Tag: ai
-
MIND Extends DLP Reach to AI Agents
MIND extends its data loss prevention platform to secure agentic AI, enabling organizations to discover, monitor, and govern AI agents in real time to prevent sensitive data exposure, shadow AI risks, and prompt injection attacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/mind-extends-dlp-reach-to-ai-agents/
-
Microsoft Previews Windows 11 Update With Smarter AI and Phone Continuity
Here’s a peek at AI assistance, phone-to-PC handoff, accessibility improvements, security fixes, and stability updates. The post Microsoft Previews Windows 11 Update With Smarter AI and Phone Continuity appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-windows-11-preview-ai-phone-upgrades/
-
Digitale Bedrohungslage verschärft sich weiter: 14 Prozent mehr Angriffe in Deutschland
Künstliche Intelligenz sorgt in der IT-Sicherheit für einen der tiefgreifendsten Umbrüche, die die Branche je erlebt hat. Fähigkeiten, die früher hochspezialisierten Angreifer Gruppen vorbehalten waren, stehen heute einer breiten Masse zur Verfügung. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/digitale-bedrohungslage-verschaerft-sich-weiter-14-prozent-mehr-angriffe-in-deutschland/a43496/
-
EU’s answer to CVE solves dependency issue, adds fragmentation risks
Tags: access, ai, china, cisco, cve, cyber, cybersecurity, data, dos, exploit, finance, governance, grc, infrastructure, intelligence, international, nvd, open-source, risk, service, software, threat, tool, vulnerability, vulnerability-managementCoordinated disclosure: Nik Kale, principal engineer and product architect at Cisco Systems, says GCVE’s main challenge comes from building a platform that the security community can rely on for coordinated disclosure and remediation.”Viability depends far more on governance than on the data itself,” Kale says. “That includes clear attribution rules, transparent CNA processes, predictable decision-making,…
-
Cybersecurity Teams Embrace AI, Just Not at the Scale Marketing Suggests
Despite the seemingly widespread adoption of AI for security operations, security leaders primarily use it for “relatively basic use cases,” said a Sumo Logic study First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cybersecurity-teams-embrace-ai/
-
NSFOCUS Unveils Enhanced AI LLM Risk Threat Matrix for Holistic AI Security Governance
SANTA CLARA, Calif., Jan 29, 2026 Security is a prerequisite for the application and development of LLM technology. Only by addressing security risks when integrating LLMs can businesses ensure healthy and sustainable growth. NSFOCUS first proposed the AI LLM Risk Threat Matrix in 2024. The Matrix addresses security from multiple perspectives: foundational security, data security,…The…
-
NIST’s AI guidance pushes cybersecurity boundaries
Tags: access, ai, ciso, control, cybersecurity, data, defense, exploit, framework, intelligence, nist, risk, risk-assessment, software, threatThe limits of ‘AI is just software’: NIST’s instinct to frame AI as an extension of traditional software allows organizations to reuse familiar concepts, risk assessment, access control, logging, defense in depth, rather than starting from zero. Workshop participants repeatedly emphasized that many controls do transfer, at least in principle.But some experts argue that the…
-
A Lack of Spending Isn’t the Problem With Cloud Security, Structural Complexity Is
Cloud security is hard and getting harder, a Fortinet study says, as AI widens a complexity gap and empowers attackers. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/a-lack-of-spending-isnt-the-problem-with-cloud-security-structural-complexity-is/
-
Indurex startet neue Plattform für sichere und resiliente cyber-physische Systeme
KI-gestützt, aber mit menschlicher Kontrolle: Indurex macht aus komplexen Industriedaten verlässliche Entscheidungen für kritische Infrastrukturen. Die Indurex-Plattform wurde genau für diese neue Realität entwickelt. Sie betrachtet Sicherheit und Betrieb nicht als getrennte Disziplinen, sondern als eng miteinander verbunden und als gemeinsame Grundlage für echte Resilienz. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/indurex-startet-neue-plattform-fuer-sichere-und-resiliente-cyber-physische-systeme/a43492/
-
KI-Identitäten außer Kontrolle: Massive Governance-Lücken in deutschen Unternehmen
Künstliche Intelligenz ist längst kein Zukunftsthema mehr. Sie agiert in Arbeitsumgebungen bereits heute autonom. Das ist auf der einen Seite ein Riesenvorteil, auf der anderen Seite jedoch schwierig überwachbar. Eine neue internationale Umfrage, beauftragt von Saviynt und in Deutschland, Großbritannien und den USA durchgeführt, zeigt: KI-Identitäten greifen bereits tief in kritische Systeme ein [1]…. First…
-
Spies in the Spreadsheet: >>Sheet Attack<< Uses Google Sheets AI to Target India
The post Spies in the Spreadsheet: >>Sheet Attack<< Uses Google Sheets AI to Target India appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/spies-in-the-spreadsheet-sheet-attack-uses-google-sheets-ai-to-target-india/
-
Crooks are hijacking and reselling AI infrastructure: Report
Tags: access, ai, api, attack, authentication, business, cloud, communications, control, credentials, cybersecurity, data, data-breach, endpoint, exploit, firewall, group, infosec, infrastructure, intelligence, Internet, LLM, malicious, marketplace, risk, service, skills, technology, theft, threat, training, vulnerabilityexposed endpoints on default ports of common LLM inference services;unauthenticated API access without proper access controls;development/staging environments with public IP addresses;MCP servers connecting LLMs to file systems, databases and internal APIs.Common misconfigurations leveraged by these threat actors include:Ollama running on port 11434 without authentication;OpenAI-compatible APIs on port 8000 exposed to the internet;MCP servers accessible without…
-
How does Agentic AI improve platform security
Are Organizations Truly Safe Without Effective Non-Human Identity Management? The Growing Importance of Agentic AI in Platform Security How can organizations navigate the complex terrain of cybersecurity to ensure both human and machine identities are secure? The answer may lie within the burgeoning field of Agentic AI, which is transforming platform security. Where businesses increasingly……
-
AI Use by CISA Chief Alarms Cyber Officials
CISA Defends Director’s Use of AI Tool Despite Internal Compliance Review. Cybersecurity and Infrastructure Security Agency Acting Director Madhu Gottumukkala uploaded sensitive documents to ChatGPT under a temporary, approved exception, prompting internal alerts and reigniting concerns over the agency’s AI governance and leadership judgement. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-use-by-cisa-chief-alarms-cyber-officials-a-30620
-
AI security startup Outtake raises $40M from Iconiq, Satya Nadella, Bill Ackman, and other big names
Outtake makes an agentic cybersecurity platform to help enterprises detect identity fraud. Its angel investors read like a who’s who of tech industry names. First seen on techcrunch.com Jump to article: techcrunch.com/2026/01/28/ai-security-startup-outtake-raises-40m-from-iconiq-satya-nadella-bill-ackman-and-other-big-names/
-
‘AI-Powered’ Services Firm Says Hack Affects 3.1M
Reported Victim Tally in HCIactive’s Health Data Theft Incident Soars. The victim count in a 2025 hack against a Maryland-based firm that provides AI-powered administrative and technology services to healthcare practices soared to nearly 3.1 million nationwide, according to an updated breach report from Healthcare Interactive. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-powered-services-firm-says-hack-affects-31m-a-30618
-
ICE Is Using Palantir’s AI Tools to Sort Through Tips
ICE has been using an AI-powered Palantir system to summarize tips sent to its tip line since last spring, according to a newly released Homeland Security document. First seen on wired.com Jump to article: www.wired.com/story/ice-is-using-palantirs-ai-tools-to-sort-through-tips/
-
Critical bug in popular vm2 Node.js sandboxing library puts projects at risk
Promise.prototype.then Promise.prototype.catch callback sanitization can be bypassed,” the official advisory reads. “This allows attackers to escape the sandbox and run arbitrary code.” Sandboxes like vm2 are needed by web and other Node-based applications whose functionality enables users or tools to upload and execute scripts. Because user-controlled code is untrusted by nature, it cannot be allowed…
-
Video-KI: Europas strengste Datenschutz-Regeln prägen die Zukunft
Tags: aiFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/video-ki-europas-strenge-datenschutz-regeln-praegung-zukunft
-
Viral Moltbot AI assistant raises concerns over data security
Security researchers are warning of insecure deployments in enterprise environments of the Moltbot (formerly Clawdbot) AI assistant, which can lead to leaking API keys, OAuth tokens, conversation history, and credentials. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/viral-moltbot-ai-assistant-raises-concerns-over-data-security/
-
Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware
Cybersecurity researchers have flagged a new malicious Microsoft Visual Studio Code (VS Code) extension for Moltbot (formerly Clawdbot) on the official Extension Marketplace that claims to be a free artificial intelligence (AI) coding assistant, but stealthily drops a malicious payload on compromised hosts.The extension, named “ClawdBot Agent – AI Coding Assistant” (“clawdbot.clawdbot-agent”) First seen on…
-
Corporate workers lean on shadow AI to enhance speed
A report shows senior corporate executives are willing to allow unsanctioned AI use, which could place company data at risk. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/corporate-workers-shadow-ai-speed/810721/
-
CrowdStrike CEO George Kurtz: 2026 Is ‘Breakout Year’ For Agentic SOC
The agentic-powered “revolution” that is transforming the Security Operations Center (SOC) is set to pick up speed this year, providing massive opportunities to AI-savvy solution and service providers, according to CrowdStrike co-founder and CEO George Kurtz. First seen on crn.com Jump to article: www.crn.com/news/security/2026/crowdstrike-ceo-george-kurtz-2026-is-breakout-year-for-agentic-soc
-
Corporate workers willing to use shadow AI to enhance speed
A report shows senior corporate executives are willing to allow unsanctioned AI use, which could place company data at risk. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/corporate-workers-shadow-ai-speed/810721/
-
AI tools break quickly, underscoring need for governance
In a new report, the security firm Zscaler said it identified severe vulnerabilities in every enterprise tool it tested — sometimes on its first prompt. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-vulnerabilities-governance-zscaler/810718/
-
How Autonomous AI Cyberattacks Will Transform Security: Experts
As autonomous cyberattacks begin to proliferate, the speed and volume of attacks powered by AI will quickly overwhelm the organizations that haven’t made a real investment in security, cybersecurity experts tell CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2026/how-autonomous-ai-cyberattacks-will-transform-security-experts
-
Zscaler AI Report 2026 zeigt Anstieg von KI-Aktivitäten um 91 Prozent
Die Studie basiert auf der Auswertung von 989,3 Milliarden KI-/ML-Transaktionen, die von rund 9.000 Organisationen weltweit zwischen Januar und Dezember 2025 über die Zscaler Zero Trust Exchange™ generiert wurden. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/zscaler-ai-report-2026-zeigt-anstieg-von-ki-aktivitaeten-um-91-prozent/a43487/
-
Stop Staring at JSON: How GenAI is Solving the API >>Context Crisis<<
Tags: ai, api, attack, authentication, banking, business, credentials, credit-card, data, endpoint, governance, mobile, organized, risk, soc, threat, toolThere is a moment that happens in every SOC (Security Operations Center) every day. An alert fires. An analyst looks at a dashboard and sees a UR: POST /vs/payments/proc/77a. And then they stop. They stare. And they ask the question that kills productivity: “What does this thing actually do?” Is it a critical payment gateway?…
-
KI-Agenten und IT-Sicherheit: Zwei Seiten einer Medaille
Tags: aiFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/ki-agenten-it-sicherheit-vorbehalte-2026
-
AI Is Rewriting Compliance Controls and CISOs Must Take Notice
AI agents are now executing regulated actions, reshaping how compliance controls actually work. Token Security explains why CISOs must rethink identity, access, and auditability as AI becomes a digital employee. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ai-is-rewriting-compliance-controls-and-cisos-must-take-notice/