Tag: ai
-
Workspace-Protection für sicheres Arbeiten im Hybrid- und Remote-Modus
Sophos hat <> angekündigt und erweitert damit sein Portfolio, um Unternehmen bei der Sicherung hybrider Arbeitsumgebungen sowie der Steuerung des Einsatzes neuer Technologien wie KI zu unterstützen. Die Lösung basiert auf dem Sophos-Protected-Browser, powered by Island, und ermöglicht es Unternehmen, Anwendungen, Daten, Mitarbeiter und Gäste unabhängig vom Arbeitsort zu schützen und gleichzeitig einen […] First…
-
For the price of Netflix, crooks can now rent AI to run cybercrime
Group-IB says crims forking out for Dark LLMs, deepfakes, and more at subscription prices First seen on theregister.com Jump to article: www.theregister.com/2026/01/20/group_ib_ai_cycercrime_subscriptions/
-
New Study Finds GPT-5.2 Can Reliably Develop Zero-Day Exploits at Scale
Advanced large language models can autonomously develop working exploits for zero-day vulnerabilities, marking a significant shift in the offensive cybersecurity landscape. The research demonstrates that artificial intelligence systems can now perform complex exploit development tasks that previously required specialized human expertise. The agents were challenged to develop exploits under realistic constraints, including modern security mitigations,…
-
AI Supercharges Attacks in Cybercrime’s New ‘Fifth Wave’
Weaponized AI is fueling a new wave of cybercrime, said Group-IB in its latest report First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-supercharges-attacks-cybercrime/
-
Google Gemini flaw exposes new AI prompt injection risks for enterprises
Real enterprise exposure: Analysts point out that the risk is significant in enterprise environments as organizations rapidly deploy AI copilots connected to sensitive systems.”As internal copilots ingest data from emails, calendars, documents, and collaboration tools, a single compromised account or phishing email can quietly embed malicious instructions,” said Chandrasekhar Bilugu, CTO of SureShield. “When employees…
-
Risk of AI Model Collapse to Drive Zero Trust Data Governance, Gartner Says
Gartner predicts 50% of organizations will adopt zero trust data governance by 2028 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-model-collapse-zero-trust-data/
-
MY TAKE: From ‘holy mackeral’ to ‘daily routine’, AI vendors maneuver to commandeer your life
An email from Claude landed in my inbox Friday morning with a subject line that stopped me cold: “Using Claude for your everyday life.” Related: AI’s fortune teller effect Not “Unlock the power of AI” or “Transform your productivity.” Just”¦… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/my-take-from-holy-mackeral-to-daily-routine-ai-vendors-maneuver-to-commandeer-your-life/
-
VoidLink Debuts AI-Assisted, Server-Side Kernel Compilation Rootkit Technique
On January 13, 2026, Check Point Research published its analysis of VoidLink, a Chinese-developed Linux malware framework designed to target cloud environments. Following this disclosure, the Sysdig Threat Research Team (TRT) examined VoidLink’s binaries to understand its loader chain, rootkit internals, and control mechanisms. VoidLink’s most significant innovation addresses a persistent challenge in Linux malware:…
-
Secure web browsers for the enterprise compared: How to pick the right one
Tags: access, ai, android, api, attack, browser, business, chrome, cloud, computer, control, corporate, data, encryption, endpoint, fortinet, gartner, google, guide, identity, linux, login, malicious, malware, mfa, mobile, monitoring, network, okta, phishing, saas, service, siem, software, technology, threat, tool, training, vpn, windows, zero-trustEnable MFA at the beginning of any browser session by default.Handle isolation controls both with respect to the user’s session and to isolate any application from cross-infection. This means controlling the movement of data between the browser, your particular endpoint and the web application or applications involved.Control access to web destinations, either to allow or…
-
Opt-out erforderlich: Starlink nutzt Kundendaten für KI-Training
SpaceX hat die Datenschutzrichtlinien für Starlink überarbeitet und sammelt nun Nutzerdaten für das Training von KI-Modellen. First seen on golem.de Jump to article: www.golem.de/news/opt-out-erforderlich-starlink-nutzt-kundendaten-fuer-ki-training-2601-204376.html
-
Privacy teams feel the strain as AI, breaches, and budgets collide
Privacy programs are under strain as organizations manage breach risk, new technology, and limited resources. A global study from ISACA shows that AI is gaining ground in … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/20/isaca-privacy-program-pressures/
-
Google Gemini Flaw Allows Access to Private Meeting Details Through Calendar Events
A harmless-looking Google Calendar invite has revealed a new frontier in the exploitation ofartificial intelligence (AI). Security researchers at Miggo discovered a vulnerability in Google Gemini’s integration with Google Calendar that allowed attackers to bypass privacy controls and exfiltrate sensitive meeting datawithout any user interaction. Gemini, Google’s AI assistant, interacts with Calendar to help users…
-
Cybersecurity 2026: Trends und Predictions
2026 wird ein Jahr, in dem sich Angriffsflächen weiter ausdehnen, Automatisierung die Geschwindigkeit von Angriffen erhöht und künstliche Intelligenz Vorteile sowohl für Angreifer als auch für Sicherheitsteams bietet. Die folgenden Cybersecurity-Trends zeigen, welche Bedrohungen besonders relevant werden könnten und welche Entwicklungen Sicherheitsverantwortliche kennen sollten. KI-gestützte Angriffe KI bietet große Vorteile, sowohl für die Stärkung… First…
-
Is AI the key to impenetrable non-human identity security
Is Your Organization Truly Safe from Non-Human Identity Threats? Could a digital passport be the source of your organization’s next major security breach? Understanding the dynamics of Non-Human Identities (NHIs) is crucial for organizations aiming to secure their operations against cyber threats. With the integration of AI-driven strategies, NHI security is becoming a viable path……
-
How proactive can AI be in secrets rotation processes
How Can Organizations Effectively Manage Non-Human Identities? Are you aware of the potential threats posed by machine identities in your organization? With cybersecurity professionals navigate the complexities of managing Non-Human Identities (NHIs), understanding the nuances of these machine identities becomes crucial. In domains such as financial services, healthcare, and travel, safeguarding NHIs and their associated……
-
Can AI independently manage secrets without human oversight
How Can Non-Human Identities Enhance Cloud Security? Can organizations truly secure their cloud environments without addressing the role of Non-Human Identities (NHIs)? With technology continues to advance, NHIs have become a crucial component, particularly in managing secrets and enhancing security postures across various sectors. Understanding Non-Human Identities in Cybersecurity At the core of NHIs are……
-
What capabilities does AI add to cloud-native security
Are You Maximizing the Potential of AI in Cloud-Native Security? The intersection of artificial intelligence (AI) and cloud-native security is transforming how organizations safeguard their digital. With AI capabilities advancing rapidly, security is witnessing unprecedented changes that promise more robust protection mechanisms. But are businesses leveraging AI to its fullest potential in their cloud environments?……
-
AI-Powered Phishing Makes Human Risk Management Critical
AI-driven phishing is accelerating, making Human Risk Management critical. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/ai-powered-phishing-makes-human-risk-management-critical/
-
Aikido Gets $60M Series B to Scale, Automate AI Pen Testing
5x Revenue Growth, $1B Valuation Fuel Investment in Code Security Innovation. Backed by DST Global, Aikido Security’s $60 million Series B will fund global expansion and boost its AI-powered security tools. CEO Willem Delbare said the firm’s autonomous pen testing and code remediation cuts cost, boosts software resilience and already outperforms humans. First seen on…
-
Cop cops it after Copilot cops out: West Midlands police chief quits over AI hallucination
Craig Guildford banned Israeli fans based on Microsoft’s match report, told MPs ‘we don’t use AI,’ then discovers… they did First seen on theregister.com Jump to article: www.theregister.com/2026/01/19/copper_chief_cops_it_after/
-
Anthropic’s Cowork Shipped With Known Vulnerability
AI Agent Can Access File Upload API to Exfiltrate Documents. Security researchers have demonstrated how Anthropic’s new Claude Cowork productivity agent can be tricked into stealing user files and uploading them to an attacker’s account, exploiting a vulnerability the company allegedly knew about. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/anthropics-cowork-shipped-known-vulnerability-a-30553
-
UK copyright law unfit for protecting creative workers from AI
As the UK government considers its approach to artificial intelligence and copyright, Computer Weekly explores the dynamics at play in copyright markets, and what measures can be taken to ensure that creatives are protected First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366637299/UK-copyright-unfit-for-protecting-creative-workers-from-AI
-
Rogue agents and shadow AI: Why VCs are betting big on AI security
Misaligned agents are just one layer of the AI security challenge that startup Witness AI is trying to solve. It detects employee use of unapproved tools, blocking attacks, and ensuring compliance. First seen on techcrunch.com Jump to article: techcrunch.com/2026/01/19/rogue-agents-and-shadow-ai-why-vcs-are-betting-big-on-ai-security/
-
Relevante Entwicklungen und Cyberrisiken der künstlichen Intelligenz
Sowohl auf Angreifer- als auch auf Verteidigerseite kommt vermehrt Künstliche-Intelligenz-Technologie zum Einsatz. Vor allem Large-Language-Models (LLMs) werden von Entwicklerinnen und Entwicklern etwa zum ‘Wipe Coding”, also für das Erstellen von Skripten und Codes, genutzt. Cyberkriminelle nutzen KI gleichermaßen für ‘Wipe Hacking”. Auch wenn sich Angreifer mithilfe von LLMs (noch) keine Exploits erstellen lassen können, so…
-
âš¡ Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & More
In cybersecurity, the line between a normal update and a serious incident keeps getting thinner. Systems that once felt reliable are now under pressure from constant change. New AI tools, connected devices, and automated systems quietly create more ways in, often faster than security teams can react. This week’s stories show how easily a small…
-
Neuer Job als Schwarz IT Software Engineer for AI Forecasting gesucht? Schau dir unsere Jobs der Woche an.
First seen on t3n.de Jump to article: t3n.de/news/unsere-jobs-der-woche-1175973/
-
Allianz Risk Barometer 2026 – KI-Risiken wachsen rasant
First seen on security-insider.de Jump to article: www.security-insider.de/allianz-risk-barometer-2026-geschaeftsrisiken-ki-a-08a3c23098d4611f1bf58995e7dc44ff/
-
Not hot on bots, project names and shames AI-created open source software
‘OpenSlopware’ briefly flowers, fades, falls but fortunately was forked, fast First seen on theregister.com Jump to article: www.theregister.com/2026/01/18/openslopware_is_back/
-
Nvidia leans on emulation to squeeze more HPC oomph from AI chips in race against AMD
AMD researchers argue that, while algorithms like the Ozaki scheme merit investigation, they’re still not ready for prime time. First seen on theregister.com Jump to article: www.theregister.com/2026/01/18/nvidia_fp64_emulation/