Tag: ai
-
Hackers Turn Red Team AI Tool Into Citrix Exploit Engine
HexStrike-AI Connects LLMs to Over 150 Existing Security Tools. A red-team framework released for penetration testing has become a weapon in the wild, repurposed by hackers to accelerate exploitation of newly disclosed Citrix vulnerabilities. Check Point Research observed chatter suggesting n-day attacks may unfold in minutes, shrinking defender response time. First seen on govinfosecurity.com Jump…
-
Coding With AI Assistants: Faster Performance, Bigger Flaws
Robust Security Reviews of AI-Generated Code Required, Warns Study. Genies might grant magic wishes, but they inevitably come with consequences. Enter artificial intelligence coding assistants, which many developers say help them write code more quickly. New research shows that this productivity comes with a security cost, and must be mitigated. First seen on govinfosecurity.com Jump…
-
LLM06: Excessive Agency FireTail Blog
Tags: access, ai, application-security, best-practice, breach, data, finance, flaw, jobs, LLM, risk, vulnerabilitySep 05, 2025 – Lina Romero – In 2025, we are seeing an unprecedented rise in the volume and scale of AI attacks. Since AI is still a relatively new beast, developers and security teams alike are struggling to keep up with the changing landscape. The OWASP Top 10 Risks for LLMs is a great…
-
GPT-4o-mini Falls for Psychological Manipulation
Tags: aiInteresting experiment: To design their experiment, the University of Pennsylvania researchers tested 2024’s GPT-4o-mini model on two requests that it should ideally refuse: calling the user a jerk and giving directions for how to synthesize lidocaine. The researchers created experimental prompts for both requests using each of seven different persuasion techniques (examples of which are…
-
NYU team behind AI-powered malware dubbed ‘PromptLock’
Researchers at NYU’s Tandon School of Engineering confirmed they created the code as part of a project to illustrate potential harms of AI-powered malware. First seen on cyberscoop.com Jump to article: cyberscoop.com/ai-ransomware-promptlock-nyu-behind-code-discovered-by-security-researchers/
-
Marriott checks out AI agents amid technology transformation
The multinational hospitality giant is building a model-agnostic chassis featuring an agentic layer. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/marriott-international-AI-strategy-agentic-cloud-cybersecurity/759384/
-
Cybercriminals ‘Grok’ Their Way Past X’s Defenses to Spread Malware
Hackers exploit X’s Grok AI to spread malware via promoted ads, exposing millions to malicious links in a scheme researchers call “Grokking.” First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-grok-ai-malware-grokking/
-
Cybercriminals ‘Grok’ Their Way Past X’s Defenses to Spread Malware
Hackers exploit X’s Grok AI to spread malware via promoted ads, exposing millions to malicious links in a scheme researchers call “Grokking.” First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-grok-ai-malware-grokking/
-
Scammers Exploit Grok AI With Video Ad Scam to Push Malware on X
Researchers at Guardio Labs have uncovered a new >>Grokking
-
Scammers Exploit Grok AI With Video Ad Scam to Push Malware on X
Researchers at Guardio Labs have uncovered a new >>Grokking
-
Stealthy attack serves poisoned web pages only to AI agents
AI agents can be tricked into covertly performing malicious actions by websites that are hidden from regular users’ view, JFrog AI architect Shaked Zychlinski has found. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/05/ai-agents-prompt-injection-poisoned-web/
-
Sevii Agentic AI Warriors Augment SOCs with Machine-Speed Remediation
Sevii launched an autonomous defense remediation (ADR) platform, using agentic AI Warriors to cut response times and transform SOC operations. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/sevii-agentic-ai-warriors-march-out-of-stealth-to-augment-socs-with-machine-speed-remediation/
-
File security risks rise as insiders, malware, and AI challenges converge
Breaches tied to file access are happening often, and the costs add up quickly. Many organizations have faced multiple file-related incidents over the last two years, with … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/05/file-security-risks-challenges/
-
File security risks rise as insiders, malware, and AI challenges converge
Breaches tied to file access are happening often, and the costs add up quickly. Many organizations have faced multiple file-related incidents over the last two years, with … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/09/05/file-security-risks-challenges/
-
UK government trial of M365 Copilot finds no clear productivity boost
AI tech shows promise writing emails or summarizing meetings. Don’t bother with anything more complex First seen on theregister.com Jump to article: www.theregister.com/2025/09/04/m365_copilot_uk_government/
-
UK government trial of M365 Copilot finds no clear productivity boost
AI tech shows promise writing emails or summarizing meetings. Don’t bother with anything more complex First seen on theregister.com Jump to article: www.theregister.com/2025/09/04/m365_copilot_uk_government/
-
Identity Fabric Die wichtigste Voraussetzung für Agentic AI
Todd Thiemann, Principal Analyst der Enterprise Strategy Group, beschäftigte sich jüngst mit den beherrschen Themen rund um das »Identiverse 2025«. Zu den Hauptanliegen eines Sicherheitsexperten zählen die Risiken, die von Non-Human Identities ausgehen und solche, die auf Datenschutzverletzungen durch Large Language Models (LLMs) zurückzuführen sind. Ein Grund für die steigenden Risiken liegt laut Thiemann darin,……
-
KI-Kontrolle: Scharfe Kritik der Landesdatenschutzbehörden am BMDS
Tags: aiFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/ki-kontrolle-kritik-landesdatenschutzbehoerden-bmds
-
Boffins build automated Android bug hunting system
AI agent system said to have found more than 100 zero-day flaws in production apps First seen on theregister.com Jump to article: www.theregister.com/2025/09/04/boffins_build_automated_android_bug_hunting/
-
Another Risk From Agentic AI Payments – First-Party Fraud
ACI Worldwide’s Cleber Martins on Why Banks Need to Lead on AI Identity Governance. The rise of agentic commerce is forcing the financial sector to reconsider traditional fraud controls. While automated transactions may follow all technical authorizations, agentic AI tools still lack an understanding of user intent. That disconnect could lead to a surge in…
-
Airline Disruption Recovery, How Agentic Identity Keeps Travel on Track
When flights get delayed, passengers want answers fast: rebooking, hotel vouchers, refund options. Human agents can’t scale to meet this surge, but AI agents can. The challenge? Identity. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/airline-disruption-recovery-how-agentic-identity-keeps-travel-on-track/
-
RetailThe AI Shopping Concierge, How Retailers Can Safely Orchestrate Identity Across Agentic Workflows
Retail is moving fast into agentic AI. Imagine a shopping concierge agent that compares prices, applies loyalty discounts, and completes a purchase for you, all in seconds. This sounds like a dream for customers, but for retailers, it’s a nightmare if identity isn’t handled properly. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/retailthe-ai-shopping-concierge-how-retailers-can-safely-orchestrate-identity-across-agentic-workflows/
-
How Financial Services Can Use Agentic Identity to Stop Fraud and Streamline Loan Approvals
In financial services, every transaction is built on trust. When an AI agent acts on behalf of a customer, checking credit scores, verifying KYC documents, or submitting a loan application, identity is the control plane. Without it, the system collapses into risk, fraud, and compliance failures. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/09/how-financial-services-can-use-agentic-identity-to-stop-fraud-and-streamline-loan-approvals/
-
Model Namespace Reuse Flaw Hijacks AI Models on Google and Microsoft Platforms
A new security vulnerability called ‘Model Namespace Reuse’ allows attackers to hijack AI models on Google, Microsoft, and… First seen on hackread.com Jump to article: hackread.com/model-namespace-reuse-flaw-ai-models-google-microsoft/
-
Identity-First Security: Mitigating the Cloud’s Greatest Risk Vector
Tags: access, ai, attack, best-practice, breach, business, cloud, credentials, data, defense, exploit, framework, google, iam, identity, infrastructure, least-privilege, microsoft, phishing, ransomware, risk, service, strategy, threat, vulnerabilityCompromised credentials are now the leading cause of cloud breaches, making identity your most critical attack surface. A new IDC white paper explores why this shift is happening and where traditional defenses fall short. Read on to learn how Tenable’s identity-first approach turns this risk into your strongest defense. Hack the user, own the cloud.…
-
AI can help track an ever-growing body of vulnerabilities, CISA official says
Artificial intelligence was a recurring theme among federal leaders who spoke at a GDIT event held Thursday. First seen on cyberscoop.com Jump to article: cyberscoop.com/ai-can-help-track-an-ever-growing-body-of-vulnerabilities-cisa-official-says/
-
From summer camp to grind season
Tags: aiBill takes thoughtful look at the transition from summer camp to grind season, explores the importance of mental health and reflects on AI psychiatry. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/from-summer-camp-to-grind-season/
-
Q2 2025 Bot Attack Trends: AI Scraping, Scalper Bots, and Travel Fraud
Kasada’s Q2 2025 Threat Report breaks down the top bot attack trends: from AI scraping bots hammering infrastructure, to scalper bots flipping hype-driven inventory, to stolen travel accounts surging in underground value. Learn how adversaries made money last quarter and what your team can do to stop them. First seen on securityboulevard.com Jump to article:…