Tag: ai
-
Google Play Flooded With 224 Malicious Apps, 38 Million Downloads Deliver Malware
A global ad fraud and click fraud operation, dubbed SlopAds, comprising 224 Android apps that collectively amassed more than 38 million downloads across 228 countries and territories. Under the guise of AI-themed utilities, these apps employ advanced obfuscation techniques”, such as steganography and hidden WebViews”, to deliver a fraud payload that generates billions of ad…
-
JFrog stellt erstes Agentic Repository vor Neuer Meilenstein für KI-native Softwareentwicklung
JFrog Fly arbeitet mit bestehenden KI-Repositorys und Plattformen wie Cursor, GitHub Copilot und Claude Code zusammen. Dank der MCP-Standards (Model Context Protocol) wird sichergestellt, dass KI-Agenten über verschiedene Systeme hinweg konsistent agieren. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/jfrog-stellt-erstes-agentic-repository-vor-neuer-meilenstein-fuer-ki-native-softwareentwicklung/a42041/
-
Survey Surfaces Rising Tide of Cyberattacks Involving AI
A new survey of 3,001 security leaders reveals 26% of organizations have faced AI model data poisoning, 20% experienced deepfakes, and over half admit deploying AI too quickly. As AI-driven threats rise, enterprises invest in GenAI security, governance, and deepfake detection. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/survey-surfaces-rising-tide-of-cyberattacks-involving-ai/
-
Trotz Sicherheitsfiltern: KI-Chatbots sind erschreckend gute Komplizen für Phishing-Betrug
First seen on t3n.de Jump to article: t3n.de/news/studie-ki-chatbots-helfer-fuer-phishing-betrug-1707713/
-
5 steps for deploying agentic AI red teaming
Tags: access, ai, application-security, attack, automation, blizzard, business, cloud, control, data, defense, exploit, framework, gartner, governance, infrastructure, malicious, open-source, RedTeam, risk, risk-assessment, service, software, threat, tool, zero-trustFive steps to take towards implementing agentic red teaming: 1. Change your attitude Perhaps the biggest challenge for agentic red teaming is adjusting your perspective in how to defend your enterprise. “The days where database admins had full access to all data are over,” says Suer. “We need to have a fresh attitude towards data…
-
Digitale Souveränität im Wandel – Wie KI die digitale Identität verändert
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/ki-digitale-identitaet-a-efd97d9c3f3ad2e2053bdf6f185f9285/
-
Google Cloud unveils open protocol for agentic payments
Google’s Agent Payments Protocol is an open standard developed with over 60 global partners to create a secure standard for AI-driven transactions First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366631360/Google-Cloud-unveils-open-protocol-for-agentic-payments
-
Exabeam: Treat AI agents as the new insider threat
As AI agents are given more power inside organisations, Exabeam’s chief AI officer Steve Wilson argues they must be monitored for rogue behaviour just like their human counterparts First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366631420/Exabeam-Treat-AI-agents-as-the-new-insider-threat
-
Digitale Souveränität im Wandel – Wie KI die digitale Identität verändert
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/ki-digitale-identitaet-a-efd97d9c3f3ad2e2053bdf6f185f9285/
-
FIRESIDE CHAT: The case for AI-Native SOCs built to take action, not just observe and alert
The raw attack surface isn’t just growing. It’s fragmenting. Logs from SaaS apps, cloud workloads, and third-party services flood security stacks already straining to keep up. Security teams are buried in alerts they can’t triage fast enough. Meanwhile, adversaries probe… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/fireside-chat-the-case-for-ai-native-socs-built-to-take-action-not-just-observe-and-alert/
-
George Kurtz’s 5 Boldest AI Statements At CrowdStrike Fal.Con 2025
CrowdStrike is making its next moves in AI including with a focus on enabling a Security Operations Center (SOC) that is fundamentally powered by agentic technologies, the “agentic SOC,” CrowdStrike co-founder and CEO George Kurtz said Tuesday. First seen on crn.com Jump to article: www.crn.com/news/security/2025/george-kurtz-s-5-boldest-ai-statements-at-crowdstrike-fal-con-2025
-
Check Point Adds AI Application Defense With Lakera Purchase
Acquisition Pairs GenAI User Protection With Controls for AI Agents, Models, Apps. Check Point’s acquisition of Lakera adds application-layer protection to its GenAI Protect offering. The deal brings together two product teams focused on securing enterprise AI deployments end-to-end – from user behavior to model-level interactions – amid rising threat activity. First seen on govinfosecurity.com…
-
Chinese-Made Villager AI Pentest Tool Raises Cobalt Strike-Like Concerns
Villager is being pitched as a legitimate AI-powered pentest tool for red teams, but the platform, made by Chinese company Cyberspike, has been loaded almost 11,000 times on PyPI in two months, raising concerns that it is on the same path as Cobalt Strike, another red team tool that became a favorite of malicious actors.…
-
Survey Surfaces Rising Number of AI Security Incidents
A global survey of 1,025 IT and security professionals finds that while organizations experienced an average of 2.17 cloud breaches over the past 18 months, only 8% were categorized as severe. At the same time, however, with the rise of artificial intelligence (AI) there may be more significant challenges ahead. More than half of respondents..…
-
CrowdStrike bets big on agentic AI with new offerings after $290M Onum buy
Tags: ai, api, ciso, control, crowdstrike, cybersecurity, data, data-breach, detection, marketplace, password, risk, service, soc, trainingCrowdStrike’s Agentic Security Platform: CrowdStrike developed its Agentic Security Platform precisely to help organizations keep pace with increasingly AI-equipped adversaries. “The increasing speed of the adversary, the increasing use of generative AI means from a defensive standpoint, we want to leverage these technologies as well to match and hopefully exceed the speed and efficiency of…
-
Check Point erwirbt Lakera zur Absicherung von LLMs, GenAI und KI-Agenten
Check Point Software Technologies gab den Abschluss einer Vereinbarung zur Übernahme von Lakera bekannt, einer der weltweit führenden KI-nativen Sicherheitsplattformen für agentenbasierte KI-Anwendungen. Mit dieser Akquisition setzt Check Point einen neuen Standard in der Cyber-Sicherheit und wird einen vollständigen End-to-End-KI-Sicherheits-Stack anbieten, der Unternehmen bei der Beschleunigung ihrer KI-Transformation schützt. ‘KI verändert jeden Geschäftsprozess, schafft aber…
-
CrowdStrike Extends AI Security Ambitions Beyond Operations to Include Workloads
CrowdStrike at its Fal.Con event today expanded its effort to embed artificial intelligence (AI) agents into security operations center (SOC) workflows and while simultaneously extending its ability to secure AI applications by acquiring Pangea for $260 million. Additionally, CrowdStrike also revealed the Fall 2025 update to its core platform adds a graph capability to track..…
-
CrowdStrike To Expand AI Security Portfolio With Deal To Acquire Pangea
CrowdStrike has reached an agreement to acquire Pangea, a startup that offers guardrails for GenAI-powered applications, the company announced Tuesday. First seen on crn.com Jump to article: www.crn.com/news/security/2025/crowdstrike-to-expand-ai-security-portfolio-with-deal-to-acquire-pangea
-
Check Point acquires AI security firm Lakera in push for enterprise AI protection
The acquisition comes during a flurry of larger cybersecurity firms looking to add AI security to their customer offerings. First seen on cyberscoop.com Jump to article: cyberscoop.com/check-point-lakera-acquistion-ai-security/
-
Beyond robots.txt: Exposing the cracks in AI agent policy enforcement
AI agents often ignore robots.txt and can be manipulated via prompts”, exposing real risks to content, privacy, and site security. DataDome gives you visibility and control over AI traffic. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/beyond-robots-txt-exposing-the-cracks-in-ai-agent-policy-enforcement/
-
Check Point erwirbt Lakera zur Absicherung von LLMs, GenAI und KI-Agenten
Nach Abschluss der Transaktion wird Lakera die Grundlage von Check Points Global Center of Excellence for AI Security bilden First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-erwirbt-lakera-zur-absicherung-von-llms-genai-und-ki-agenten/a42032/
-
DigiCert Acquires Valimail to Add Email Authentication Service
DigiCert acquires Valimail to strengthen email authentication with DMARC and content protection, to fight phishing and AI-driven threats. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/digicert-acquires-valimail-to-add-email-authentication-service/
-
Check Point To Buy AI Cybersecurity Startup Lakera To Boost Agentic AI Security
Check Point to acquire AI cybersecurity startup Lakera to boost AI security for enterprise customers around LLMs, AI agents and multimodal workflows, says CEO Nadav Zafrir. First seen on crn.com Jump to article: www.crn.com/news/security/2025/check-point-to-buy-ai-cybersecurity-startup-lakera-to-boost-agentic-ai-security
-
5 Big Takeaways From CrowdStrike’s 2025 Partner Summit
CrowdStrike is continuing to expand its investments into working with solution and service provider partners amid surging growth opportunities including AI security and tool consolidation, executives said during CrowdStrike’s Partner Summit 2025 Monday. First seen on crn.com Jump to article: www.crn.com/news/security/2025/5-big-takeaways-from-crowdstrike-s-2025-partner-summit
-
DigiCert Acquires Valimail to Add Email Authentication Service
DigiCert acquires Valimail to strengthen email authentication with DMARC and content protection, to fight phishing and AI-driven threats. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/digicert-acquires-valimail-to-add-email-authentication-service/
-
Chinese AI Villager Pen Testing Tool Hits 11,000 PyPI Downloads
AI-native Villager, which automates Kali and DeepSeek penetration tests, has reached 11,000 PyPI downloads fueling dual-use threat First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chinese-ai-villager-pen-testing/
-
AI Penetration Testing Tools: How Villager Is Shaping the Next Wave of Offensive Security
Villager, an AI-powered pen testing tool, is reshaping cybersecurity with powerful automation”, and raising misuse concerns. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/cybersecurity/ai-penetration-testing-tools-how-villager-is-shaping-the-next-wave-of-offensive-security/
-
North Korean Hackers Weaponize ChatGPT in AI-Driven Phishing Attack
North Korea’s Kimsuky hackers used ChatGPT to forge government IDs in a phishing attack, marking a new era of AI-powered cyber warfare. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/north-korean-hackers-weaponize-chatgpt-in-ai-driven-phishing-attack/
-
Windows Users Hit by VenomRAT in AI-Driven RevengeHotels Attack
RevengeHotels, also known as TA558, has escalated its long-standing cybercrime campaign by incorporating artificial intelligence into its infection chains, deploying the potent VenomRAT malware against Windows users. Active since 2015, this threat actor has traditionally targeted hotel guests and travelers, stealing payment card data through phishing emails. Recent campaigns, however, demonstrate a marked shift: AI-generated…