Tag: ai
-
The AI Security Dilemma: Navigating the High-Stakes World of Cloud AI
Tags: access, ai, attack, cloud, container, control, credentials, cve, data, data-breach, flaw, google, identity, infrastructure, intelligence, least-privilege, microsoft, risk, service, software, tool, training, vulnerability, vulnerability-managementAI presents an incredible opportunity for organizations even as it expands the attack surface in new and complex ways. For security leaders, the goal isn’t to stop AI adoption but to enable it securely. Artificial Intelligence is no longer on the horizon; it’s here, and it’s being built and deployed in the cloud at a…
-
MCP Protocol Bug Let Attackers Execute Code in Cursor
Cursor Patched Flaw Days After Disclosure, Says Check Point. Check Point researchers found a RCE flaw in Cursor, an AI-powered code editor, by manipulating a previously approved model context protocol configuration. Once a developer approved a configuration file for an MCP server, any future changes to that file could be executed without further prompts. First…
-
Lazarus Hackers Use Fake Camera/Microphone Alerts to Deploy PyLangGhost RAT
North Korean state-sponsored threat actors associated with the Lazarus Group, specifically the subgroup known as Famous Chollima, have evolved their tactics by deploying a new Python-based remote access trojan (RAT) dubbed PyLangGhost. This malware represents a reimplementation of the earlier GoLangGhost RAT, exhibiting code structures indicative of AI-assisted porting, including Go-like logic patterns and extensive…
-
Black Hat 2025: Security Researcher Unpacks Cybercrime’s Evolution”¦ and How AI Is Changing the Game
From prank viruses to profit-driven cybercrime, Mikko Hypponen explains how today’s malware is targeted, professional, and all about money. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-black-hat-2025-cybercrime-evolution-ai-mikko-hypponen/
-
Google Gemini AI Bot Hijacks Smart Homes, Turns Off the Lights
Using invisible prompts, the attacks demonstrate a physical risk that could soon become reality as the world increasingly becomes more interconnected with artificial intelligence. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/google-gemini-ai-bot-hijacks-smart-homes
-
Mistaken Identity? AI Agent Oversight Key To Success
The AI agent revolution and its promise of unprecedented productivity gains could hit major roadblocks if cybersecurity concerns aren’t dealt with, experts and industry executives told CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2025/mistaken-identity-ai-agent-oversight-key-to-success
-
Google agrees to pause AI workloads to protect the grid when power demand spikes
On hot summer days, air conditioning is rather more important than search summaries First seen on theregister.com Jump to article: www.theregister.com/2025/08/04/google_ai_datacenter_grid/
-
NVIDIA Takes Firm Stance Against Kill Switches Backdoors in AI Chips
The statement comes as both US and Chinese authorities probe the lucrative global AI chip business, which NVIDIA dominates. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-nvidia-ai-chips-backdoors-kill-switches/
-
Black Duck Announces Enhancements to AI Powered Application Security Assistant
Black Duck has unveiled Black Duck Assist, which enables developers to find and fix security and compliance issues in human and AI-generated code in real time. Black Duck Assist is now woven into the company’s Code Sight IDE plugin. These updates introduce automated scanning of AI-generated code and AI-powered remediation guidance, bringing continuous code protection…
-
OpenAI Bets on Open Models With GPT-OSS Launch
AI Powerhouse Releases Its First Public Model in 6 Years. OpenAI released its first open-weight reasoning models since GPT-2, unveiling gpt-oss-120b and gpt-oss-20b under the Apache 2.0 license. With performance approaching o-series benchmarks, the models are designed specifically for reasoning tasks. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/openai-bets-on-open-models-gpt-oss-launch-a-29136
-
DataDome TollBit Partner to Protect and Monetize AI traffic
Tags: aiDataDome and TollBit partner to help businesses protect content and monetize compliant AI traffic. Gain real-time protection, actionable insights, and new revenue from agentic AI. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/datadome-tollbit-partner-to-protect-and-monetize-ai-traffic/
-
Threat Actors Use GenAI to Launch Phishing Attacks Mimicking Government Websites
Threat actors are increasingly leveraging generative AI (GenAI) tools to craft highly convincing phishing websites that impersonate legitimate government portals. As highlighted by Zscaler ThreatLabz in their recent reports and blogs, the dual nature of GenAI empowering productivity for legitimate users while enabling cybercriminals has become a critical issue. These tools, such as DeepSite AI…
-
Nvidia patches critical Triton server bugs that threaten AI model security
This could matter to AI everywhere: Wiz researchers focused their analysis on Triton’s Python backend, citing its popularity and central role in the system. While it handles models written in Python, it also serves as a dependency for several other backendsmeaning models configured under different frameworks may still rely on it during parts of the…
-
Four Areas CISOs Must Assess Before Being AI Ready
Every CISO must assess their organization’s AI readiness from technology and talent to governance and compliance. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/four-areas-cisos-must-assess-before-being-ai-ready/
-
SentinelOne To Acquire AI Protection Startup Prompt Security
SentinelOne announced Tuesday it has reached a deal to acquire a startup focused on securing AI and agentic technologies, Prompt Security, in the company’s latest move to enable AI adoption. First seen on crn.com Jump to article: www.crn.com/news/security/2025/sentinelone-to-acquire-ai-protection-startup-prompt-security
-
Agenticgestütztes Risk-Operations-Center für autonomes Risk-Management
Qualys stellt mehrere neue Funktionen auf Basis von Agentic-AI innerhalb der Qualys-Plattform vor. Das neue AI-Framework führt einen Marktplatz für Cyber-Risk-AI-Agents ein, die in Echtzeit risikobasierte Einblicke über sämtliche Angriffsflächen hinweg liefern, priorisiert nach geschäftlicher Relevanz. Darüber hinaus reduziert die Lösung Sicherheitsrisiken und Betriebskosten, indem sie eigenständig mit hoher Geschwindigkeit, Skalierbarkeit und Präzision Schwachstellen behebt…
-
Threat Actors Exploit Open-Source Vulnerabilities to Spread Malicious Code
Tags: ai, cyber, data, exploit, malicious, malware, open-source, pypi, software, supply-chain, threat, vulnerabilityFortiGuard Labs has reported a sustained trend in the exploitation of open-source software (OSS) repositories for malware dissemination within supply chain ecosystems. As development workflows increasingly depend on third-party packages, adversaries are capitalizing on vulnerabilities in platforms like NPM and PyPI to inject malicious code, facilitate data exfiltration, and inflict broader damage. Leveraging proprietary AI-driven…
-
Firebox-Tabletop-Appliances für KMUs kombinieren intelligente Firewall-Sicherheit mit KI-gestützter Bedrohungserkennung
Watchguard Technologies präsentiert seine neueste Generation der Firewall-Tabletop-Appliances, die konkret an den Bedürfnissen kleiner und mittlerer Unternehmen ausgerichtet ist. Die Modelle der T-Serie bieten moderne Sicherheit, die sich durch Highspeed-Verbindungen und KI-gesteuerte Bedrohungsabwehr auszeichnet. Zudem sind Unternehmen damit in der Lage, selbst den Anforderungen wachsender Netzwerke jederzeit gerecht zu werden. Dabei spielt es keine Rolle,…
-
Qualys stellt seinen neuen Cyber Risk AI Agents vor
Durch die Einbettung von Agentic AI in das Enterprise TruRisk Management (ETM) erweitert Qualys seine Fähigkeiten zur risikozentrierten Automatisierung und ermöglicht eine schnellere, intelligentere Entscheidungsfindung. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/qualys-stellt-seinen-neuen-cyber-risk-ai-agents-vor/a41611/
-
Chaining NVIDIA’s Triton Server flaws exposes AI systems to remote takeover
New flaws in NVIDIA’s Triton Server let remote attackers take over systems via RCE, posing major risks to AI infrastructure. Newly revealed security flaws in NVIDIA’s Triton Inference Server for Windows and Linux could let remote, unauthenticated attackers fully take over vulnerable servers. According to Wiz Research team, chaining these vulnerabilities enables remote code execution…
-
Cloudflare Accuses AI Startup of ‘Stealth Crawling Behavior’ Across Millions of Sites
Cloudflare is accusing Perplexity of using stealth crawlers to bypass site restrictions, triggering fresh concerns over how AI firms access web content. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-cloudflare-accuses-perplexity-stealth-crawling-violations/
-
AI Fuels Record Number of Fraud Cases
Cifas noted a record number of filings in its National Fraud Database for the first half of 2025 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-fuels-record-number-of-fraud/
-
5 hard truths of a career in cybersecurity, and how to navigate them
Tags: access, ai, application-security, attack, awareness, best-practice, breach, business, cio, ciso, conference, control, cyber, cybersecurity, data-breach, finance, firewall, framework, gartner, identity, ISO-27001, jobs, mitigation, network, regulation, risk, risk-assessment, risk-management, skills, strategy, technology, threat, training, wafCybersecurity teams protect systems but neglect people: After all the effort it takes to break into cybersecurity, professionals often end up on teams that don’t feel welcoming or supportive.Jinan Budge, a research director at Forrester who focuses on enabling CISOs and other technical leaders, believes the way most cybersecurity career paths are structured plays a…
-
15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign
Cybersecurity researchers have lifted the veil on a widespread malicious campaign that’s targeting TikTok Shop users globally with an aim to steal credentials and distribute trojanized apps.”Threat actors are exploiting the official in-app e-commerce platform through a dual attack strategy that combines phishing and malware to target users,” CTM360 said. “The core tactic involves a…
-
Top cybersecurity M&A deals for 2025
Tags: 5G, access, ai, api, apple, application-security, attack, automation, awareness, banking, breach, business, ceo, cisco, cloud, compliance, control, crowdstrike, cyber, cybersecurity, data, ddos, defense, detection, edr, email, endpoint, finance, firewall, gitlab, government, group, ibm, identity, incident response, infrastructure, intelligence, leak, microsoft, mitigation, network, password, programming, risk, risk-management, saas, service, software, sophos, strategy, supply-chain, technology, threat, tool, training, vulnerability, waf, zero-trustPalo Alto Networks to buy CyberArk for $25B as identity security takes center stage July 30, 2025: Palo Alto Networks is making what could be its biggest bet yet by agreeing to buy Israeli identity security company CyberArk for around $25 billion. “We envision Identity Security becoming the next major pillar of our multi-platform strategy, complementing our leadership…
-
LegalPwn Attack Tricks AI Tools Like ChatGPT and Gemini into Running Malicious Code
Security researchers have discovered a new type of cyberattack that exploits how AI tools process legal text, successfully tricking popular language models into executing dangerous code. Cybersecurity firm Pangea has unveiled a sophisticated attack method called >>LegalPwn
-
Your employees uploaded over a gig of files to GenAI tools last quarter
In Q2 2025, Harmonic reviewed 1 million GenAI prompts and 20,000 uploaded files across more than 300 GenAI and AI-powered SaaS apps, and the findings confirm that sensitive … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/05/genai-sensitive-data-exposure/
-
Back to basics webinar: The ecosystem of CIS Security best practices
Generative AI models, multi-cloud strategies, Internet of Things devices, third-party suppliers, and a growing list of regulatory compliance obligations all require the same … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/05/cis-security-best-practices-ecosystem-webinar/