Tag: ai
-
Surprise departure of Oracle security chief as company shifts focus to AI
Full disclosure: In fairness, Oracle was far from alone in being slow to adopt the idea that software vendors needed to turn patching into a core security function while acknowledging that vulnerability hunters were allies in disguise rather than enemies.Nevertheless, occasional missteps have continued up to the present, most recently in the evasive and confused…
-
Why Agentic AI Is the Next Enterprise Frontier – Part 1
How Autonomous AI Systems Are Moving Beyond Hype and Why CIOs Can’t Ignore Them. Agentic AI is moving from concept to capability, bridging the gap between reactive tools and enterprise-scale autonomy. With the stack maturing fast, CIOs face a choice: lead the shift or risk being left behind. First seen on govinfosecurity.com Jump to article:…
-
AI Agents Access Everything, Fall to Zero-Click Exploit
Zenity CTO Michael Bargury joins the Black Hat USA 2025 News Desk to discuss research on a dangerous exploit, how generative AI technology has grown arms and legs, and what that means for cyber risk. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/ai-agents-access-everything-zero-click-exploit
-
DataDome Enhances Visibility of AI Agents LLM Crawlers in Your Dashboard
DataDome’s enhanced dashboard gives businesses the visibility and control they need over rapidly growing AI agent and LLM crawler traffic, helping protect revenue, SEO, and security. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/datadome-enhances-visibility-of-ai-agents-llm-crawlers-in-your-dashboard/
-
Execs use responsible AI to drive growth, prevent risks
Business leaders want to prevent further fallout as nearly all have experienced at least one problematic incident tied to AI, according to an Infosys survey. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/responsible-AI-drive-growth-prevent-risks-security-incidents/758034/
-
Execs use responsible AI to drive growth, prevent risks
Business leaders want to prevent further fallout as nearly all have experienced at least one problematic incident tied to AI, according to an Infosys survey. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/responsible-AI-drive-growth-prevent-risks-security-incidents/758034/
-
Google unveils new AI and cloud security capabilities at Security Summit
Google used its Cloud Security Summit 2025 today to introduce a wide range of updates aimed at securing AI innovation and strengthening enterprise defenses. The announcements … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/19/google-cloud-security-summit-2025-updates/
-
Google unveils new AI and cloud security capabilities at Security Summit
Google used its Cloud Security Summit 2025 today to introduce a wide range of updates aimed at securing AI innovation and strengthening enterprise defenses. The announcements … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/19/google-cloud-security-summit-2025-updates/
-
Businesses focus on AI, cloud, despite cyber defense oversights
Recent surveys found enterprises are enthusiastically adopting AI, even as they neglect basic cybersecurity measures. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/proactive-cyber-defense-artificial-intelligence-unisys/757968/
-
Webinar: Why AI and SaaS are now the same attack surface
The lines between SaaS and AI are vanishing. AI agents are now first-class citizens in your SaaS universe: accessing sensitive data, triggering workflows, and introducing new … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/19/vorlon-webinar-ai-and-saas-attack-surface/
-
Weaponized Copyright Documents Used by Threat Actors to Target Key Employees with Noodlophile Stealer
The Noodlophile Stealer malware, initially uncovered in campaigns leveraging fake AI video generation platforms, has evolved into a targeted spear-phishing operation that weaponizes copyright infringement notices to infiltrate enterprises with substantial Facebook presences. This updated variant, active for over a year, shifts from broad social media lures to highly personalized emails impersonating legal entities, incorporating…
-
KI-Agenten breiten sich aus aber Governance-Lücken gefährden Vertrauen der Verbraucher
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/ki-agenten-ausbreitung-governance-luecken-gefahr-verbraucher-vertrauen
-
Flaw in Too-Trusting Lenovo Chatbot Could Have Let Hackers In
Using a single, carefully-crafted prompt, Cybernews researchers were able to manipulate Lenovo’s customer service AI chatbot, Lena, into giving up customer agent session cookies, which opened up the possibility of multiple lines of attack, from dropping backdoors and stealing to laterally moving through corporate networks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/flaw-in-too-trusting-lenovo-chatbot-could-have-let-hackers-in/
-
KI-generierter Code: Armis Labs meldet versteckte Sicherheitsrisiken
Tags: aiFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/ki-generiert-code-armis-labs-meldung-versteckt-sicherheitsrisiken
-
Check Point analysiert die Zero-Click-Schwachstelle in Microsoft-365-Copilot namens Echolink
Check Point Software Technologies warnt vor einer kürzlich entdeckten Zero-Click-Sicherheitslücke in Microsoft-365-Copilot. Die als bezeichnete Schwachstelle markiert den Beginn einer neuen Angriffsära, da sie weder einen Klick, noch einen Download oder jegliche Nutzerinteraktion erfordert, um sensible Unternehmensdaten abzugreifen. Die Lücke wurde in Microsofts KI-gestützter Arbeitsumgebung ausgenutzt, um Angreifern zu ermöglichen, verdeckte Prompts in geteilten […]…
-
Ist MCP das USB-C für KI-Agenten?
Tags: aiAgentic-AI gilt als nächste Evolutionsstufe künstlicher Intelligenz doch in der Praxis fehlt es bislang an einem verbindenden technischen Fundament. Mit dem Model-Context-Protocol (MCP) etabliert sich nun ein offener Standard, der genau das leistet: Er macht spezialisierte KI-Agenten interoperabel, skalierbar und einsatzbereit für reale Unternehmensprozesse. Warum MCP das USB-C der KI werden könnte und […] First…
-
Secure AI Use Without the Blind Spots
Tags: aiWhy every company needs a clear, enforceable AI policy, now. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/secure-ai-use-without-blind-spots
-
Cooking with Code: A DevOps Kitchen Secured by Thales
Tags: access, ai, api, cctv, cloud, compliance, control, data, encryption, GDPR, identity, infrastructure, injection, least-privilege, malicious, mfa, military, monitoring, PCI, service, software, strategy, tool, waf, zero-day, zero-trustCooking with Code: A DevOps Kitchen Secured by Thales madhav Tue, 08/19/2025 – 05:13 In today’s hyperconnected digital world, deploying applications is a lot like running a high-performance, Michelin-star kitchen. You need the right setup, a disciplined process, and seamless coordination, where every tool, role, and task moves in harmony, executed flawlessly. Speed and precision…
-
Microsoft Defender AI Can Detect Plaintext Credentials in Active Directory
Tags: ai, attack, credentials, cyber, cybersecurity, data-breach, intelligence, microsoft, vulnerabilityMicrosoft has unveiled a new AI-powered security capability that addresses one of cybersecurity’s most persistent vulnerabilities: plaintext credentials stored in Active Directory systems. The enhanced Microsoft Defender feature uses sophisticated artificial intelligence to detect exposed credentials with unprecedented precision, helping organizations eliminate a critical attack vector that has plagued enterprise environments. Widespread Credential Exposure Problem…
-
DRUID AI wird als Challenger im Gartner® Magic Quadrant™ für Conversational AI Platforms 2025 positioniert
Tags: aiDRUID AI betreut über 300 Kunden und 200 Partner in Nordamerika, EMEA und APAC in Branchen wie Banken, Versicherungen, Gesundheitswesen, Hochschulbildung, Einzelhandel und öffentliche Verwaltung. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/druid-ai-wird-als-challenger-im-gartner-magic-quadrant-fuer-conversational-ai-platforms-2025-positioniert/a41736/
-
The Hidden Risks of External AI Models and How Businesses can Mitigate Them
As AI adoption accelerates, businesses face hidden risks from third-party models like ChatGPT and Claude, including data leakage and malicious data infiltration. By implementing corporate AI tools and educating employees, companies can harness generative AI’s benefits while safeguarding sensitive data, compliance, and trust. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/the-hidden-risks-of-external-ai-models-and-how-businesses-can-mitigate-them/
-
Browser wars are back, predicts Palo Alto, thanks to AI
CEO says if you buy all your infosec stuff from him, life under assault from bots will be less painful First seen on theregister.com Jump to article: www.theregister.com/2025/08/19/palo_alto_networks_q4_fy25/
-
What happens when penetration testing goes virtual and gets an AI coach
Cybersecurity training often struggles to match the complexity of threats. A new approach combining digital twins and LLMs aims to close that gap. Researchers from the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/19/digital-twins-cybersecurity-training/
-
Wie CISOs von der Blockchain profitieren
Tags: access, ai, api, blockchain, ciso, compliance, framework, governance, identity, LLM, network, saas, sbom, software, tool, zero-trustDie Blockchain macht Trust verifizierbar.Sicherheitsvorfälle gehen nicht nur auf eine Kompromittierung der internen Systeme zurück. Sie hängen regelmäßig auch damit zusammen, dass:Privileged-Access-Protokolle fehlen,SaaS-Audit-Trails nicht vertrauenswürdig sind, oderLieferketten kompromittiert werden.Die Blockchain kann dabei helfen, diese realen Probleme zu lösen und Manipulationssicherheit, Datenintegrität und Trust zu gewährleisten. Im Kern ist Blockchain ein System von Datensätzen, die über…
-
Blackhat 2025 Test AI before you trust
At Blackhat, there wasn’t a space of 10 feet not festooned with vapid promises of AI curing basically everything in security. During an AI summit here, multiple tens of would-be AI security contenders, sometimes with little else but a PhD and a burning pile of cash they’d drummed up, said they had all but… First…
-
Palo Alto Networks Q4 2025 Earnings: CEO Arora Credits Platform Strategy With Growth, Says To Watch Enterprise Browsers
Palo Alto Networks CEO Nikesh Arora talked about growth in security, enterprise browsers and more as adoption of cloud and AI positions the cybersecurity vendor well. First seen on crn.com Jump to article: www.crn.com/news/security/palo-alto-networks-q4-2025-earnings-ceo-arora-credits-platform-strategy-with-growth-says-to-watch-enterprise-browsers-for-ai-security
-
GenAI FOMO has spurred businesses to light nearly $40 billion on fire
MIT NANDA study finds only 5 percent of organizations using AI tools in production at scale First seen on theregister.com Jump to article: www.theregister.com/2025/08/18/generative_ai_zero_return_95_percent/
-
Securing Non-Human Identities and Workloads in the Generative-AI Era, TrustFour’s Role
Generative-AI systems are a dense web of non-human identities (NHIs)”, APIs, services, agents, schedulers, model endpoints, data pipelines”, talking to each other over Transport Layer Security (TLS). Attackers now target these NHIs to move laterally, hijack tools, exfiltrate models/data, and impersonate trusted workloads. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/securing-non-human-identities-and-workloads-in-the-generative-ai-era-trustfours-role/