Tag: ai
-
Kommentar von Markus Obser, handz.on GmbH – KI-basierte Cyberangriffe Bedrohungen und Gegenmaßnahmen
First seen on security-insider.de Jump to article: www.security-insider.de/effektive-it-security-ki-im-kampf-gegen-cyberkriminalitaet-a-f3c791412621303d5c599aae0bb6fe0b/
-
Neuroadaptives Feedback Learning: Wie pBCI das Training von KI-Modellen revolutioniert
Trainingsprozesse werden deutlich beschleunigt und die Qualität der Ergebnisse steigt. Denn die KI erhält in Echtzeit Rückmeldung darüber, wie Menschen auf ihre Ausgaben reagieren schneller, präziser und vielschichtiger, als es bisherige Verfahren erlauben. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/neuroadaptives-feedback-learning-wie-pbci-das-training-von-ki-modellen-revolutioniert/a41818/
-
UNC6395 targets Salesloft in Drift OAuth token theft campaign
Hackers breached Salesloft to steal OAuth/refresh tokens for Drift AI chat; GTIG and Mandiant link the campaign to threat actor UNC6395. Google Threat Intelligence Group and Mandiant researchers investigate a large-scale data theft campaign carried out to hack the sales automation platform Salesloft to steal OAuth and refresh tokens associated with the Drift artificial intelligence (AI) chat…
-
Cloudflare führt Application Confidence Scores für KI-Anwendungen ein
Die Confidence Scores sollen künftig nicht nur in der Cloudflare Application Library frei verfügbar sein, sondern auch direkt in Produkte wie Cloudflare Gateway und Access integriert werden. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/cloudflare-fuehrt-application-confidence-scores-fuer-ki-anwendungen-ein/a41816/
-
Why Traditional Zero-Trust Breaks Down with Agentic Identities
As AI agents become the new digital workforce, traditional zero-trust models fall short. Enterprises face an Access-Trust Gap that demands new runtime governance. Agentic Identity and Security Platforms (AISP) provide dynamic controls to secure autonomous agents, prevent over-permissioning, and ensure compliance in an agent-driven future. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/why-traditional-zero-trust-breaks-down-with-agentic-identities/
-
AI Agents in Browsers Light on Cybersecurity, Bypasses Controls
Companies looking to benefit from agentic browsers pause: The services can tap into a user’s online accounts and automate tasks, but can expose organizational data and systems to a myriad of threats. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/ai-agentic-browsers-light-cybersecurity-bypass-controls
-
Critical Flaws in Base44 Exposed Sensitive Data and Allowed Account Takeovers
Our research uncovered multiple critical vulnerabilities in Base44, an AI-powered platform that lets you turn any idea into a fully functional custom app. These flaws ranged from an open redirect that leaked access tokens, to stored cross-site scripting (XSS), insecure authentication design, sensitive data leakage, and client-side-only enforcement of premium features. Together, they represented a……
-
Cybersicherheit mit KI: Hybride SOC-Modelle gegen Cyberbedrohungen
Künstliche Intelligenz (KI) birgt großes Potenzial für die Cybersicherheit in Unternehmen. Insbesondere im Security Operation Center (SOC) kann KI Prozesse optimieren, Analysten entlasten und Bedrohungen frühzeitig erkennen. Das gelingt jedoch nur in Synergie mit menschlichem Know-how und umfassender Cybersecurity-Erfahrung. KI zeigt sich in der Cybersicherheit als echtes Janusgesicht. Einerseits steigt durch Deepfakes, KI-gestütztes Phishing… First…
-
ScamAgent shows how AI could power the next wave of scam calls
Scam calls have long been a problem for consumers and enterprises, but a new study suggests they may soon get an upgrade. Instead of a human scammer on the other end of the … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/28/scamagent-ai-threats-scam-calls/
-
Where security, DevOps, and data science finally meet on AI strategy
AI infrastructure is expensive, complex, and often caught between competing priorities. On one side, security teams want strong isolation and boundaries. On the other, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/28/andrew-hillier-densify-kubernetes-ai-optimization/
-
Someone Created the First AI-Powered Ransomware Using OpenAI’s gpt-oss:20b Model
Cybersecurity company ESET has disclosed that it discovered an artificial intelligence (AI)-powered ransomware variant codenamed PromptLock.Written in Golang, the newly identified strain uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts in real-time. The open-weight language model was released by OpenAI earlier this month.”PromptLock First seen on thehackernews.com…
-
Can AI make threat intelligence easier? One platform thinks so
When analysts at RH-ISAC found themselves spending 10 hours a week just collecting threat intelligence, they knew their process wasn’t sustainable. They were manually tracking … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/28/feedly-threat-intelligence/
-
How CISOs are balancing risk, pressure and board expectations
AI has moved to the top of the CISO agenda. Three in five CISOs see generative AI as a security risk, with many worried about sensitive data leaking through public tools. At … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/28/proofpoint-2025-voice-of-the-ciso-report/
-
Anthropic detects the inevitable: genAI-only attacks, no humans involved
Tags: ai, attack, business, ciso, control, cybercrime, cybersecurity, defense, dns, infrastructure, injection, intelligence, malicious, malware, open-source, openai, RedTeam, threat, tool, warfarenot find.”There is potentially a lot of this activity we’re not seeing. Anthropic being open about their platform being used for malicious activities is significant, and OpenAI has recently shared the same as well. But will others open up about what is already likely happening?” Brunkard asked. “Or maybe they haven’t shared because they don’t…
-
Keeper Security Launches KeeperAI
Keeper Security has today unveiled KeeperAI, a new agentic AI feature for its KeeperPAM® platform. KeeperAI enables real-time session monitoring and analysis, automated threat classification and instant response to combat cyber attacks and suspicious behaviour customisable to meet an organisation’s exact specifications. Cyberattacks are getting faster, more widespread, and increasingly more automated with AI, making The…
-
KnowBe4 Report Reveals Global Financial Sector Faces Unprecedented Cyber Threat Surge
Tags: ai, attack, credentials, cyber, cybersecurity, finance, risk, risk-management, supply-chain, theft, threat, vulnerabilityKnowBe4, the human risk management cybersecurity platform, has released its latest research paper >>Financial Sector Threats Report,
-
First AI-Powered Ransomware PromptLock Targets Windows, Linux and macOS
ESET has identified PromptLock, the first AI-powered ransomware, using OpenAI models to generate scripts that target Windows, Linux… First seen on hackread.com Jump to article: hackread.com/first-ai-promptlock-ransomware-windows-linux-macos/
-
Anthropic AI Used to Automate Data Extortion Campaign
The company said the threat actor abused its Claude Code service to an unprecedented degree, automating reconnaissance, intrusions, and credential harvesting. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/anthropic-ai-automate-data-extortion-campaign
-
The Career Delta: Navigating AI, Cybersecurity and Change
Concerns About Enterprise AI Are Opening New Opportunities for Problem-Solvers Some organizations are hesitant about implementing artificial intelligence tools in their enterprises because of accuracy, security and privacy concerns. That hesitation creates opportunities for professionals who can bridge the gap between technical potential and practical deployment. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/blogs/career-delta-navigating-ai-cybersecurity-change-p-3930
-
Experimental PromptLock ransomware uses AI to encrypt, steal data
Threat researchers discovered the first AI-powered ransomware, called PromptLock, that uses Lua scripts to steal and encrypt data on Windows, macOS, and Linux systems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/experimental-promptlock-ransomware-uses-ai-to-encrypt-steal-data/
-
TDL001 – Cybersecurity Explained: Privacy, Threats, and the Future – Chester Wisniewski
Tags: access, ai, attack, backdoor, breach, business, ciso, computer, country, crime, crimes, cyber, cybercrime, cybersecurity, data-breach, defense, detection, edr, email, finance, firewall, gartner, government, guide, hacker, hacking, Hardware, infosec, Internet, jobs, linkedin, mail, malicious, microsoft, military, monitoring, network, password, phishing, phone, privacy, programming, ransomware, risk, russia, scam, skills, software, sophos, spam, sql, strategy, switch, technology, threat, update, virus, vulnerability, wifi, windowsSummary “The Defenders Log” Episode 1 features host David Redekop and guest Chet Wisniewski discussing the dynamic world of cybersecurity. Wisniewski, with decades of experience, traces his journey from early BBS and phone network exploration to becoming a cybersecurity expert. They delve into the evolution of hacking, the emergence of profitable cybercrime like email spam,…
-
Nx NPM packages poisoned in AI-assisted supply chain attack
Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon First seen on theregister.com Jump to article: www.theregister.com/2025/08/27/nx_npm_supply_chain_attack/
-
Retail Cybersecurity in the AI Era
Threat actors now use AI for scaling organized retail crime and to make bot detection more difficult. How can defenders use AI to respond? Jackie Deloplaine of RH-ISAC and Derek Dykens of Splunk share insight and optimism on the use of AI to detect and combat ORC. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/retail-cybersecurity-in-ai-era-i-5490
-
Someone Created First AI-Powered Ransomware Using OpenAI’s gpt-oss:20b Model
Cybersecurity company ESET has disclosed that it discovered an artificial intelligence (AI)-powered ransomware variant codenamed PromptLock.Written in Golang, the newly identified strain uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts in real-time. The open-weight language model was released by OpenAI earlier this month.”PromptLock First seen on thehackernews.com…
-
Anthropic Disrupts AI-Powered Cyberattacks Automating Theft and Extortion Across Critical Sectors
Anthropic on Wednesday revealed that it disrupted a sophisticated operation that weaponized its artificial intelligence (AI)-powered chatbot Claude to conduct large-scale theft and extortion of personal data in July 2025.”The actor targeted at least 17 distinct organizations, including in healthcare, the emergency services, and government, and religious institutions,” the company said. “ First seen on…
-
Safety-critical industries wary about using AI for cybersecurity
Finance, tech and professional services are among the sectors with the widest adoption of AI-based security tools, according to a new report. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/artificial-intelligence-cybersecurity-tools-business-adoption-survey-arctic-wolf/758698/
-
Fachkräftemangel bedroht Cybersicherheit
Um die Cybersicherheit in Unternehmen zu stärken, fehlt es derzeit nach wie vor an Fachkräften. Ein aktueller Bericht von Accenture besagt, dass lediglich jedes dritte Unternehmen (34 Prozent) über eine ausgereifte Cyberstrategie verfügt. Noch weniger nur 13 Prozent besitzen demnach die fortschrittlichen Cyberfähigkeiten, um KI-gesteuerte Bedrohungen abzuwehren. ‘Die überwiegende Mehrheit bleibt ungeschützt, unvorbereitet und läuft…
-
Defiant Broadcom calls for tech to go back where it belongs: On-premises
Expands VMware Cloud Foundation with AI freebie, new security and storage bits First seen on theregister.com Jump to article: www.theregister.com/2025/08/26/vmware_explore_vcf_evolution/