Tag: ai
-
AI Agent Identity Management: A New Security Control Plane for CISOs
Autonomous AI agents are creating a new identity blind spot as they operate outside traditional IAM controls. Token Security shows why managing the full lifecycle of AI agent identities is becoming a critical CISO priority. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ai-agent-identity-management-a-new-security-control-plane-for-cisos/
-
DockerDash Exposes AI Supply Chain Weakness In Docker’s Ask Gordon
DockerDash vulnerability allows RCE and data exfiltration via unverified metadata in Ask Gordon First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/dockerdash-weakness-dockers-ask/
-
Meet Moltbook, the Social Platform Where AI Agents Talk and Humans Watch
Tags: aiMoltbook is a new social platform where AI agents post and interact while humans observe, raising questions about autonomy, security, and agent behavior. First seen on hackread.com Jump to article: hackread.com/moltbook-social-platform-ai-agents-talk-humans-watch/
-
UK privacy watchdog probes Grok over AI-generated sexual images
The United Kingdom’s data protection authority launched a formal investigation into X and its Irish subsidiary over reports that the Grok AI assistant was used to generate nonconsensual sexual images. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/uk-privacy-watchdog-probes-grok-over-ai-generated-sexual-images/
-
UK ICO Launches Investigation into X Over AI Generated Non-Consensual Sexual Imagery
UK Data Protection Watchdog has “serious concerns” over data privacy on Elon Musk’s social platform First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ico-investigates-x-over-grok-ai/
-
JFrog Researchers Surface Vulnerabilities in AI Automation Platform from n8n
JFrog security researchers have discovered a pair of critical vulnerabilities in a workflow automation platform from n8n that makes use of large language models (LLMs) to execute tasks. A CVE-2026-1470 vulnerability, rated 9.9, enables a malicious actor to remotely execute JavaScript code by manipulating a Statement capability in the n8n platform that is used to..…
-
ChatGPT hat die Welt verändert, OpenClaw krempelt sie um
Zurzeit überschlagen sich die Einschätzungen und News zum neuen KI-Agenten OpenClaw/Moltbot. Nash Borges, Vice President of Engineering and Data Science bei Sophos hat sich den Bot näher angesehen und hat eine dedizierte Meinung zum neuen KI-Supertool: Wer hätte gedacht, dass wir nur ein Open-Source-Projekt vom bedeutendsten Paradigmenwechsel in der künstlichen Intelligenz (KI) seit ChatGPT entfernt…
-
Digitale Souveränität als Standortvorteil Wie Europa den Spagat zwischen Werten und Innovation meistert
Europa steht an einem digitalen Wendepunkt. Während globale Tech-Giganten oft faktische Standards setzen, verfolgt die EU einen anderen Weg: Souveränität durch Werte. Mit dem EU AI Act und der NIS2-Richtlinie will der Kontinent zum Vorreiter für sichere und ethische Technologie werden. Doch in den Chefetagen wächst die Skepsis: Wird der Schutz der digitalen Zukunft zum…
-
The rise of Moltbook suggests viral AI prompts may be the next big security threat
We don’t need self-replicating AI models to have problems, just self-replicating prompts. First seen on arstechnica.com Jump to article: arstechnica.com/ai/2026/02/the-rise-of-moltbook-suggests-viral-ai-prompts-may-be-the-next-big-security-threat/
-
French prosecutors raid X offices, summon Musk over Grok deepfakes
French prosecutors have raided X’s offices in Paris on Tuesday as part of a criminal investigation into the platform’s Grok AI tool, widely used to generate sexually explicit images. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/french-prosecutors-raid-x-offices-over-grok-sexual-deepfakes/
-
95% of AI Projects Are Unproductive and Not Breach Ready
Like me, this news probably shocked almost all AI enthusiasts. The GenAI gold rush has apparently turned into a reckoning. And the fallout may be the next cyberattack. A recent MIT report reveals an unexpected twist in the AI market, making waves across boardrooms and leadership circles. The report, based on analysis of over 300……
-
Notepad++ infrastructure hijacked by Chinese APT in sophisticated supply chain attack
Rapid7 identifies custom malware: Cybersecurity firm Rapid7 also published a detailed technical analysis corroborating Ho’s disclosure and identifying the attack as part of a broader campaign deploying previously undocumented malware. Rapid7’s investigation uncovered a custom backdoor the firm dubbed “Chrysalis,” alongside Cobalt Strike and Metasploit frameworks.”Forensic analysis conducted by the MDR team suggests that the…
-
Sichere Entwicklung, Bereitstellung und Nutzung von Anwendungen der künstlichen Intelligenz
Zscaler versetzt mit seinen KI-Sicherheitsinnovationen Organisationen in die Lage, die Nutzung von KI zu sichern und gleichzeitig Transparenz, Kontrolle und Governance zu gewährleisten. Da Unternehmen heute generative KI einsetzen und sich auf die Implementierung von agentenbasierter KI vorbereiten, sind sie einem steigenden Risiko von Cyberangriffen und Datenverlusten ausgesetzt, da herkömmliche Sicherheitsmodelle nicht für die Sicherung…
-
Firefox to let users manage and block AI features
Mozilla will add a set of controls in Firefox that let users manage and block GenAI features in the desktop browser. The controls will be included in Firefox version 148 on … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/03/mozilla-firefox-ai-controls-version-148/
-
OpenAI releases Codex macOS app for agent-based software development
OpenAI has launched the new Codex app for macOS, a dedicated workspace for managing multiple AI coding agents in parallel. The app is designed to help developers reduce … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/03/openai-codex-macos-app/
-
Kommentar von Alexander Waldmann, Applause – KI-Agenten und IT-Sicherheit neue Herausforderungen für Unternehmen
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/optimierung-sicherheitsarchitektur-ki-agenten-a-0e70664338d6580eb11019f715ff0a56/
-
Outages Happen to Everyone. Building a Resilient Architecture Doesn’t Have to Be Hard.
Tags: access, ai, attack, breach, business, cloud, compliance, computing, container, control, csf, cyberattack, data, defense, detection, dora, encryption, finance, framework, government, nist, regulation, resilience, service, software, strategy, technologyOutages Happen to Everyone. Building a Resilient Architecture Doesn’t Have to Be Hard. madhav Tue, 02/03/2026 – 05:21 No company is spared the pain of outages. But their impact can be mitigated by how resilient you build your business architecture. And who you choose to partner with can significantly determine how effective that will be.…
-
DIY AI bot farm OpenClaw is a security ‘dumpster fire’
Tags: aiYour own personal Jarvis. A bot to hear your prayers. A bot that cares. Just not about keeping you safe First seen on theregister.com Jump to article: www.theregister.com/2026/02/03/openclaw_security_problems/
-
Mozilla Introduces Global Kill Switch for Firefox AI Capabilities
Mozilla has rolled out comprehensive AI controls in Firefox 148, launching February 24, 2026, allowing users to globally disable all generative AI features across the browser. The update addresses growing user concerns about AI integration while maintaining optional AI functionality for those who want it. Firefox 148 AI Control Features The new AI controls section…
-
Abuse of OpenClaw AI Capabilities Enables Stealthy Malware Campaigns
Tags: ai, attack, automation, backdoor, cyber, malicious, malware, marketplace, skills, supply-chain, threatHundreds of malicious skills are distributed through OpenClaw’s marketplace, transforming the popular AI agent ecosystem into a new supply chain attack vector. Threat actors are weaponizing the platform’s extensibility features to deliver droppers, backdoors, and infostealers disguised as legitimate automation tools.”‹ OpenClaw Skills Become Malware Distribution Channel OpenClaw is a self-hosted AI agent that executes…
-
Keyfactor-Studie warnt vor wachsendem Sicherheitsrisiko durch KI-Agenten
Tags: aiDie Studie wurde von Wakefield Research im Auftrag von Keyfactor durchgeführt und basiert auf den Antworten von 450 Cybersicherheitsexperten aus Nordamerika und Europa. Alle teilnehmenden Unternehmen beschäftigen mindestens 1.000 Mitarbeitende. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/keyfactor-studie-warnt-vor-wachsendem-sicherheitsrisiko-durch-ki-agenten/a43518/
-
Self-Healing AI for Security as Code: A Deep Dive Into Autonomy and Reliability
Tags: aiExplore the transformative role of self-healing AI in cybersecurity. This article delves into its integration within DevSecOps, the balance between AI autonomy and human oversight, industry applications, and the challenges of implementation in protecting complex digital environments. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/02/self-healing-ai-for-security-as-code-a-deep-dive-into-autonomy-and-reliability/
-
Critical vLLM Flaw Exposes Millions of AI Servers to Remote Code Execution
A newly disclosed security flaw has placed millions of AI servers at risk after researchers identified a critical vulnerability in vLLM, a widely deployed Python package for serving large language models. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cve-2026-22778-vllm-rce-malicious-video-link/
-
Think agentic AI is hard to secure today? Just wait a few months
Cost effective fix: Do nothing: Kodezi’s Khan offers an interesting fix for that foundational problem: Don’t even try. He argues it’s a money pit that will never be fully resolved. Instead, he suggests pouring resources into creating a strict identity strategy for every NHI going forward. “Aim for containment rather than for perfection. You can’t really govern…
-
Shai-Hulud & Co.: The software supply chain as Achilles’ heel
Tags: access, ai, application-security, attack, backdoor, ciso, cloud, credentials, cyber, github, Hardware, identity, infrastructure, kritis, kubernetes, malicious, network, nis-2, programming, risk, rust, sbom, software, strategy, supply-chain, threat, tool, vulnerability, wormThe polyglot supply chain attack: The most frightening prospect, however, is the convergence of these threats in a polyglot supply chain attack. Currently, security teams operate in isolation. AppSec monitors the code, CloudSec monitors the cloud, NetworkSec monitors the perimeter. A polyglot attack is designed to seamlessly break through these silos.This happens as follows: A…
-
Was tun, wenn die Erpresser kommen?
Tags: access, ai, backup, bsi, cio, cyberattack, cybercrime, data, encryption, hacker, infrastructure, Internet, mail, password, phishing, ransomware, service, supply-chain, update, vulnerabilityRuhe bewahren und keine übereilten Sachen machen, empfiehlt Podcast-Gast Joanna Lang-Recht. intersoft consulting services AGMontagmorgen, 8:00 Uhr. Die Mitarbeitenden können sich nicht einloggen. Die Produktionsbänder stehen still, und auf den Bildschirmen prangen digitale Erpresserschreiben. Der Albtraum eines jeden CIOs ist wahr geworden: Ein Ransomware-Angriff hat den Betrieb lahmgelegt. Jetzt endet der Regelbetrieb, und der Ausnahmezustand…
-
Mozilla Adds One-Click Option to Disable Generative AI Features in Firefox
Mozilla on Monday announced a new controls section in its Firefox desktop browser settings that allows users to completely turn off generative artificial intelligence (GenAI) features.”It provides a single place to block current and future generative AI features in Firefox,” Ajit Varma, head of Firefox, said. “You can also review and manage individual AI features…
-
Die Hälfte der deutschen Dater würde mit einer KI ausgehen
Tags: aiEinsame Online-Daterinnen und Online-Dater sind offen für romantische Beziehungen mit einer künstlichen Intelligenz und verwischen die Grenze zwischen Trost, Nähe und Risiko. Würden Sie auf ein Date mit einer künstlichen Intelligenz gehen? Neue Ergebnisse aus dem Insights Report: Artificial Intimacy (NIR) von Norton deuten darauf hin, dass die Idee schnell im Mainstream in… First seen…
-
‘Deepfakes spreading and more AI companions’: seven takeaways from the latest artificial intelligence safety report
Annual review highlights growing capabilities of AI models, while examining issues from cyber-attacks to job disruptionThe International AI Safety report is an <a href=”https://www.theguardian.com/technology/2025/jan/29/what-international-ai-safety-report-says-jobs-climate-cyberwar-deepfakes-extinction”>annual survey of technological progress and the risks it is creating across multiple areas, from deepfakes to the jobs market.Commissioned at the 2023 global AI safety summit, it is chaired by the…
-
AI-Coded Oppression: >>RedKitten<< Malware Targets Iranian Protesters
The post AI-Coded Oppression: >>RedKitten<< Malware Targets Iranian Protesters appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/ai-coded-oppression-redkitten-malware-targets-iranian-protesters/