Tag: ai
-
NDSS 2025 THEMIS: Regulating Textual Inversion For Personalized Concept Censorship
Tags: ai, backdoor, business, conference, Internet, malicious, network, regulation, technology, threat, trainingSESSION Session 3D: Al Safety ———– ———– Authors, Creators & Presenters: Yutong Wu (Nanyang Technological University), Jie Zhang (Centre for Frontier AI Research, Agency for Science, Technology and Research (A*STAR), Singapore), Florian Kerschbaum (University of Waterloo), Tianwei Zhang (Nanyang Technological University) ———– PAPER THEMIS: Regulating Textual Inversion for Personalized Concept Censorship Personalization has become a…
-
SOCs Must Be Built for Speed in the AI Threat Era
KPMG’s John Israel on Speed, Autonomy and Trusted AI in Security. The adversarial use of AI has dramatically compressed attack timelines, forcing organizations to rethink their security operations centers. John Israel, global CISO at KPMG, discusses how companies must reshape their SOC programs around speed, increased automation and governance. First seen on govinfosecurity.com Jump to…
-
Technical Debt vs Innovation Debt: Why Both Slow You Down, but Only One Threatens Your Future in the Age of AI
Tags: aiTechnical debt slows delivery. Innovation debt stops progress. Most companies understand the first. Few acknowledge the second. Technical debt shows up when your systems struggle…Read More First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/11/technical-debt-vs-innovation-debt-why-both-slow-you-down-but-only-one-threatens-your-future-in-the-age-of-ai/
-
Four charged over alleged plot to smuggle Nvidia AI chips into China
Prosecutors say front companies, falsified paperwork, and overseas drop points used to dodge US export rules First seen on theregister.com Jump to article: www.theregister.com/2025/11/21/nvidia_china_smuggling_charges/
-
Sysdig Whitepaper: Warum eine AIBOM die Blaupause für sichere KI-Modelle ist
Das neue Whitepaper ‘AIBOM: The infrastructure, risks, and how to secure AI models” steht ab sofort kostenlos auf der Sysdig-Website bereit. Es richtet sich an Sicherheits- und Entwicklungsteams, CISOs, Compliance-Beauftragte sowie alle Organisationen, die KI sicher und verantwortungsvoll einsetzen möchten. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/sysdig-whitepaper-warum-eine-aibom-die-blaupause-fuer-sichere-ki-modelle-ist/a42923/
-
Cybersecurity Snapshot: Global Agencies Target Criminal “Bulletproof” Hosts, as CSA Unveils Agentic AI Risk Framework
Tags: access, advisory, ai, android, apple, attack, banking, breach, browser, chrome, cisa, ciso, cloud, compliance, control, credentials, credit-card, crypto, cve, cyber, cybercrime, cybersecurity, data, defense, detection, endpoint, extortion, finance, firewall, firmware, flaw, framework, google, governance, government, group, guide, Hardware, ibm, identity, infection, infrastructure, international, Internet, law, linux, malicious, malware, microsoft, mobile, monitoring, network, open-source, oracle, password, phishing, radius, ransomware, rat, resilience, risk, risk-assessment, risk-management, russia, scam, service, software, switch, technology, threat, tool, update, vulnerability, windowsCyber agencies call on ISPs to help combat “bulletproof” internet hosts that shield cybercriminals. Meanwhile, the CSA introduced a new methodology to assess the risks of autonomous AI. Plus, get the latest on the CIS Benchmarks, drone-detection systems, and malware infections. Key takeaways Crackdown on “bulletproof” hosting: International cyber agencies are urging ISPs and network…
-
Four charged over alleged plot to smuggle Nvidia AI chips into China
Prosecutors say front companies, falsified paperwork, and overseas drop points used to dodge US export rules First seen on theregister.com Jump to article: www.theregister.com/2025/11/21/nvidia_china_smuggling_charges/
-
Check Point und Microsoft bringen KI-Sicherheit direkt in Microsoft Copilot
Mit dieser Partnerschaft baut Check Point seine führende Rolle im Schutz KI-gesteuerter Unternehmen weiter aus und setzt einen wichtigen Meilenstein auf dem Weg, den gesamten KI-Lebenszyklus abzusichern von der Entwicklung bis zum Einsatz im Arbeitsalltag. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-und-microsoft-bringen-ki-sicherheit-direkt-in-microsoft-copilot/a42913/
-
Technical Debt vs Innovation Debt: Why Both Slow You Down, but Only One Threatens Your Future in the Age of AI
Tags: aiTechnical debt slows delivery. Innovation debt stops progress. Most companies understand the first. Few acknowledge the second. Technical debt shows up when your systems struggle…Read More First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/11/technical-debt-vs-innovation-debt-why-both-slow-you-down-but-only-one-threatens-your-future-in-the-age-of-ai/
-
ISMG Editors: Inside the Staffing Crisis Crippling CISA
Also: Akira Ransomware Targets Healthcare, AI’s Sycophancy Becomes a Security Risk. In this week’s ISMG Editors’ Panel, four editors discussed the staffing crisis confronting America’s cyber defense agency, the escalating Akira ransomware threat putting more pressure on healthcare, and growing concerns over whether AI models used in security can actually be trusted. First seen on…
-
Cybersecurity Snapshot: Global Agencies Target Criminal “Bulletproof” Hosts, as CSA Unveils Agentic AI Risk Framework
Tags: access, advisory, ai, android, apple, attack, banking, breach, browser, chrome, cisa, ciso, cloud, compliance, control, credentials, credit-card, crypto, cve, cyber, cybercrime, cybersecurity, data, defense, detection, endpoint, extortion, finance, firewall, firmware, flaw, framework, google, governance, government, group, guide, Hardware, ibm, identity, infection, infrastructure, international, Internet, law, linux, malicious, malware, microsoft, mobile, monitoring, network, open-source, oracle, password, phishing, radius, ransomware, rat, resilience, risk, risk-assessment, risk-management, russia, scam, service, software, switch, technology, threat, tool, update, vulnerability, windowsCyber agencies call on ISPs to help combat “bulletproof” internet hosts that shield cybercriminals. Meanwhile, the CSA introduced a new methodology to assess the risks of autonomous AI. Plus, get the latest on the CIS Benchmarks, drone-detection systems, and malware infections. Key takeaways Crackdown on “bulletproof” hosting: International cyber agencies are urging ISPs and network…
-
AI Governance Risks Rise as Enterprises Scale Agents
Rubrik’s Dev Rishi on Mounting Pressure to Adopt AI Amid Operational Risks. Enterprises want AI-driven productivity, but rapid agent deployment introduces new risks. Dev Rishi, general manager of AI at Rubrik, outlines the governance, visibility and remediation capabilities organizations need to keep AI systems under control. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-governance-risks-rise-as-enterprises-scale-agents-a-30090
-
AI as Cyberattacker
From Anthropic: In mid-September 2025, we detected suspicious activity that later investigation determined to be a highly sophisticated espionage campaign. The attackers used AI’s “agentic” capabilities to an unprecedented degree”, using AI not just as an advisor, but to execute the cyberattacks themselves. The threat actor”, whom we assess with high confidence was a Chinese…
-
Microsoft Foundry ties in with Agent 365
Microsoft Foundry adds context, including model routing, and tightens governance for developers working on AI agents within its broader Agent 365 control plane. First seen on techtarget.com Jump to article: www.techtarget.com/searchsoftwarequality/news/366634569/Microsoft-Azure-AI-Foundry-ties-in-with-Agent-365
-
AI as Cyberattacker
From Anthropic: In mid-September 2025, we detected suspicious activity that later investigation determined to be a highly sophisticated espionage campaign. The attackers used AI’s “agentic” capabilities to an unprecedented degree”, using AI not just as an advisor, but to execute the cyberattacks themselves. The threat actor”, whom we assess with high confidence was a Chinese…
-
Avast Makes AI-Driven Scam Defense Available for Free Worldwide
Avast is rolling out Scam Guardian, a free AI-powered protection layer that analyzes websites, messages, and links to detect rising scam threats. Powered by Gen Threat Labs data, it reveals hidden dangers in code and adds 24/7 scam guidance through the Avast Assistant. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/avast-makes-ai-driven-scam-defense-available-for-free-worldwide/
-
From code to boardroom: A GenAI GRC approach to supply chain risk
Tags: ai, blockchain, business, ciso, compliance, dark-web, data, defense, finance, framework, gartner, grc, intelligence, LLM, metric, open-source, regulation, resilience, risk, strategy, supply-chain, threat, vulnerabilityThe GenAI GRC mandate: From reporting to prediction: To counter a threat that moves at the speed of computation, our GRC must also become generative and predictive. The GenAI GRC mandate is to shift the focus from documenting compliance to predicting systemic failure.Current GRC methods are designed for documentation. They verify that a policy exists.…
-
Google begins showing ads in AI Mode (AI answers)
Google has started rolling out ads in AI mode, which is the company’s “answer engine,” not a search engine. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/google-begins-showing-ads-in-ai-mode-ai-answers/
-
From code to boardroom: A GenAI GRC approach to supply chain risk
Tags: ai, blockchain, business, ciso, compliance, dark-web, data, defense, finance, framework, gartner, grc, intelligence, LLM, metric, open-source, regulation, resilience, risk, strategy, supply-chain, threat, vulnerabilityThe GenAI GRC mandate: From reporting to prediction: To counter a threat that moves at the speed of computation, our GRC must also become generative and predictive. The GenAI GRC mandate is to shift the focus from documenting compliance to predicting systemic failure.Current GRC methods are designed for documentation. They verify that a policy exists.…
-
Xillen Stealer: Advanced Features Bypass AI Detection and Steal Password Manager Data
The Python-based information-stealing tool Xillen Stealer has reached versions 4 and 5, significantly expanding its targeting capabilities and functionality across platforms. Documented initially by Cyfirma in September 2025, this cross-platform infostealer targets sensitive data, including credentials, cryptocurrency wallets, system information, and browser data, while employing sophisticated anti-analysis techniques to evade detection. The latest updates introduce…
-
Avast Makes AI-Driven Scam Defense Available for Free Worldwide
Avast is rolling out Scam Guardian, a free AI-powered protection layer that analyzes websites, messages, and links to detect rising scam threats. Powered by Gen Threat Labs data, it reveals hidden dangers in code and adds 24/7 scam guidance through the Avast Assistant. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/avast-makes-ai-driven-scam-defense-available-for-free-worldwide/
-
AI-Driven Obfuscated Malicious Apps Bypassing Antivirus Detection to Deliver Malicious Payloads
Cybersecurity researchers have identified a sophisticated malware campaign leveraging artificial intelligence to enhance obfuscation techniques, enabling malicious applications to circumvent traditional antivirus detection systems. The threat actors behind the campaign are distributing trojanized applications impersonating a prominent Korean delivery service, employing a multi-layered approach to evade security controls and maintain persistent command-and-control (C2) infrastructure. The…
-
Schatten-IT: Viele Fachkräfte nutzen KI ohne Erlaubnis
Schatten-KI in Unternehmen birgt erhebliche Risiken.Immer mehr Fachkräfte in den sogenannten MINT-Berufen setzen Künstliche Intelligenz (KI) am Arbeitsplatz ohne die Genehmigung des Arbeitgebers ein. MINT steht für Mathematik, Informatik, Naturwissenschaften und Technik. In Deutschland nutzen drei von vier MINT-Fachkräften (77 Prozent) bei der Arbeit KI-Tools wie ChatGPT, Google Gemini oder Perplexity, ohne dass die KI-Anwendungen…
-
Google begins showing ads in AI Mode (AI answers)
Google has started rolling out ads in AI mode, which is the company’s “answer engine,” not a search engine. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/google-begins-showing-ads-in-ai-mode-ai-answers/
-
Schatten-IT: Viele Fachkräfte nutzen KI ohne Erlaubnis
Schatten-KI in Unternehmen birgt erhebliche Risiken.Immer mehr Fachkräfte in den sogenannten MINT-Berufen setzen Künstliche Intelligenz (KI) am Arbeitsplatz ohne die Genehmigung des Arbeitgebers ein. MINT steht für Mathematik, Informatik, Naturwissenschaften und Technik. In Deutschland nutzen drei von vier MINT-Fachkräften (77 Prozent) bei der Arbeit KI-Tools wie ChatGPT, Google Gemini oder Perplexity, ohne dass die KI-Anwendungen…
-
With AI Reshaping Entry-Level Cyber, What Happens to the Security Talent Pipeline?
Automation is rewriting early-career cybersecurity work, raising urgent questions about how the next generation of security professionals will gain real-world expertise. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-careers/with-ai-reshaping-entry-level-cyber-what-happens-to-the-security-talent-pipeline-
-
The 10 Hottest Cybersecurity Products Of 2025
The hottest cybersecurity products of 2025 include new tools for AI security and data protection from CrowdStrike, Palo Alto Networks, SentinelOne, Zscaler and Netskope. First seen on crn.com Jump to article: www.crn.com/news/security/2025/the-10-hottest-cybersecurity-products-of-2025
-
With AI Reshaping Entry-Level Cyber, What Happens to the Security Talent Pipeline?
Automation is rewriting early-career cybersecurity work, raising urgent questions about how the next generation of security professionals will gain real-world expertise. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-careers/with-ai-reshaping-entry-level-cyber-what-happens-to-the-security-talent-pipeline-