Tag: ai
-
Sharp rise in AI adoption for cyber defense exposes major governance gap
A report by the SANS Institute indicates a split between senior security leaders and frontline practitioners.; First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-adoption-cyber-defense-governance-gap/825179/
-
Frontier AI: The Genie’s Out of the Bottle, But Where’s the Rulebook?
Cutting-edge artificial intelligence models are deploying with more independence and less human oversight. Several state governments are trying to legislate transparency in their use. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/frontier-ai-genie-out-of-bottle-where-rulebook
-
Künstliche Intelligenz verändert Cybersecurity-Berufe und stärkt die Bedeutung menschlicher Kontrolle
ISC2, die weltweit führende gemeinnützige Mitgliederorganisation für Cybersecurity-Fachleute, veröffentlicht die Ergebnisse ihres aktuellen Berichts ‘Rethinking AI’s Impact on Cybersecurity Roles”. Die Studie zeigt, dass künstliche Intelligenz die Aufgaben, Arbeitsabläufe und Entscheidungsprozesse in der Cybersecurity grundlegend verändert und gleichzeitig die Bedeutung menschlicher Urteilsfähigkeit, sorgfältiger Validierung und klarer Governance-Strukturen weiter zunimmt. Rund zwei Drittel der Befragten geben…
-
Channel faces challenges around AI security
The technology increases risk but has the potential to help defenders if they can master the opportunity First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366645838/Channel-faces-challenges-around-AI-security
-
KI-Einsatz in der Cybersicherheit steigt, Anzahl der KI-bedingten Ausfälle ebenso
Sicherheitsteams haben KI im Jahr 2026 schneller eingeführt als jemals zuvor, doch die Governance- und Personalstrukturen, die diese Einführung unterstützen sollen, halten nicht Schritt mit dieser Entwicklung. Der Bericht ‘2026 AI Survey Insights” des SANS Institutes liefert ein ehrliches Bild, wo die Profession tatsächlich steht und nicht wo sie gerne stehen möchte. Der Bericht […]…
-
Kombinierte Lösung für industrielle Cybersicherheit mit priorisierter Cyberabwehr
Der Spezialist für die Sicherheit von cyberphysischen Systemen (CPS), Claroty und Frenos, Pionier im Bereich KI-basierter, simulierter Penetrationstests im Bereich Betriebstechnik (OT), stellen gemeinsam eine integrierte Lösung für Industrieunternehmen bereit, die das Risiko von Ausfallzeiten in CPS-Umgebungen verringert. Durch die neue Partnerschaft können Unternehmen, die die Claroty-Plattform einsetzen, nun die Frenos-Plattform nutzen. Damit können sie…
-
Agentic-AI Große Produktivität mit hohem Risiko
Künstliche Intelligenz ist in vielen Unternehmen bereits angekommen und entwickelt sich zu einer neuen operativen Ebene digitaler Arbeit. Agentic-AI markiert dabei einen neuen Wendepunkt: Die unabhängigen Assistenten liefern nicht mehr nur Antworten, sondern können selbstständig Aufgaben ausführen, Daten abrufen, Programme bedienen oder Code starten. Dies verspricht hohes Produktivitätspotenzial, zugleich wächst die Angriffsfläche enorm. Und was…
-
>>Context bombs<< can frustrate AI-driven attacks, researchers found
A new approach tried out by Tracebit researchers has proven very effective at stopping AI agents from fully compromising targeted environments. What makes it notable … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/14/context-bombs-for-defensive-prompt-injection/
-
Cursor IDE Auto-Executes Malicious Code in Poisoned Repos
Researchers reported the vulnerability to Cursor in December, but it still remains in the popular AI coding platform and can be exploited in poisoned repository attacks. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/cursor-ide-malicious-code-poisoned-repos
-
Cursor IDE Auto-Executes Malicious Code in Poisoned Repos
Researchers reported the vulnerability to Cursor in December, but it still remains in the popular AI coding platform and can be exploited in poisoned repository attacks. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/cursor-ide-malicious-code-poisoned-repos
-
How Pentera Turns AI Security Workflows into Validation Engines
AI security agents are starting to influence real security decisions. They summarize findings, prioritize remediation, recommend next steps, and help teams move faster. But most still rely on fragmented risk signals: scanner output, severity scores, threat intelligence, configuration findings, and exposure data.That fragmentation matters because attackers do not move through environments one First seen on…
-
Künstliche Intelligenz schreibt die Regeln für autonome Cyberangriffe und -abwehr neu
Check Point Software Technologies hat seinen ‘Annual AI Security Report 2026″ von Check Point Research veröffentlicht. Dieser dokumentiert einen entscheidenden Wandel der letzten zwölf Monate: Künstliche Intelligenz (KI) fungiert bei Angriffen nicht mehr nur als Assistent, sondern agiert mittlerweile als ausführender Akteur. Wo KI Kriminellen früher lediglich bei der Vorbereitung half, führt sie jetzt Live-Angriffsversuche…
-
Attacker Used AI to Build Custom PowerShell Recon Malware
Huntress found an AI-generated PowerShell script used for AD reconnaissance, showing attackers are using AI to create custom, evasive tools. During an incident response investigation on June 3, 2026, Huntress analyst Jevon Ang recovered a PowerShell script from a compromised Windows Server that the attacker had used to map out the victim’s Active Directory environment.…
-
Attacker Used AI to Build Custom PowerShell Recon Malware
Huntress found an AI-generated PowerShell script used for AD reconnaissance, showing attackers are using AI to create custom, evasive tools. During an incident response investigation on June 3, 2026, Huntress analyst Jevon Ang recovered a PowerShell script from a compromised Windows Server that the attacker had used to map out the victim’s Active Directory environment.…
-
Interview: Lucie Audibert, solicitor in MP Jess Asato’s Grok case
AWO solicitor Lucie Audibert speaks with Computer Weekly about representing Labour MP Jess Asato’s legal claim against xAI’s chatbot Grok, its nudification capabilities and how this case may define what liability for developers of AI tools look like First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366645620/Interview-Lucie-Audibert-solicitor-in-MP-Jess-Asatos-Grok-case
-
Unternehmens-IT: Einsatz von agentischer KI birgt hohes Risiko für Firmen
Laut einem Experten kann durch den unkontrollierten Umgang eine Schatten-IT entstehen. Cyberkriminelle nutzen KI-Agenten, um Systeme zu scannen. First seen on golem.de Jump to article: www.golem.de/news/unternehmens-it-einsatz-von-agentischer-ki-birgt-hohes-risiko-fuer-firmen-2607-210849.html
-
SANS-Studie 2026 zeigt: KI beschleunigt die Cyberabwehr – vergrößert aber zugleich die Sicherheitslücken
Für den SANS AI Survey 2026 wurden weltweit 536 Fachleute aus den Bereichen Cybersicherheit und IT zu KI-Transformation, Governance, Sicherheitsbetrieb und Personalentwicklung befragt. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/sans-studie-2026-zeigt-ki-beschleunigt-die-cyberabwehr-vergroessert-aber-zugleich-die-sicherheitsluecken/a45731/
-
The best defense against AI attacks turns out to be a skeptical human
Analysts across the security industry now run generative AI through their daily work, from log triage to incident write-ups. Active use in cybersecurity strategy reached 78% … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/14/ai-attacks-skeptical-human/
-
The best defense against AI attacks turns out to be a skeptical human
Analysts across the security industry now run generative AI through their daily work, from log triage to incident write-ups. Active use in cybersecurity strategy reached 78% … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/14/ai-attacks-skeptical-human/
-
The best defense against AI attacks turns out to be a skeptical human
Analysts across the security industry now run generative AI through their daily work, from log triage to incident write-ups. Active use in cybersecurity strategy reached 78% … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/14/ai-attacks-skeptical-human/
-
Critical ServiceNow AI Platform Flaw Allows Unauthenticated Attackers to Escape Sandbox and Execute Remote Code
ServiceNow has released security updates to address a critical remote code execution vulnerability in its AI Platform. This vulnerability, tracked as CVE-2026-6875, could allow unauthenticated attackers to execute code within affected ServiceNow environments. The issue is described as a sandbox-escape flaw affecting the ServiceNow AI Platform. Critical ServiceNow AI Platform Flaw According to ServiceNow advisory…
-
AI Security Report 2026
or years, the cyber”¯security industry tracked AI as a force multiplier: something that made existing attack techniques faster, cheaper, and more accessible. That framing was”¯accurate.”¯But the”¯Annual”¯AI Security Report 2026 from Check Point Research documents a transition that goes further.”¯AI has crossed from assistant to operator. Where it once helped attackers prepare, it now runs the…
-
Federal AI Projects Get Priority in TMF Funding Dash
TMF Fast-Tracks AI, Permitting Proposals Ahead of Reauthorization Deadline. The Technology Modernization Fund is prioritizing generative AI and permitting proposals ahead of a July 24 agency deadline, working to commit roughly $200 million before its authority to make new investments lapses Sept. 30 without congressional action. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/federal-ai-projects-get-priority-in-tmf-funding-dash-a-32218
-
Sentra CEO: Small AI Models Cut Cost of Data Classification
Yoav Regev Says Small LMs Deliver High Accuracy Without Large Infrastructure. Sentra co-founder and CEO Yoav Regev says advances in small language models enable organizations to classify unstructured data with high accuracy inside customer environments, improving privacy, reducing infrastructure costs and strengthening AI-driven data governance. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/sentra-ceo-small-ai-models-cut-cost-data-classification-a-32217
-
Jscrambler npm Breach Exposes Developers to Malware
Malware Harvested Cloud Credentials, Source Code and Deployment Tokens. Attackers used a compromised npm publishing credential to release five malicious versions of Jscrambler’s Code Integrity package, deploying a Rust-based infostealer that harvested developer, cloud and AI tool credentials while evolving its delivery methods to evade detection. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/jscrambler-npm-breach-exposes-developers-to-malware-a-32215
-
Bipartisan House Bill Pushes AI for Pediatric Cancer Care
Measure Would Create Federal AI Coordinator, Expand Data Interoperability Efforts. A bipartisan House bill would create a federal coordinator to accelerate the use of artificial intelligence, standardized health data and interoperable research platforms in an effort to speed pediatric cancer research, improve clinical trial design and expand treatment options for children. First seen on govinfosecurity.com…
-
Cyber body Crest launches AI security charter
Crest’s industry-backed AI charter commits signatories to supporting responsible AI adoption and aims to foster trust in AI-enabled security services. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366645629/Cyber-body-Crest-launches-AI-security-charter
-
Cyber body Crest launches AI security charter
Crest’s industry-backed AI charter commits signatories to supporting responsible AI adoption and aims to foster trust in AI-enabled security services. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366645629/Cyber-body-Crest-launches-AI-security-charter
-
ThreatLocker CEO: ‘Fighting AI With AI’ Is Not A Winning Security Strategy
The idea of ‘fighting AI with AI’ is fundamentally the wrong approach for protecting against intensifying LLM-powered attacks, ThreatLocker CEO Danny Jenkins says in the inaugural episode of CRN’s new Security or Else! video series. First seen on crn.com Jump to article: www.crn.com/news/security/2026/threatlocker-ceo-fighting-ai-with-ai-is-not-a-winning-security-strategy
-
Vectra AI CEO: Network Data Drives Predictive Security
Hitesh Sheth: Cloud, SaaS, Data Center Visibility Boosts Enterprise Risk Assessment. Vectra AI CEO Hitesh Sheth says comprehensive network observability provides the most reliable foundation for predictive cybersecurity because it spans cloud, SaaS and on-premises infrastructure while offering telemetry that attackers are far less able to manipulate than endpoint logs. First seen on govinfosecurity.com Jump…