags: aiDie digitale Welt befindet sich im Umbruch sie wird komplexer, schneller und zugleich deutlich angreifbarer. Vor allem künstliche Intelligenz und moderne IT-Sicherheitskonzepte gehören zu den zentralen Trends, die bestimmen, wie Unternehmen ihre Netzwerke, Schutzmechanismen und Datenstrukturen künftig gestalten müssen. »Wir stehen an einem Punkt, an dem Unternehmen ihre technologische Zukunft konsequenter denn je… First seen…
-
Agentic AI die besten Security-Anwendungsfälle
Tags: access, ai, authentication, breach, ceo, ciso, cyber, cyberattack, cybersecurity, cyersecurity, defense, detection, fraud, identity, network, office, phishing, risk, scam, service, soc, strategy, threat, vulnerability, zero-trustKI-Agenten können Security-Profis den Arbeitsalltag deutlich erleichtern. Lesen Sie, wie. Agentic-AI-Systeme führen Aufgaben selbständig und ohne manuelle Eingriffe aus. Dieses Grundprinzip dürfte nicht wenige CISOs und Sicherheitsexperten erst einmal eher abschrecken. Allerdings entdecken immer mehr Security-Experten, dass Agentic AI wesentlich weniger komplex und schwierig zu implementieren ist, als angenommen und Cybersecurity-Prozesse in besonderem Maße bereichern…
-
IT-Trends 2026: KI, Cyberrisiken und digitale Souveränität verändern die IT-Landschaft
Tags: aiDie digitale Welt befindet sich im Umbruch sie wird komplexer, schneller und zugleich deutlich angreifbarer. Vor allem künstliche Intelligenz und moderne IT-Sicherheitskonzepte gehören zu den zentralen Trends, die bestimmen, wie Unternehmen ihre Netzwerke, Schutzmechanismen und Datenstrukturen künftig gestalten müssen. »Wir stehen an einem Punkt, an dem Unternehmen ihre technologische Zukunft konsequenter denn je… First seen…
-
FBI Reports $262M in ATO Fraud as Researchers Cite Growing AI Phishing and Holiday Scams
The U.S. Federal Bureau of Investigation (FBI) has warned that cybercriminals are impersonating financial institutions with an aim to steal money or sensitive information to facilitate account takeover (ATO) fraud schemes.The activity targets individuals, businesses, and organizations of varied sizes and across sectors, the agency said, adding the fraudulent schemes have led to more than…
-
Am I free to choose different Agentic AI frameworks?
Are Non-Human Identities the Key to Secure Cloud Environments? How do we ensure our systems remain secure, especially when it comes to machine identities and their secrets? The management of Non-Human Identities (NHIs) is a crucial aspect of cybersecurity, offering a comprehensive approach to protecting machine identities and their associated credentials in the cloud. Understanding……