Tag: ai
-
DARPA: Closing the Open Source Security Gap With AI
DARPA’s Kathleen Fisher discusses the AI Cyber Challenge at DEF CON 33, and the results that proved how automation can help patch vulnerabilities at scale. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/darpa-closing-open-source-security-gap-ai
-
Microsoft 365 Adds New Feature for Admins to Manage Link Creation Policies
Microsoft announced on August 20, 2025, a significant enhancement to its Microsoft 365 administrative capabilities with the introduction of new tenant-level controls for managing org-wide sharing links for user-built Copilot agents. This feature, scheduled for general availability in mid-September 2025, represents a critical step forward in enterprise governance for AI-powered collaboration tools. Enhanced Administrative Control…
-
Why AI Agents and MCP Servers Just Became a CISO’s Most Urgent Priority
Over the last year, I’ve spent countless hours with CISOs, CTOs, and security architects talking about a new wave of technology that’s changing the game faster than anything we’ve seen before: Agentic AI and Model Context Protocol (MCP) servers. If you think AI is still in the “cool demos and pilot projects” stage, think again.…
-
Aikido Security Buys AI Code Startup Trag to Outpace Rivals
Trag’s Developer-Centric Tools Help Aikido Slash Time to Market by 12 Months. Aikido Security acquired Trag, an AI-native code review startup, to bring repository-wide review capabilities to its platform. The acquisition accelerates delivery of new features, such as logic risk detection and English-language rule writing, aimed at beating legacy rivals. First seen on govinfosecurity.com Jump…
-
Comprehensive MCP Security Checklist: Protecting Your AI-Powered Infrastructure
With innovation comes risk. As organizations race to build AI-first infrastructure, security is struggling to keep pace. Multi-Agentic Systems those built on Large Language Models (LLMs) and Multi-Component Protocols (MCP) – bring immense potential, but also novel vulnerabilities that traditional tools weren’t designed to handle. At Wallarm, we’re closely following emerging guidance around these […]…
-
Lenovo-Chatbot-Lücke wirft Schlaglicht auf KI-Sicherheitsrisiken
Über eine Schwachstelle in Lenovos Chatbot für den Kundensupport ist es Forschern gelungen, Schadcode einzuschleusen.Der Chatbot ‘Lena” von Lenovo basiert auf GPT-4 von OpenAI und wird für den Kundensupport verwendet. Sicherheitsforscher von Cybernews fanden heraus, dass das KI-Tool anfällig für Cross-Site-Scripting-Angriffe (XSS) war. Die Experten haben eine Schwachstelle entdeckt, über die sie schädliche HTML-Inhalte generieren…
-
AI crawlers and fetchers are blowing up websites, with Meta and OpenAI the worst offenders
One fetcher bot seen smacking a website with 39,000 requests per minute First seen on theregister.com Jump to article: www.theregister.com/2025/08/21/ai_crawler_traffic/
-
“PromptFix” Attacks Could Supercharge Agentic AI Threats
Guardio reveals a new AI take on ClickFix dubbed “PromptFix” First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/promptfix-attacks-supercharge/
-
Check Point veröffentlicht Harmony SASE MCP Server
Tags: aiDie neue Lösung schlägt eine Brücke zwischen Harmony SASE und den alltäglichen KI-Anwendungen von Unternehmen. Auf diese Weise können die Unternehmenssicherheit und die Netzwerker schnell detaillierte Informationen erlangen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-veroeffentlicht-harmony-sase-mcp-server/a41755/
-
Risiken für Künstliche Intelligenz – Data Poisoning die schleichende Gefahr für KI und Gesellschaft
First seen on security-insider.de Jump to article: www.security-insider.de/sicherung-ki-integritaet-gegen-data-poisoning-angriffe-a-490726bce2180a411a7d1a397bf9a7d3/
-
Datenleck bei Grok: Hunderttausende private KI-Chats im Netz
Elon Musks Chatbot Grok macht Nutzergespräche über Google auffindbar – darunter Anleitungen für Drogen und Bomben. First seen on golem.de Jump to article: www.golem.de/news/datenleck-bei-grok-hunderttausende-private-ki-chats-im-netz-2508-199380.html
-
PromptFix Exploit Forces AI Browsers to Execute Hidden Malicious Commands
Cybersecurity researchers have uncovered critical vulnerabilities in AI-powered browsers that allow attackers to manipulate artificial intelligence agents into executing malicious commands without user knowledge, introducing what experts are calling a new era of >>Scamlexity
-
CISOs need to think about risks before rushing into AI
Organizations are increasing investments in cloud, AI, and emerging technologies, but their infrastructure and security strategies often lag behind. A recent Unisys survey of … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/21/cloud-ai-security-readiness-2025/
-
AI To Handle 60% of SOC Work By 2028. It Had Better Be Robust.
If you’re trying to separate real AI-SOC capability from hype, you’ll love this: we’re making the 2025 AI SOC Market Landscape report available as a download. Produced by Software Analyst Cyber Research (SACR), it’s the most comprehensive snapshot of this emerging category. It features 13 vendors, architectural guidance, risk frameworks, implementation roadmaps, and a capabilities……
-
What is an AI Bill of Materials (AI BOM)?
Tags: aiLearn how to create and automate an AI BOM. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/what-is-an-ai-bill-of-materials-ai-bom/
-
Phishing in 2025: Smarter Threats, Smarter Defense
ManagedMethods recently hosted a webinar on one of the most pressing issues in K12 cybersecurity: phishing. While schools have been targets for years, 2025 feels different. Attackers are evolving faster than ever, and traditional email security filters are falling behind. The upside? AI-powered defenses are emerging to give districts a fighting chance. Here’s a recap…
-
Gemini AI Vulnerable to Calendar-Based Hack: What is Google’s Mitigation Approach?
Hidden prompts in Google Calendar events can trick Gemini AI into executing malicious commands via indirect prompt injection. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-google-gemini-indirect-prompt-injection-attack/
-
US Reportedly Hid Trackers in Shipments to Monitor AI Chips Diverted to China
Trackers were placed in the packaging and sometimes inside servers from Dell and Super Micro, according to Reuters. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-us-tracking-shipments-us-chips-china/
-
Fix AI Agent Mistakes With Rubrik’s Agent Rewind
Rubrik’s new Agent Rewind tool can trace, audit, and safely reverse AI agent mistakes, boosting enterprise control and AI resilience. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-fix-ai-agent-mistakes-rubrik-agent-rewind/
-
ZScaler nutzt Kunden-Logs zum AI-Training
Nächster Sündenfall im Bereich AI-Training. Der US-Anbieter ZScaler ist gerade “aufgefallen”, weil er die 500.000.000.000 täglichen logs auf Kundensystemen zum Training seiner AI-Systeme verwendet. Für ZScaler ist kein Problem erkennbar, Sicherheitsforscher halten es für eine Schnapsidee. Zscaler ist eine amerikanische Cloud-Sicherheitsfirma … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/08/21/zscaler-nutzt-kunden-logs-zum-ai-training/
-
AI website builder Lovable increasingly abused for malicious activity
Cybercriminals are increasingly abusing the AI-powered Lovable website creation and hosting platform to generate phishing pages, malware-dropping portals, and various fraudulent websites. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ai-website-builder-lovable-increasingly-abused-for-malicious-activity/
-
Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE
Move along, nothing to see here First seen on theregister.com Jump to article: www.theregister.com/2025/08/20/amazon_quietly_fixed_q_developer_flaws/
-
Anthropic Tests Safeguard for AI ‘Model Welfare’
Claude Models May Shut Down Harmful Chats in Some Edge Cases. Anthropic introduced a safeguard to its Claude artificial intelligence platform that allows certain models to end conversations in cases of persistently harmful or abusive interactions. The company said it’s doing so not to protect human users, but as a way to mitigate risks to…
-
BSidesSF 2025: Threat Modeling Meets Model Training: Web App Security Skills For AI
Creator, Author and Presenter: Breanne Boland Our deep appreciation to Security BSides – San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView / AMC Metreon – certainly a venue like no other; and via the organization’s YouTube…
-
The Future of Pentesting: Can AI Replace Human Expertise? ⎥ Jyoti Raval
Discover insights from The Elephant in AppSec episode with Jyoti Raval First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/the-future-of-pentesting-can-ai-replace-human-expertise-%e2%8e%a5-jyoti-raval/
-
BSidesSF 2025: Threat Modeling Meets Model Training: Web App Security Skills For AI
Creator, Author and Presenter: Breanne Boland Our deep appreciation to Security BSides – San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView / AMC Metreon – certainly a venue like no other; and via the organization’s YouTube…
-
Google Unveils Enhanced Features to Empower Defenders and Strengthen AI Security
Google Cloud has announced a suite of advanced security enhancements at the 2025 Security Summit, aimed at fortifying AI ecosystems and leveraging artificial intelligence to elevate organizational defenses. These updates focus on proactive vulnerability detection, automated threat intelligence processing, and workload optimization for security teams. Central to the announcements is the expansion of Security Command…