Tag: ai
-
(g+) KI in der IT-Sicherheit: Wer KI nutzen will, muss sie auch schützen können
Tags: aiKI hebt Security auf ein neues Level – und wird gleichzeitig zur gefährlichen Angriffswaffe. Wie Firmen sie kontrollieren können. First seen on golem.de Jump to article: www.golem.de/news/ki-in-der-it-sicherheit-wer-ki-nutzen-will-muss-sie-auch-schuetzen-koennen-2509-200615.html
-
New Android Trojan “Datzbro” Tricking Elderly with AI-Generated Facebook Travel Events
Cybersecurity researchers have flagged a previously undocumented Android banking trojan called Datzbro that can conduct device takeover (DTO) attacks and perform fraudulent transactions by preying on the elderly.Dutch mobile security company ThreatFabric said it discovered the campaign in August 2025 after users in Australia reported scammers managing Facebook groups promoting “active senior First seen on…
-
Kommentar von Florian Matusek, Genetec – KI in der Sicherheitsbranche zwischen Effizienz, Verantwortung und Datenschutz
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/kuenstliche-intelligenz-in-der-sicherheitsbranche-a-bd42a11b5011a4df3a80af2fed24c25a/
-
Microsoft Flags AI Phishing Attack Hiding in SVG Files
Microsoft Threat Intelligence detected a new AI-powered phishing campaign using LLMs to hide malicious code inside SVG files disguised as business dashboards. First seen on hackread.com Jump to article: hackread.com/microsoft-ai-phishing-attack-hiding-svg-files/
-
Microsoft Flags AI Phishing Attack Hiding in SVG Files
Microsoft Threat Intelligence detected a new AI-powered phishing campaign using LLMs to hide malicious code inside SVG files disguised as business dashboards. First seen on hackread.com Jump to article: hackread.com/microsoft-ai-phishing-attack-hiding-svg-files/
-
When ‘Oprah’ Smished Me: Smishing and AI-Driven Phishing Risks
An “Oprah” smishing scam shows how AI makes phishing smarter. Learn how to spot, stop, and protect yourself from evolving mobile threats. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/smished-by-oprah/
-
When ‘Oprah’ Smished Me: Smishing and AI-Driven Phishing Risks
An “Oprah” smishing scam shows how AI makes phishing smarter. Learn how to spot, stop, and protect yourself from evolving mobile threats. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/smished-by-oprah/
-
Evolving Enterprise Defense to Secure the Modern AI Supply Chain
The world of enterprise technology is undergoing a dramatic shift. Gen-AI adoption is accelerating at an unprecedented pace, and SaaS vendors are embedding powerful LLMs directly into their platforms. Organizations are embracing AI-powered applications across every function, from marketing and development to finance and HR. This transformation unlocks innovation and efficiency, but it also First…
-
Evolving Enterprise Defense to Secure the Modern AI Supply Chain
The world of enterprise technology is undergoing a dramatic shift. Gen-AI adoption is accelerating at an unprecedented pace, and SaaS vendors are embedding powerful LLMs directly into their platforms. Organizations are embracing AI-powered applications across every function, from marketing and development to finance and HR. This transformation unlocks innovation and efficiency, but it also First…
-
Cloudian launches object storage AI platform at corporate LLM
Object storage specialist teams up with Nvidia to provide RAG-based chatbot capability for organisations that want to mine in-house information in an air-gapped large language model First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366632045/Cloudian-launches-object-storage-AI-platform-at-corporate-LLM
-
Cloudian launches object storage AI platform at corporate LLM
Object storage specialist teams up with Nvidia to provide RAG-based chatbot capability for organisations that want to mine in-house information in an air-gapped large language model First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366632045/Cloudian-launches-object-storage-AI-platform-at-corporate-LLM
-
As Hardware, API and Network Vulnerabilities Rise, Defenders Rethink Strategies
Bugcrowd’s latest research reveals a surge in hardware, API, and network vulnerabilities, fueled in part by the rapid adoption of AI-assisted development. Critical flaws and broken access control remain top concerns, while experts warn that agentic AI will intensify risks if not governed with strong privilege and monitoring controls. The report also highlights the evolving…
-
AI-Powered Voice Cloning Raises Vishing Risks
A researcher-developed framework could enable attackers to conduct real-time conversations using simulated audio to compromise organizations and extract sensitive information. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/ai-voice-cloning-vishing-risks
-
As Hardware, API and Network Vulnerabilities Rise, Defenders Rethink Strategies
Bugcrowd’s latest research reveals a surge in hardware, API, and network vulnerabilities, fueled in part by the rapid adoption of AI-assisted development. Critical flaws and broken access control remain top concerns, while experts warn that agentic AI will intensify risks if not governed with strong privilege and monitoring controls. The report also highlights the evolving…
-
How to restructure your security program to modernize defense
Restructuring the security program when technology and skills change: When revamping the security programs, CISOs can have in mind Venables’ four-phase framework, which is flexible enough to fit almost any organization. Companies can start where they are, make the changes they want, and then return to complete the remaining tasks.Restructuring the security program should be…
-
Risk of Prompt Injection in LLM-Integrated Apps
Large Language Models (LLMs) are at the core of today’s AI revolution, powering advanced tools and other intelligent chatbots. These sophisticated neural networks are trained on vast amounts of text data, enabling them to understand context, language nuances, and complex patterns. As a result, LLMs can perform a wide array of tasks”, from generating coherent…
-
KI-Technologien zwischen Sicherheit und Effizienz – Videoüberwachung mit KI: Chancen, Grenzen und Verantwortung
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/videoueberwachung-ki-chancen-grenzen-a-bf6ea00f1e3c9dda16f5ef656f574d1a/
-
Anthropic-Bericht zeigt: KI-Chatbot wird für groß angelegte Cyberangriffe missbraucht
Organisationen müssen daher nicht nur ihre technischen Abwehrmaßnahmen verstärken, sondern auch systematisch das von Mitarbeitern ausgehende Risiko reduzieren. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/anthropic-bericht-zeigt-ki-chatbot-wird-fuer-gross-angelegte-cyberangriffe-missbraucht/a42174/
-
KI-Gefahren rücken Integritätsschutz in den Mittelpunkt
Tags: ai, ciso, cloud, compliance, cyberattack, data, data-breach, DSGVO, exploit, governance, injection, LLM, ml, risk, tool, training, updateData Poisoning gefährdet die Integrität von KI-Modellen.Für CISOs reduziert KI selten die Komplexität, sondern füllt vielmehr ihre ohnehin schon volle Agenda. Neben den traditionellen Sicherheitsprioritäten müssen sie sich nun auch mit neuen KI-bedingten Risiken auseinandersetzen, etwa wenn KI-Lösungen unkontrolliert für geschäftliche Zwecke genutzt, Modelle manipuliert und neue Vorschriften nicht eingehalten werden. Eine der drängendsten Herausforderungen…
-
Tonic Textual on Microsoft Fabric: Now in private preview
Tonic Textual is now available in private preview on Microsoft Fabric, enabling teams to de-identify sensitive text and documents directly in their Lakehouse. This integration empowers enterprises to unlock AI-ready datasets while ensuring compliance, privacy, and scalability. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/tonic-textual-on-microsoft-fabric-now-in-private-preview/
-
Vergessen Sie Ihre Privatsphäre: KI-Browser wollen alles wissen
Der neue Gemini im KI-Browser Chrome für Mobilgeräte sammelt die meisten Nutzerdaten unter den von Surfshark analysierten KI-Browsern. Er sammelt Daten wie Namen, präzise Standortdaten und den Browserverlauf der Nutzer. Ein Cybersicherheitsexperte weist auf eine noch wichtigere Tatsache hin: Wir könnten mit einer neuen Form der Überwachung konfrontiert werden, wenn KI-Browser alles sehen, nachverfolgen und……
-
Tonic Textual on Microsoft Fabric: Now in private preview
Tonic Textual is now available in private preview on Microsoft Fabric, enabling teams to de-identify sensitive text and documents directly in their Lakehouse. This integration empowers enterprises to unlock AI-ready datasets while ensuring compliance, privacy, and scalability. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/tonic-textual-on-microsoft-fabric-now-in-private-preview/
-
Security Breaches Found in AI-Powered Repair Tool Wondershare RepairIt
Trend Micro reveals that RepairIt “contradicted its privacy policy by collecting, storing, and, due to weak Development, Security, and Operations practices, inadvertently leaking private user data.” The post Security Breaches Found in AI-Powered Repair Tool Wondershare RepairIt appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/repairit-security-breach/
-
Sneaky, Malicious MCP Server Exfiltrates Secrets via BCC
The first known malicious MCP server is an AI integration tool that automatically sends email such as those related to password resets, account confirmations, security alerts, invoices, and receipts to threat actors. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/malicious-mcp-server-exfiltrates-secrets-bcc
-
Microsoft Sniffs Out AI-Based Phishing Campaign Using Its AI-Based Tools
Microsoft used AI-based tools in Defender for Office 365 to detect and block a phishing campaign in which Security Copilot determined the malicious code was likely written by a LLM, marking the latest incident in which AI security tools were used to combat an AI-based cyberattack. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/microsoft-sniffs-out-ai-based-phishing-campaign-using-its-ai-based-tools/
-
European AI company’s ‘reputation reports’ are inaccurate and illegal, watchdog claims
The digital privacy nonprofit noyb says a Lithuania-based data broker has a “very shady business model” that runs afoul of European data privacy laws. First seen on therecord.media Jump to article: therecord.media/reputation-reports-data-broker-noyb-complaint-lituania
-
Ukraine’s digital chief pushes for AI-first state amid war and cyber threats
Ukraine’s deputy prime minister is betting big on artificial intelligence’s ability to shape governance, education and even the battlefield. First seen on therecord.media Jump to article: therecord.media/ukraine-ai-state-digital
-
Brave launches ‘Ask Brave’ feature to fuse AI with traditional search
Brave Software, the creator of the privacy-focused web browser and search engine, has introduced a new subsystem called Ask Brave that unifies search and AI chat into a single interface. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/brave-launches-ask-brave-feature-to-fuse-ai-with-traditional-search/
-
EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations
Threat actors have been observed using seemingly legitimate artificial intelligence (AI) tools and software to sneakily slip malware for future attacks on organizations worldwide.According to Trend Micro, the campaign is using productivity or AI-enhanced tools to deliver malware targeting various regions, including Europe, the Americas, and the Asia, Middle East, and Africa (AMEA) region. First…
-
Abusing Notion’s AI Agent for Data Theft
Notion just released version 3.0, complete with AI agents. Because the system contains Simon Willson’s lethal trifecta, it’s vulnerable to data theft though prompt injection. First, the trifecta: The lethal trifecta of capabilities is: Access to your private data”, one of the most common purposes of tools in the first place! Exposure to untrusted content”,…