Tag: ai
-
Amnesty: AI surveillance risks ‘supercharging’ US deportations
Amnesty International says AI-driven platforms from Palantir and Babel Street are being used by US authorities to track migrants and revoke visas, raising fears of unlawful detentions and mass deportations First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366631297/Amnesty-AI-surveillance-risks-supercharging-US-deportations
-
North Korea’s Kimsuky Group Uses AI-Generated Military IDs in New Attack
North Korea’s Kimsuky hackers use AI-generated fake military IDs in a new phishing campaign, GSC warns, marking a… First seen on hackread.com Jump to article: hackread.com/north-korea-kimsuky-group-ai-generated-military-ids/
-
‘Liesthe-Loop’ Attack Defeats AI Coding Agents
Researchers convince Anthropic’s AI-assisted coding tool to engage in dangerous behavior by lying to it, paving the way for a supply chain attack. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/-lies-in-the-loop-attack-ai-coding-agents
-
Checkmarx Surfaces Liesthe-Middle Attack to Compromise AI Tools
Checkmarx today published a technique it has uncovered that poisons artificial intelligence (AI) agents models in a way that convinces them to tell end users that certain activities and behaviors are safe when in fact they are high risk. Darren Meyer, security research advocate at Checkmarx Zero, a research arm of the company, said this..…
-
Wenn ‘kleine” Zahlen durch die Decke gehen Die unterschätzten Auswirkungen von KI
Tags: aiDa generative AI zunehmend Teil unseres Alltags wird, befinden wir uns in einer KI-Phase, die sich durch außerordentliche Fähigkeiten und enormen Konsum auszeichnet. Was anfangs auf einer theoretischen Ebene stattgefunden hat, ist inzwischen messbar und zwar bis zur kleinsten Einheit. Ein Kommentar von Jeff Wittich, Chief Product Officer bei Ampere. Aktuelle Untersuchungen von Mistral-AI […]…
-
SecurityScorecard Buys HyperComply to Expand Risk Platform
HyperComply’s AI Automation Reduces Vendor RFP Questionnaire Work by 92%. SecurityScorecard is acquiring HyperComply to streamline third-party risk assessments with AI that automates most security questionnaire responses. The deal supports SecurityScorecard’s shift from ratings-only to a full solutions platform for mitigating supply chain risk. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/securityscorecard-buys-hypercomply-to-expand-risk-platform-a-29440
-
Scattered Spider’s ‘retirement’ announcement: genuine exit or elaborate smokescreen?
Tags: ai, breach, crowdstrike, cybersecurity, data, data-breach, disinformation, google, group, hacking, infrastructure, international, law, mandiant, password, ransomware, tactics, threatLaw enforcement pressure: real but limited impact: The letter explicitly acknowledged the mounting international pressure that supposedly drove their decision.”We want to share a thought for the eight people that have been raided or arrested in relations to these campaigns, Scattered Spider and/or ShinyHunters groups since beginning on April 2024 and thereafter 2025, and especially…
-
Scattered Spider’s ‘retirement’ announcement: genuine exit or elaborate smokescreen?
Tags: ai, breach, crowdstrike, cybersecurity, data, data-breach, disinformation, google, group, hacking, infrastructure, international, law, mandiant, password, ransomware, tactics, threatLaw enforcement pressure: real but limited impact: The letter explicitly acknowledged the mounting international pressure that supposedly drove their decision.”We want to share a thought for the eight people that have been raided or arrested in relations to these campaigns, Scattered Spider and/or ShinyHunters groups since beginning on April 2024 and thereafter 2025, and especially…
-
Nork snoops whip up fake South Korean military ID with help from ChatGPT
Kimsuky gang proves that with the right wording, you can turn generative AI into a counterfeit factory First seen on theregister.com Jump to article: www.theregister.com/2025/09/15/north_korea_chatgpt_fake_id/
-
âš¡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero-Days & More
In a world where threats are persistent, the modern CISO’s real job isn’t just to secure technology”, it’s to preserve institutional trust and ensure business continuity.This week, we saw a clear pattern: adversaries are targeting the complex relationships that hold businesses together, from supply chains to strategic partnerships. With new regulations and the rise of…
-
AI-Forged Military IDs Used in North Korean Phishing Attack
Genians observed the Kimsuky group impersonate a defense institution in a spear-phishing attack, leveraging ChatGPT to create fake military ID cards First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-military-ids-north-korea/
-
Red AI Range: Advanced AI Tool for Identifying and Mitigating Security Flaws
Red AI Range (RAR) offers a turnkey platform for AI red teaming and vulnerability assessment, enabling security professionals to simulate realistic attack scenarios, uncover weaknesses, and deploy fixes all within a controlled, containerized environment. By consolidating diverse AI vulnerabilities and testing tools under one roof, RAR streamlines security workflows and accelerates time-to-remediation. RAR eliminates the…
-
CVE-2025-58434: Critical FlowiseAI Flaw Enables Full Account Takeover
A severe security vulnerability has been discovered in FlowiseAI, an open-source AI workflow automation tool, exposing users to the risk of complete account compromise. Tracked as CVE-2025-58434, this vulnerability affects both the cloud-hosted version of FlowiseAI and self-hosted deployments that expose the relevant API endpoints. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cve-2025-58434/
-
Hackers using generative AI “ChatGPT” to evade anti-virus defenses
The Kimsuky APT group has begun leveraging generative AI ChatGPT to craft deepfake South Korean military agency ID cards. Phishing lures deliver batch files and AutoIt scripts designed to evade anti-virus scanning through sophisticated obfuscation. Organizations must deploy endpoint detection and response (EDR) solutions to unmask hidden scripts and secure endpoints. On July 17, 2025,…
-
Datenschutz im KI Wie Unternehmen personenbezogene Daten aus KI-Modellen löschen können
First seen on security-insider.de Jump to article: www.security-insider.de/ki-daten-loeschen-verlernen-a-863c6269eda4caba2a8870690fde3049/
-
Your SOC is the parachute, Will it open?
Tags: ai, automation, breach, cyber, cybersecurity, data, detection, exploit, finance, resilience, risk, soc, threat, tool, updateComplexity is the enemy of resilience: I recently had a fascinating conversation with a friend in Cambridge. We were debating what’s wrong with cybersecurity, and he said something that stuck with me: “The answer is simple if it’s done very well.”It echoes a point I explored in a collaborative essay with Abbas Kudrati: Cyber Security…
-
AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns
Tags: ai, china, cybercrime, framework, intelligence, malicious, penetration-testing, pypi, RedTeam, toolA new artificial intelligence (AI)-powered penetration testing tool linked to a China-based company has attracted nearly 11,000 downloads on the Python Package Index (PyPI) repository, raising concerns that it could be repurposed by cybercriminals for malicious purposes.Dubbed Villager, the framework is assessed to be the work of Cyberspike, which has positioned the tools as a…
-
Phishing-Trends und Bedrohungsanalyse – Wie Phishing durch Kommerzialisierung und KI zur globalen Gefahr wird
First seen on security-insider.de Jump to article: www.security-insider.de/phishing-industrialisierung-ki-trends-2025-a-9dbf0f8f63c7a9b96f7468c486f898b1/
-
Most enterprise AI use is invisible to security teams
Most enterprise AI activity is happening without the knowledge of IT and security teams. According to Lanai, 89% of AI use inside organizations goes unseen, creating risks … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/15/lanai-enterprise-ai-visibility-tools/
-
FlowiseAI Password Reset Token Vulnerability Enables Account Takeover
Acritical vulnerabilityin FlowiseAI has been discovered that allows attackers to take over user accounts with minimal effort. The flaw, tracked as CVE-2025-58434, affects both cloud-hosted and self-hosted FlowiseAI deployments, posing significant risks to organizations using this AI workflow automation platform. CVE Number Affected Product Vulnerability Type CVSS 3.1 Score CVE-2025-58434 FlowiseAI (npm package flowise) Unauthenticated Password…
-
Zehn Karrierekiller für CISOs
CISOs müssen sich anpassen und weiterentwickeln. Nur so können sie selbst und ihre arbeitgebenden Unternehmen florieren.CISOs tragen große Verantwortung und können daher mit Fehlverhalten ein Unternehmen sowie ihren eigenen Lebenslauf nachhaltig beeinträchtigen. Illegales oder unethisches Verhalten führt in der Regel zur Kündigung.Es gibt jedoch noch viele andere Fehltritte, die den beruflichen Aufstieg behindern können. Einige…
-
Role of AI in Detecting and Preventing Financial Fraud
The banking sector has always been one of the prime targets for hackers due to the highly sensitive nature of its operations. It holds not only vast amounts of money but also valuable customer data, making it a lucrative target. As users continue to embrace the digital economy, cybersecurity in banking has become a top……
-
AI Pentesting Tool ‘Villager’ Merges Kali Linux with DeepSeek AI for Automated Security Attacks
Security researchers at Straiker’s AI Research (STAR) team have uncovered Villager, an AI-native penetration testing framework developed by Chinese-based group Cyberspike that has already accumulated over 10,000 downloads within two months of its release on the official Python Package Index (PyPI). The tool combines Kali Linux toolsets with DeepSeek AI models to fully automate penetration…
-
Find Out How You Can Defend Your Organisation Against AI Driven Attacks
KnowBe4, the world renowned cybersecurity platform is hosting its annual CyberSecure Leeds event on Wednesday 24th September as part of the Leeds Digital Festival. This exciting event will focus on the rise of AI-driven cyber threats and how organisations can stay protected by focusing on what matters most, its employees. So “when AI strikes, humans…
-
The IT Revolution You’ve Been Waiting For: Lumos Unveils Game-Changing Agentic AI Innovations for H2 2025
If you’re an IT or Security leader, you know the struggle. Your technology stack looks like a jigsaw puzzle with missing pieces. Manual processes eat up your team’s valuable time. Budget pressures keep mounting while security threats lurk in the shadows of your SaaS ecosystem. Sound familiar? You’re not alone. Modern IT departments are drowning…
-
Safer Conversational AI for Cybersecurity: The BIX Approach
Here’s a scenario security teams increasingly face. A user”, or an attacker pretending to be one”, types something like: This is how many prompt injection attempts begin. The phrase looks harmless, but it’s a red flag: the user is telling the AI to forget its built”‘in rules. What follows is often hidden inside a structured…
-
Datenabflüsse verhindern in acht einfachen Schritten
Vielen Unternehmen fällt es schwer, die Kontrolle über ihre Daten zu behalten, besonders seit Mitarbeiter vermehrt remote arbeiten und verschiedenste Cloud-Services und KI-Tools nutzen. Data Loss Prevention (DLP) kann den Abfluss sensibler Informationen verhindern, doch die Einführung gilt als komplex und zeitraubend. Ein Sicherheitsspezialist erklärt, wie sich DLP-Projekte reibungslos durchführen lassen. Die Datenmengen in… First…
-
How Wesco cut through the noise and reimagined risk management
Tags: ai, application-security, automation, awareness, business, conference, container, control, data, defense, detection, exploit, github, intelligence, kubernetes, microsoft, mitigation, risk, risk-management, software, strategy, threat, tool, vulnerability, zero-dayProactive defense: Real-time threat intelligence feeds allow Wesco to spot and neutralize vulnerabilities before they escalate.Improved awareness: Developers and security teams have clearer visibility into zero-day threats and can act faster.Application security posture enhancement: A “security champions program” ensures accountability doesn’t sit only with the security team but across development and executive teams, too.AI-driven risk…