Tag: ai
-
HackedGPT: Tenable deckt Sicherheitslücken in ChatGPT auf
Tenable empfiehlt Anbietern von KI-Lösungen, ihre Abwehrmaßnahmen gegen Prompt Injection zu verstärken, indem sie sicherstellen, dass Sicherheitsmechanismen wie url_safe wie vorgesehen funktionieren, und indem sie Browsing-, Such- und Speicherfunktionen isolieren, um kontextübergreifende Angriffe zu verhindern. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/hackedgpt-tenable-deckt-sicherheitsluecken-in-chatgpt-auf/a42677/
-
Cisco Finds Open-Weight AI Models Easy to Exploit in Long Chats
Cisco’s new research shows that open-weight AI models, while driving innovation, face serious security risks as multi-turn attacks, including conversational persistence, can bypass safeguards and expose data. First seen on hackread.com Jump to article: hackread.com/cisco-open-weight-ai-models-long-chat-exploit/
-
HackedGPT: Tenable deckt Sicherheitslücken in ChatGPT auf
Tenable empfiehlt Anbietern von KI-Lösungen, ihre Abwehrmaßnahmen gegen Prompt Injection zu verstärken, indem sie sicherstellen, dass Sicherheitsmechanismen wie url_safe wie vorgesehen funktionieren, und indem sie Browsing-, Such- und Speicherfunktionen isolieren, um kontextübergreifende Angriffe zu verhindern. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/hackedgpt-tenable-deckt-sicherheitsluecken-in-chatgpt-auf/a42677/
-
Cloud Security Automation: Using AI to Strengthen Defenses and Response
AI-driven automation is transforming cloud security by detecting anomalies in real time, and enabling intelligent threat response. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/cloud-security-automation-using-ai-to-strengthen-defenses-and-response/
-
AI Agents Rewriting Fraud Rules
The New Fraud Frontier: How AI Agents Are Rewriting the Rules Pop quiz: What percentage of your traffic is from agentic AI? If you answered “I don’t know,” you are not alone and you’re sitting on a major blind spot that’s both a risk and an opportunity. Even though agentic AI traffic today is… First…
-
Leaks auf Github: Top-KI-Unternehmen haben ihre Keys nicht im Griff
Forscher haben auf Github allerhand private Schlüssel, Tokens und weitere Anmeldedaten von einem Großteil der Forbes AI 50 entdeckt. First seen on golem.de Jump to article: www.golem.de/news/leaks-auf-github-viele-top-ki-unternehmen-haben-ihre-keys-nicht-im-griff-2511-202054.html
-
KI verändert die Sicherheitsarchitektur grundlegend – KI als Prüfstein für die IT-Sicherheit der Zukunft
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/ki-als-pruefstein-it-sicherheit-zukunft-a-311572d23dc632a452c536ae2e78809d/
-
KI verändert die Sicherheitsarchitektur grundlegend – KI als Prüfstein für die IT-Sicherheit der Zukunft
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/ki-als-pruefstein-it-sicherheit-zukunft-a-311572d23dc632a452c536ae2e78809d/
-
65% of Top AI Firms Found Exposing Verified API Keys and Tokens on GitHub
A comprehensive security analysis has uncovered a troubling reality: 65% of leading AI companies have leaked verified secrets on GitHub, exposing critical API keys, authentication tokens, and sensitive credentials that could compromise their entire organizations. Researchers examined 50 prominent AI companies from the Forbes AI 50 list and discovered that nearly two-thirds had exposed verified…
-
Verantwortungsvoller KI-Einsatz: Code of Conduct Demokratische KI; Governance und Abwägung gefordert
Man darf die Diskussion zu KI nicht Big Tech überlassen, das ist der Ansatz, der die Zivilgesellschaft bewogen hat, ein Zeichen zu setzen. Mehr als 75 Organisationen aus der deutschen Zivilgesellschaft haben den von D64 Zentrum für Digitalen Fortschritt … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/11/11/verantwortungsvoller-ki-einsatz-code-of-conduct-demokratische-ki-governance-und-abwaegung-gefordert/
-
Faster Than Real-Time: Why Your Security Fails and What to Do Next
Tags: access, ai, apple, attack, breach, business, ceo, cio, cloud, control, cybersecurity, data, defense, detection, dns, endpoint, fintech, framework, identity, infrastructure, Internet, iot, jobs, LLM, malware, network, nist, privacy, resilience, siem, soc, technology, threat, tool, vpn, zero-day, zero-trust“Security systems fail. When it fails, what do you do?” This critical question from Spire Connect’s Pankaj Sharma set the stage at Gitex 2025 for a conversation with Francois Driessen, the “Human Ambassador” of ADAMnetworks. His core message is blunt: in cybersecurity, even real-time is not fast enough. By the time a threat is detected,…
-
Faster Than Real-Time: Why Your Security Fails and What to Do Next
Tags: access, ai, apple, attack, breach, business, ceo, cio, cloud, control, cybersecurity, data, defense, detection, dns, endpoint, fintech, framework, identity, infrastructure, Internet, iot, jobs, LLM, malware, network, nist, privacy, resilience, siem, soc, technology, threat, tool, vpn, zero-day, zero-trust“Security systems fail. When it fails, what do you do?” This critical question from Spire Connect’s Pankaj Sharma set the stage at Gitex 2025 for a conversation with Francois Driessen, the “Human Ambassador” of ADAMnetworks. His core message is blunt: in cybersecurity, even real-time is not fast enough. By the time a threat is detected,…
-
How GlassWorm wormed its way back into developers’ code, and what it says about open source security
Tags: access, ai, attack, blockchain, ciso, control, credentials, crypto, cybersecurity, data, data-breach, endpoint, exploit, framework, github, google, infrastructure, law, malicious, malware, marketplace, monitoring, open-source, resilience, service, software, supply-chain, threat, tool, update, wormadhamu.history-in-sublime-merge (downloaded 4,000 times)ai-driven-dev.ai-driven-dev (downloaded 3,300 times)yasuyuky.transient-emacs (downloaded 2,400 times)All three GlassWorm extensions are “still literally invisible” in code editors, the researchers note. They are encoded in unprintable Unicode characters that look like blank space to the human eye, but execute as JavaScript.The attackers have posted new transactions to the Solana blockchain that outline updated…
-
How GlassWorm wormed its way back into developers’ code, and what it says about open source security
Tags: access, ai, attack, blockchain, ciso, control, credentials, crypto, cybersecurity, data, data-breach, endpoint, exploit, framework, github, google, infrastructure, law, malicious, malware, marketplace, monitoring, open-source, resilience, service, software, supply-chain, threat, tool, update, wormadhamu.history-in-sublime-merge (downloaded 4,000 times)ai-driven-dev.ai-driven-dev (downloaded 3,300 times)yasuyuky.transient-emacs (downloaded 2,400 times)All three GlassWorm extensions are “still literally invisible” in code editors, the researchers note. They are encoded in unprintable Unicode characters that look like blank space to the human eye, but execute as JavaScript.The attackers have posted new transactions to the Solana blockchain that outline updated…
-
Don’t get distracted by AI, focus on real cyber threats
While hackers are using artificial intelligence to optimise attacks, many of the most damaging breaches still rely on old-school methods, says a top security analyst from Google First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366634363/Google-Dont-get-distracted-by-AI-focus-on-real-cyber-threats
-
Don’t get distracted by AI, focus on real cyber threats
While hackers are using artificial intelligence to optimise attacks, many of the most damaging breaches still rely on old-school methods, says a top security analyst from Google First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366634363/Google-Dont-get-distracted-by-AI-focus-on-real-cyber-threats
-
Don’t get distracted by AI, focus on real cyber threats
While hackers are using artificial intelligence to optimise attacks, many of the most damaging breaches still rely on old-school methods, says a top security analyst from Google First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366634363/Google-Dont-get-distracted-by-AI-focus-on-real-cyber-threats
-
Effektive Absicherung der KI-Systeme: TÜV Rheinland publiziert Whitepaper
Tags: aiFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/effektivitaet-absicherung-ki-tuev-rheinland-whitepaper
-
Tenable Is a Leader in the First-Ever Gartner® Magic Quadrant for Exposure Assessment Platforms
Tags: advisory, ai, attack, business, cloud, control, cyber, cybersecurity, data-breach, exploit, gartner, guide, identity, risk, service, technology, threat, tool, vulnerability, vulnerability-managementOur customers are proving what exposure management can do. Thank you for trusting us to be part of your mission. Key takeaways Tenable believes our evolution of exposure management and our strong, mature partner ecosystem contributed to our position as a Leader in the 2025 Gartner® Magic Quadrant for Exposure Assessment Platforms. Tenable is positioned…
-
AI, Adaptability, Ease: What’s New in DataDome’s Q3 2025 Platform Updates
Discover DataDome’s Q3 2025 product & platform updates, including AI-driven fraud defense, adaptive protection, and new tools to control, monetize, and secure evolving AI traffic. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/ai-adaptability-ease-whats-new-in-datadomes-q3-2025-platform-updates/
-
AI, Adaptability, Ease: What’s New in DataDome’s Q3 2025 Platform Updates
Discover DataDome’s Q3 2025 product & platform updates, including AI-driven fraud defense, adaptive protection, and new tools to control, monetize, and secure evolving AI traffic. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/ai-adaptability-ease-whats-new-in-datadomes-q3-2025-platform-updates/
-
As AI enables bad actors, how are 3,000+ teams responding?
Breaking down trends in exposure management with insights from 3,000+ organizations and Intruder’s security experts First seen on theregister.com Jump to article: www.theregister.com/2025/11/10/ai_enables_bad_actors/
-
65% of Leading AI Companies Found With Verified Secrets Leaks
A new study has revealed 65% of top AI firms have leaked sensitive data on GitHub, risking $400bn in assets First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/leading-ai-companies-secret-leaks/
-
China-Aligned UTA0388 Uses AI Tools in Global Phishing Campaigns
Volexity has linked spear phishing operations to China-aligned UTA0388 in new campaigns using advanced tactics and LLMs First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/china-aligned-uta0388-ai-tools/
-
New Attacks Against Secure Enclaves
Encryption can protect data at rest and data in transit, but does nothing for data in use. What we have are secure enclaves. I’ve written about this before: Almost all cloud services have to perform some computation on our data. Even the simplest storage provider has code to copy bytes from an internal storage system…
-
New Attacks Against Secure Enclaves
Encryption can protect data at rest and data in transit, but does nothing for data in use. What we have are secure enclaves. I’ve written about this before: Almost all cloud services have to perform some computation on our data. Even the simplest storage provider has code to copy bytes from an internal storage system…
-
AI agents worsen IT’s capacity crunch: S&P Global
An infrastructure overhaul to support agentic systems is underway, bringing with it a new set of capacity demands and security considerations.; First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/AI-agent-infrastructure-enterprise-demand-SPGlobal-data/805099/
-
AI agents worsen IT’s capacity crunch: S&P Global
An infrastructure overhaul to support agentic systems is underway, bringing with it a new set of capacity demands and security considerations.; First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/AI-agent-infrastructure-enterprise-demand-SPGlobal-data/805099/
-
New Attacks Against Secure Enclaves
Encryption can protect data at rest and data in transit, but does nothing for data in use. What we have are secure enclaves. I’ve written about this before: Almost all cloud services have to perform some computation on our data. Even the simplest storage provider has code to copy bytes from an internal storage system…
-
Vibe-codierte Ransomware auf Microsoft Marketplace entdeckt
Tags: access, ai, control, github, infrastructure, malware, marketplace, microsoft, ransomware, tool, vulnerabilityForscher haben eine Visual- Studio- Code-Erweiterung mit Ransomware-Funktionen entdeckt.Der Sicherheitsspezialist Secure Annex stellte kürzlich fest, dass eine Schadsoftware namens ‘Ransomvibe” in Erweiterungen für den Quellcode-Editor Visual Studio Code eingebettet wurde. ‘Sobald die Erweiterung aktiviert ist, wird zunächst die Funktion zipUploadAndEcnrypt ausgeführt. Diese Funktion wendet alle für Ransomware und Erpressungssoftware typischen Techniken an”, heißt es im…