Tag: ai
-
China Investigates NVIDIA’s H20 Chips for Surveillance Risks
NVIDIA has been called in by Chinese regulators over claims that its H20 AI chip poses security risks, putting billions in potential sales at stake. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-china-investigates-nvidia-h20-chips-backdoor-security-risks/
-
IBM Report: Shadow AI and Poor Governance Linked to Costlier Breaches in 2025
Only 34% of organizations with AI governance audit for misuse, IBM’s 2025 breach report warns. Lack of oversight is raising risks and costs. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ai-breach-risks-rise-as-governance-lags/
-
The $30M Cybersecurity AI, And Why Experts Say It Could Fail Spectacularly
Prophet Security has raised $30 million to deploy autonomous AI defenders. But experts warn that fully autonomous security operations are a dangerous myth that could leave companies more vulnerable than ever. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-30m-ai-promises-to-fix-cybersecurity/
-
Europe’s General-Purpose AI Rulebook: What’s Covered Which Tech Giants Will Sign It
The EU’s General-Purpose AI Code of Practice is intended to guide AI developers in complying with the EU AI Act. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-eu-ai-code/
-
AI Turns Panda Image Into ‘New Breed of Persistent Malware’
AI-assisted malware named Koske is hidden inside panda images, silently hijacking Linux machines for crypto mining while evading detection. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ai-malware-linux-panda-images/
-
Malicious AI-generated npm package hits Solana users
AI-generated npm package @kodane/patch-manager drained Solana wallets; 1,500+ downloads before takedown on July 28, 2025. AI-generated npm package @kodane/patch-manager was flagged for hiding malicious software to drain Solana wallets. The package was uploaded on July 28, 2025, and it was downloaded more than 1,500 times before takedown. >>The package @kodane/patch-manager, is a sophisticated cryptocurrency wallet…
-
Safe Raises $70M Series C to Scale Cyber Risk Management
New Funding, Platform Expansion Aim for Predictive, Autonomous Threat Defense. Safe’s $70 million Series C will fund expanded capabilities across its cyber risk quantification, exposure management and third-party oversight tools. The company says its agentic AI vision cyber AGI will transform how enterprises manage and mitigate cyberthreats. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/safe-raises-70m-series-c-to-scale-cyber-risk-management-a-29109
-
Noma Raised $100M to Expand Agentic AI Security Platform
Red-Hot Startup Noma Security to Deepen Protection for AI Models and Agents. With agentic AI deployments accelerating, Noma Security’s $100 million Series B will fuel development of risk management and runtime protection features. CEO Niv Braun said demand for securing agentic AI has surged among Fortune 500 firms and healthcare and financial institutions. First seen…
-
Black Hat 2025: Latest news and insights
Tags: access, ai, api, attack, ciso, cloud, conference, crowdstrike, cvss, cyber, cybersecurity, data, defense, email, exploit, finance, firmware, flaw, group, hacker, hacking, identity, Internet, LLM, malicious, malware, reverse-engineering, sap, service, threat, tool, training, update, usa, vulnerability, windowsBlack Hat USAAugust 2-7, 2025Las Vegas, NVBlack Hat USA 2025 returns to the Mandalay Bay Convention Center in Las Vegas on August 2-7. The annual event is a perennial magnet for cybersecurity professionals, researchers, vendors and othersThe week kicks off on August 2 with four days of cybersecurity training courses. The courses cover a range…
-
BSidesSF 2025: GenAI Application Security: Not Just Prompt Injection
Creator/Author/Presenter: Ahmed Abugharbia Our deep appreciation to Security BSides – San Francisco and the Creators/Authors/Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView / AMC Metreon – certainly a venue like no other; and via the organization’s YouTube channel. Additionally, the organization is welcoming…
-
Cursor’s AI coding agent morphed ‘into local shell’ with one-line prompt attack
The flaw, disclosed a month after it was patched, provided an attacker with remote code execution privileges by poisoning the data ingested by the model. First seen on cyberscoop.com Jump to article: cyberscoop.com/cursor-ai-prompt-injection-attack-remote-code-privileges-aimlabs/
-
AI Still Writing Vulnerable Code
GenAI Chooses Insecure Code Nearly Half the Time, Veracode Finds. There’s been little improvement in how well AI models handle core security decisions, says a report from application security company Veracode. Large language models introduce vulnerabilities in nearly half of test cases when asked to complete secure code tasks, it found. First seen on govinfosecurity.com…
-
Cursor AI Code Editor Fixed Flaw Allowing Attackers to Run Commands via Prompt Injection
Cybersecurity researchers have disclosed a now-patched, high-severity security flaw in Cursor, a popular artificial intelligence (AI) code editor, that could result in remote code execution.The vulnerability, tracked as CVE-2025-54135 (CVSS score: 8.6), has been addressed in version 1.3 released on July 29, 2025. It has been codenamed CurXecute by Aim”¯Labs, which previously disclosed EchoLeak. First…
-
How RAG Models Work in AI-Based Vulnerability Scanner
AI-powered vulnerability scanners are increasingly using Retrieval-Augmented Generation (RAG) models to improve the detection of security issues in infrastructure. RAG is a technique that combines large language models (LLMs) with external knowledge sources, enabling an AI to retrieve up-to-date, domain-specific information and utilize it to generate more accurate and context-aware results. In the cybersecurity domain,……
-
AI Agents Can Hack Smart Contracts on Autopilot
AI Tools Can Steal Crypto Autonomously, Even From Audited Code. Armed with just a smart contract address, researchers developed an autonomous artificial intelligence tool that can scan for vulnerabilities, write working exploits in the Solidity blockchain programming language and siphon funds. It behaves more like a human hacker, said its co-creator. First seen on govinfosecurity.com…
-
ISC2 Launches New Security Certificate for AI Expertise
Tags: aiISC2 is launching a 6-course certification program to address the growing demand for AI security expertise. Courses cover topics such as AI fundamentals, ethics, and risks. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-careers/isc2-launches-security-certificate-ai-expertise
-
Koske Marks a Significant Step in AI-Created Malware: Aqua Security
Aqua Security detected “Koske,” a cryptomining malware that brings malicious code closer to being as good or better than malware created by humans and includes indicators that it was developed with the use of a large language model. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/koske-marks-a-significant-step-in-ai-created-malware-aqua-security/
-
Securing agentic identities focus of Palo Alto’s CyberArk buy
Palo Alto Networks is entering the identity security space with a multibillion-dollar acquisition, and plans to address growing concerns around protecting identities associated with AI agents First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366628304/Securing-agentic-identities-focus-of-Palo-Altos-CyberArk-buy
-
LLMs’ AI-Generated Code Remains Wildly Insecure
Security debt ahoy: only about half of the code that the latest large language models (LLMs) create is cybersecure, and more and more of it is being created all the time. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/llms-ai-generated-code-wildly-insecure
-
Comp AI secures $2.6M pre-seed to disrupt SOC 2 market
San Francisco, California, 1st August 2025, CyberNewsWire First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/comp-ai-secures-2-6m-pre-seed-to-disrupt-soc-2-market/
-
Comp AI secures $2.6M pre-seed to disrupt SOC 2 market
San Francisco, California, 1st August 2025, CyberNewsWire First seen on hackread.com Jump to article: hackread.com/comp-ai-secures-2-6m-pre-seed-to-disrupt-soc-2-market/
-
AI-powered Cursor IDE vulnerable to prompt-injection attacks
A vulnerability that researchers call CurXecute is present in almost all versions of the AI-powered code editor Cursor, and can be exploited to execute remote code with developer privileges. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ai-powered-cursor-ide-vulnerable-to-prompt-injection-attacks/
-
What Makes an AI Startup Fundable – From a VC Who Knows
Investor Umesh Padval on Platform Power, Scaling Fast and Global AI Plays. Q2 2025 saw AI dominate global VC funding, grabbing $47.5 billion of the $94.6 billion raised. AI Investor Umesh Padval breaks down what makes AI infrastructure startups worth betting on – from platform depth and speed to regional ecosystems and exit timing. First…
-
AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown
Cybersecurity researchers have flagged a malicious npm package that was generated using artificial intelligence (AI) and concealed a cryptocurrency wallet drainer.The package, @kodane/patch-manager, claims to offer “advanced license validation and registry optimization utilities for high-performance Node.js applications.” It was uploaded to npm by a user named “Kodane” on July 28, 2025. The First seen on…
-
CloudReport 2025 Das neue Fundament der Cloud-Sicherheit steht auf drei Säulen
Sysdig hat seinen aktuellen Cloud-Defense-Report 2025 veröffentlicht. Der Bericht enthält Erkenntnisse und Prognosen über die entscheidende Rolle von KI, Open-Source und Transparenz durch Runtime-Insights (Laufzeit-Analysen) im Kontext aktueller Cloud-Bedrohungen. Die Datengrundlage stammt aus einer sorgfältigen und methodisch fundierten Analyse von Millionen von Cloud-Konten und Kubernetes-Containern, die Sysdig-Kunden täglich betreiben und sichern. Die repräsentative Stichprobe umfasst…
-
Search Engines Are Indexing ChatGPT Chats, Here’s What Our OSINT Found
A significant privacy breach has emerged in the artificial intelligence landscape, as ChatGPT shared conversations are being indexed by major search engines, effectively transforming private exchanges into publicly discoverable content accessible to millions of users worldwide. This discovery has exposed thousands of supposedly confidential conversations, ranging from personal mental health discussions to sensitive business information.…
-
SIEMs: Dying a Slow Death or Poised for AI Rebirth?
The SIEM market is at a pivotal point as XDR platforms and generative AI shake up the security analytics space. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-analytics/siems-dying-slow-death-ai-rebirth
-
You Are What You Eat: Why Your AI Security Tools Are Only as Strong as the Data You Feed Them
Just as triathletes know that peak performance requires more than expensive gear, cybersecurity teams are discovering that AI success depends less on the tools they deploy and more on the data that powers themThe junk food problem in cybersecurityImagine a triathlete who spares no expense on equipment—carbon fiber bikes, hydrodynamic wetsuits, precision GPS watches—but fuels…
-
Spotlight report: How AI is reshaping IT
Tags: aiaria-label=”Embed of AUGUST SPOTLIGHT 01.”>AUGUST SPOTLIGHT 01Download First seen on us.resources.csoonline.com Jump to article: https://us.resources.csoonline.com/resources/form