Collecting Cyber-News from over 60 sources

Tag: ai

AI Agents and APIs: Understand Complexities Today to Authenticate Tomorrow

May 29, 2025 11:55 AM

Tags: ai, api, authentication

The growth of AI agents puts the need for robust API authentication practices front and center, so today we’re highlighting two AI agent scenarios and how you could deal with their typical authentication challenges. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/ai-agents-and-apis-understand-complexities-today-to-authenticate-tomorrow/
Woodpecker: Red Teaming Tool Targets AI, Kubernetes, and API Vulnerabilities

May 29, 2025 10:55 AM

Tags: ai, api, cyber, cyberattack, hacker, kubernetes, open-source, RedTeam, tool, vulnerability

Operant AI has announced the release of Woodpecker, an open-source automated red teaming engine designed to make advanced security testing accessible to organizations of all sizes. Traditionally, red teaming”, simulated cyberattacks conducted by ethical hackers to uncover vulnerabilities”, has been a privilege reserved for large enterprises with significant security budgets. With Woodpecker, Operant AI aims…
Massive Botnet Targets ASUS Routers by Injecting Malicious SSH Keys

May 29, 2025 10:55 AM

Tags: access, ai, attack, authentication, botnet, cyber, cyberattack, data-breach, injection, Internet, malicious, router, tool, unauthorized, vulnerability

GreyNoise Research has publicly disclosed a sophisticated cyberattack campaign that has compromised over 9,000 ASUS routers worldwide. First detected by GreyNoise’s proprietary AI-powered analysis tool, Sift, on March 18, 2025, the campaign leverages a combination of brute-force attacks, authentication bypasses, and a known command injection vulnerability (CVE-2023-39780) to gain and maintain unauthorized access to internet-exposed…
AI is a Ticking Time Bomb for Your Data, Reveals New Report From Varonis

May 29, 2025 10:55 AM

Tags: ai, data

A new report from Varonis examines nearly 10 billion files and suggests that AI is a ticking time bomb for your data. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/ai-is-a-ticking-time-bomb-for-your-data-reveals-new-report-from-varonis/
Ex-Meta exec: Copyright consent obligation = end of AI biz

May 29, 2025 9:55 AM

Tags: ai

Nick Clegg, former politico and Zuckcorp policy Prez, seems confused, can Reg readers help him? First seen on theregister.com Jump to article: www.theregister.com/2025/05/27/nick_clegg_says_ai_firms/
New AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor.

May 29, 2025 9:55 AM

Tags: ai, botnet, network, router, tool

GreyNoise researchers warn of a new AyySSHush botnet compromised over 9,000 ASUS routers, adding a persistent SSH backdoor. GreyNoise discovered the AyySSHush botnet has hacked over 9,000 ASUS routers, adding a persistent SSH backdoor. >>Using an AI powered network traffic analysis tool we built called SIFT, GreyNoise has caught multiple anomalous network payloads with zero-effort that…
6 rising malware trends every security pro should know

May 29, 2025 8:55 AM

Tags: adobe, ai, antivirus, apple, attack, awareness, backdoor, business, captcha, cloud, corporate, cybercrime, data, defense, detection, encryption, endpoint, exploit, extortion, framework, group, hacking, incident response, infrastructure, intelligence, Internet, law, leak, macOS, malicious, malware, network, password, phishing, powershell, programming, pypi, ransom, ransomware, service, social-engineering, software, supply-chain, tactics, theft, threat, tool, update, vulnerability, worm

Malicious packages targeting developer environments: Threat actors are systematically compromising the software supply chain by embedding malicious code within legitimate development tools, libraries, and frameworks that organizations use to build applications.”These supply chain attacks exploit the trust between developers and package repositories,” Immersive’s McCarthy tells CSO. “Malicious packages often mimic legitimate ones while running harmful…
Nvidia CEO Huang Warns Export Bans Empower Chinese AI Firms

May 29, 2025 8:55 AM

Tags: ai, ceo, china, infrastructure, nvidia

Huang Says Rules Shut Nvidia Out of $50B China Market, Gives Rivals Long-Term Edge. CEO Jensen Huang says new U.S. chip restrictions on China forced Nvidia to write down $4.5 billion in AI inventory and will hurt American leadership in global infrastructure as Chinese firms gain momentum. The rules fuel China’s rise and jeopardize U.S.…
How CISOs can regain ground in the AI fraud war

May 29, 2025 7:55 AM

Tags: ai, ciso, defense, fraud

Fraudsters are winning the AI arms race, first-party fraud is rising, and siloed systems are holding back defenses, according to DataVisor. Their 2025 Fraud AML … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/29/ciso-ai-fraud-war/
CISOs prioritize AI-driven automation to optimize cybersecurity spending

May 29, 2025 7:55 AM

Tags: ai, automation, ciso, cybersecurity

Cybersecurity leaders and consultants identified AI-driven automation and cost optimization as top organizational priorities, according to Wipro. 30% of respondents are … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/29/ai-automation-investing/
Risk assessment vital when choosing an AI model, say experts

May 29, 2025 5:55 AM

Tags: ai, api, backdoor, breach, control, data, data-breach, finance, injection, LLM, mfa, network, password, risk, risk-assessment

Advice to CSOs: Lee said that CSOs should consider the following before approving any LLM:Training data: figure out where the model got its info. Random web grabs expose your secrets;Prompt history: if your questions stick around on their servers, they’ll turn up in the next breach bulletin;Credentials: stolen API keys and weak passwords keep attackers…
In The News – Locking Up Phones, Logging Into AI: Classrooms Navigate New Tech Amid Public Debate

May 29, 2025 12:55 AM

Tags: ai, phone

This article was originally published in Unite.AI on 05/14/25. School policies around phone use are changing”, and fast. In Ontario, Canada students are already being asked to keep their phones out of sight during class. Several European countries have taken steps in that direction, and now discussion is building in the U.S. as well. Lawmakers are pushing…
A Peek Behind the Claude Curtain

May 29, 2025 12:55 AM

Tags: ai, data-breach

Researcher Analyzes System Prompts to Show How New Claude Models Work. System-level instructions guiding Anthropic’s new Claude 4 models tell it to skip praise, avoid flattery and get to the point, said independent AI researcher Simon Willison, breaking down newly released and leaked system prompts for the Claude Opus 4 and Sonnet 4 models. First…
Inside IBM Agent Connect: A New Marketplace for Enterprise AI Agents

May 28, 2025 10:55 PM

Tags: ai, ibm, marketplace

First seen on scworld.com Jump to article: www.scworld.com/news/inside-ibm-agent-connect-a-new-marketplace-for-enterprise-ai-agents
Boomi World 2025 Reflections: Analysts on Boomi, MSPs and Agentic AI

May 28, 2025 10:55 PM

Tags: ai, msp

First seen on scworld.com Jump to article: www.scworld.com/news/boomi-world-2025-reflections-analysts-on-boomi-msps-and-agentic-ai
Marlink flags surge in AI-powered cyberattacks

May 28, 2025 10:55 PM

Tags: ai, cyberattack

First seen on scworld.com Jump to article: www.scworld.com/brief/marlink-flags-surge-in-ai-powered-cyberattacks
3 points missing from agentic AI conversations at RSAC

May 28, 2025 10:55 PM

Tags: ai

First seen on scworld.com Jump to article: www.scworld.com/perspective/3-points-missing-from-agentic-ai-conversations-at-rsac
Mandiant finds more than 30 fake AI websites spreading malware

May 28, 2025 10:55 PM

Tags: ai, malware, mandiant

First seen on scworld.com Jump to article: www.scworld.com/news/mandiant-finds-more-than-30-fake-ai-websites-spreading-malware
Nine Steps to Achieving AI Governance

May 28, 2025 10:55 PM

Tags: ai, governance

First seen on scworld.com Jump to article: www.scworld.com/perspective/nine-steps-to-achieving-ai-governance
Separating hype from reality: How cybercriminals are actually using AI

May 28, 2025 10:55 PM

Tags: ai, attack, automation, cyber, cyberattack, cybercrime, cybersecurity, data, defense, exploit, framework, group, incident response, malicious, mitre, strategy, technology, threat, vulnerability, zero-day

The evolution of AI: Preparing defenders for tomorrow’s threats: As security professionals chart their defensive strategies, we must consider how AI will reshape cybercrime in the coming years. We also need to anticipate the fundamental pivots attackers will make, and what this evolution means for our entire industry. AI will inevitably impact vulnerability discovery, enable…
Infostealer Attackers Deploy AI-Generated Videos on TikTok

May 28, 2025 9:55 PM

Tags: ai, attack, intelligence, malware, social-engineering, tool

Social Engineering Attacks Trick Victims Running Malware-Installation Scripts. Attackers are tapping TikTok to distribute videos, apparently generated using artificial intelligence tools, to trick victims into running scripts that install information-stealing malware, researchers warn. The campaign is the latest in a long line of schemes designed to distribute infostealers. First seen on govinfosecurity.com Jump to article:…
The Evolution of Software Development: From Machine Code to AI Orchestration

May 28, 2025 8:55 PM

Tags: ai, programming, software

Major tech companies now generate 30% of code with AI. Explore the dramatic shift from manual coding to AI orchestration”, and why the next 3 years will transform who can build software. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/the-evolution-of-software-development-from-machine-code-to-ai-orchestration/
Implementing Secure by Design Principles for AI

May 28, 2025 8:55 PM

Tags: ai, cybersecurity

Harnessing AI’s full transformative potential safely and securely requires more than an incremental enhancement of existing cybersecurity practices. A Secure by Design approach represents the best path forward. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/secure-design-principles-ai
Fake AI Video Tool Ads on Facebook, LinkedIn Spread Infostealers

May 28, 2025 7:55 PM

Tags: ai, defense, group, linkedin, malicious, mandiant, threat, tool

Mandiant Threat Defense uncovers a campaign where Vietnam-based group UNC6032 tricks users with malicious social media ads for… First seen on hackread.com Jump to article: hackread.com/fake-ai-video-tool-ads-facebook-linkedin-infostealers/
Check Point to Acquire Veriti to Transform Threat Exposure Management

May 28, 2025 7:55 PM

Tags: ai, attack, cybersecurity, mitigation, software, threat

Check Point Software has announced a definitive agreement to acquire Veriti Cybersecurity, the first fully automated, multi-vendor pre-emptive threat exposure and mitigation platform. The acquisition aims to respond to the uptick in AI-fuelled attacks facing organisations, as well as the increasing connectivity of IT environments. Founded in 2021, Veriti pioneered the Preemptive Exposure Management (PEM)…
Apollo MCP Server: Bridging AI Agents and GraphQL APIs

May 28, 2025 6:54 PM

Tags: ai, api

Discover Apollo GraphQL’s MCP Server, the gateway to seamless AI integration with existing APIs. Enhance your development process today! First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/apollo-mcp-server-bridging-ai-agents-and-graphql-apis/
Malware Hidden in AI Models on PyPI Targets Alibaba AI Labs Users

May 28, 2025 6:54 PM

Tags: ai, malware, pypi

ReversingLabs discovers new malware hidden inside AI/ML models on PyPI, targeting Alibaba AI Labs users. Learn how attackers… First seen on hackread.com Jump to article: hackread.com/malware-ai-models-pypi-targets-alibaba-ai-labs-users/
Zscaler Buys Red Canary to Elevate AI-Driven Threat Response

May 28, 2025 6:54 PM

Tags: ai, automation, cloud, detection, infrastructure, soc, threat

Red Canary Purchase Aims to Deliver Agentic AI-Powered Security Operations at Scale. Zscaler’s buy of Red Canary will unify its cloud-based security infrastructure with Red Canary’s MDR insights, giving rise to a next-gen SOC built on automation, AI, and rapid detection expertise. The integration will support a proactive SOC experience powered by AI workflows and…
Dark Partners cybercrime gang fuels large-scale crypto heists

May 28, 2025 6:54 PM

Tags: ai, attack, crypto, cybercrime, network, software, theft, threat, vpn

A sprawling network of fake AI, VPN, and crypto software download sites is being used by the “Dark Partner” threat actors to conduct a crypto theft attacks worldwide. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/dark-partners-cybercrime-gang-fuels-large-scale-crypto-heists/
Your Mobile Apps May Not Be as Secure as You Think”¦ FireTail Blog

May 28, 2025 6:54 PM

Tags: access, ai, android, api, authentication, banking, best-practice, cloud, control, cyber, cybersecurity, data, encryption, finance, leak, mobile, password, phone, risk, threat, vulnerability

May 28, 2025 – Lina Romero – Your Mobile Apps May Not Be as Secure as You Think”¦ Excerpt: Cybersecurity risks are too close for comfort. Recent data from the Global Mobile Threat Report reveals that our mobile phone applications are most likely exposing our data due to insecure practices such as API key hardcoding.…