Tag: ai
-
AI is becoming a core tool in cybercrime, Anthropic warns
A new report from Anthropic shows how criminals are using AI to actively run parts of their operations. The findings suggest that AI is now embedded across the full attack … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/27/anthropic-ai-powered-cybercrime/
-
AI Security Threat OneFlip Could Make Medical Devices, Self-Driving Cars Vulnerable
OneFlip could cause self-driving cars to crash, facial recognition systems to fail, and biometric ID authenticators to shut down. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-oneflip-ai-security-threat/
-
NVIDIA NeMo AI Curator Vulnerability Allows Code Execution and Privilege Escalation
NVIDIA released a security bulletin for NVIDIA® NeMo Curator addressing a high-severity vulnerability (CVE-2025-23307) that affects all prior versions of the Curator software. The flaw, rooted in improper handling of user-supplied files, allows a maliciously crafted file to be processed by NeMo Curator, leading to code injection and arbitrary code execution. Successful exploitation can result…
-
AI-Powered Ransomware Has Arrived With ‘PromptLock’
Researchers raise the alarm that a new, rapidly evolving ransomware strain uses an OpenAI model to render and execute malicious code in real time, ushering in a new era of cyberattacks against enterprises. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/ai-powered-ransomware-promptlock
-
The Era of AI-Generated Ransomware Has Arrived
Cybercriminals are increasingly using generative AI tools to fuel their attacks, with new research finding instances of AI being used to develop ransomware. First seen on wired.com Jump to article: www.wired.com/story/the-era-of-ai-generated-ransomware-has-arrived/
-
Gefahr von innen: Wie Mitarbeiter durch KI zum größten Sicherheitsrisiko werden
Tags: aiFirst seen on t3n.de Jump to article: t3n.de/news/gefahr-von-innen-wie-mitarbeiter-durch-ki-zum-groessten-sicherheitsrisiko-werden-1704151/
-
AI-Powered CIAM in Retail: The Next Frontier of Customer Identity
AI-powered CIAM is heralding a new era for customer identity and access management in the retail industry. By blending the strengths of machine learning with th First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/ai-powered-ciam-in-retail-the-next-frontier-of-customer-identity-2/
-
AI-Powered CIAM in Retail: The Next Frontier of Customer Identity
AI-powered CIAM is heralding a new era for customer identity and access management in the retail industry. By blending the strengths of machine learning with th First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/ai-powered-ciam-in-retail-the-next-frontier-of-customer-identity-2/
-
The 5 Golden Rules of Safe AI Adoption
Employees are experimenting with AI at record speed. They are drafting emails, analyzing data, and transforming the workplace. The problem is not the pace of AI adoption, but the lack of control and safeguards in place.For CISOs and security leaders like you, the challenge is clear: you don’t want to slow AI adoption down, but…
-
ESET warns of PromptLock, the first AI-driven ransomware
ESET found PromptLock, the first AI-driven ransomware, using OpenAI’s gpt-oss:20b via Ollama to generate and run malicious Lua scripts. In a series of messages published on X, ESET Research announced the discovery of the first known AI-powered ransomware, named PromptLock. The PromptLock malware uses the gpt-oss:20b model from OpenAI locally via the Ollama API to…
-
Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data
A widespread data theft campaign has allowed hackers to breach sales automation platform Salesloft to steal OAuth and refresh tokens associated with the Drift artificial intelligence (AI) chat agent.The activity, assessed to be opportunistic in nature, has been attributed to a threat actor tracked by Google Threat Intelligence Group and Mandiant, tracked as UNC6395.”Beginning as…
-
PromptLock: Erste KI-gesteuerte Ransomware entdeckt
Forschende des Sicherheitsunternehmens ESET haben eine ungewöhnliche Malware aufgespürt, die Künstliche Intelligenz auf neue Weise einsetzt. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/promptlock-ransomware-ki
-
New Phishing Campaign Abuses ConnectWise ScreenConnect to Take Over Devices
Abnormal AI said the campaign, which lures victims into downloading legitimate RMM software, marks a major evolution in phishing tactics First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/phishing-abuses-connectwise-take/
-
5 ways to improve cybersecurity function while spending less
Tags: advisory, ai, authentication, ceo, ciso, control, cyber, cybersecurity, firewall, governance, incident response, mfa, microsoft, middle-east, risk, scam, service, siem, skills, soc, technology, threat, tool, training, windows2. Focus on people and processes: “Teamwork and influential leadership are pivotal in Orange County. We work side-by-side as extensions across our departments. We can’t all do everything, and we don’t want to reinvent the wheel. We shoulder the burden together, revisit existing initiatives, and reduce that tech debt,” Cheramie explains. “That’s how you do…
-
Cloudflare bringt Echtzeit-Schutz in ChatGPT, Claude und Google Gemini
Zur besseren Absicherung generativer KI für Unternehmen arbeitet Cloudflare mit führenden KI-Anbietern zusammen. Durch eine direkte Einbettung bei den beliebtesten generativen Tools unterstützt Cloudflare eine sichere KI-Nutzung First seen on infopoint-security.de Jump to article: www.infopoint-security.de/cloudflare-bringt-echtzeit-schutz-in-chatgpt-claude-und-google-gemini/a41804/
-
AI Security Map: Linking AI vulnerabilities to real-world impact
A single prompt injection in a customer-facing chatbot can leak sensitive data, damage trust, and draw regulatory scrutiny in hours. The technical breach is only the first … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/27/ai-security-map-linking-vulnerabilities-real-world-impact/
-
How compliance teams can turn AI risk into opportunity
AI is moving faster than regulation, and that creates opportunities and risks for compliance teams. While governments work on new rules, businesses cannot sit back and wait. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/27/matt-hillary-drata-ai-regulatory-compliance/
-
Von Alarmmüdigkeit zu intelligenten Maßnahmen Der AgenticEffekt
Künstliche Intelligenz (KI) verändert die Cyberbedrohungslandschaft grundlegend. Sie ermöglicht es Verteidigern zwar, Bedrohungen schneller und präziser zu erkennen und darauf zu reagieren, senkt aber auch die Hürden für Angreifer, die damit Angriffe noch schneller in die Wege leiten und skalieren können. Das Ergebnis ist ein Wettrüsten, das schnellere, geschicktere und proaktivere Abwehrmaßnahmen erfordert, um fortgeschrittenen…
-
Attackers steal data from Salesforce instances via compromised AI live chat tool
What Salesloft Drift users should do next: The GTIG report and the Salesloft advisories include indicators of compromise such as IP addresses used by the attackers and User-Agent strings for the tools they used to access the data. Mandiant advises companies to also search logs for any activity from known Tor exit nodes in addition…
-
TDL003 – Breaking Barriers: IPv6 Adoption and DNS Transformation with Tommy Jensen
Tags: access, ai, apple, attack, backup, banking, browser, business, ceo, chrome, ciso, compliance, computer, computing, control, country, credentials, cybersecurity, data, data-breach, ddos, dns, encryption, endpoint, google, government, group, international, Internet, jobs, law, microsoft, mobile, network, phishing, phone, privacy, programming, radius, risk, service, smishing, strategy, switch, technology, threat, update, vpn, windows, zero-trustSummary This episode of the Defender’s Log features special guest Tommy Jensen, an internet technologist specializing in IPv6, Zero Trust, and standards. Jensen’s career path, from an AppleCare contractor to a key figure in advancing internet technologies, is explored. The discussion highlights the critical importance and challenges of migrating to IPv6 and the necessity of…
-
Microsoft’s New AI Risk Assessment Framework A Step Forward
Microsoft recently introduced a new framework designed to assess the security of AI models. It’s always encouraging to see developers weaving cybersecurity considerations into the design and deployment of emerging, disruptive technologies. Stronger security reduces the potential for harmful outcomes”Š”, “Šand that’s a win for everyone. It is wonderful to see that Microsoft leveraged its…
-
Broadcom Extends Reach and Scope of Cybersecurity Portfolio
Tags: ai, communications, compliance, conference, cybersecurity, framework, intelligence, technology, update, vmware, zero-trustBroadcom today added a slew of cybersecurity updates, including a technology preview of an update to VMware vDefend that secures communications between artificial intelligence (AI) agents, promising to improve overall resiliency and automate compliance workflows. Announced at the VMware Explore 2025 conference, the update to vDefend introduces a zero-trust framework for AI agents. Additionally, Broadcom..…
-
First AI-powered ransomware spotted, but it’s not active yet
Oh, look, a use case for OpenAI’s gpt-oss-20b model First seen on theregister.com Jump to article: www.theregister.com/2025/08/26/first_aipowered_ransomware_spotted_by/
-
APT36 Targets Indian BOSS Linux Using Weaponized .desktop Shortcut Files
Researchers have unveiled ONEFLIP, a novel inference-time backdoor attack that compromises full-precision deep neural networks (DNNs) by flipping just one bit in the model’s weights, marking a significant escalation in the practicality of hardware-based attacks on AI systems. Unlike traditional backdoor methods that require poisoning training data or manipulating the training process, ONEFLIP operates during…
-
Governments, tech companies meet in Tokyo to share tips on fighting North Korea IT worker scheme
The U.S. State Department said it worked with the Ministries of Foreign Affairs in Japan and South Korea to organize the forum, which had more than 130 attendees from freelance work platforms, payment service providers, cryptocurrency companies, AI firms and more. First seen on therecord.media Jump to article: therecord.media/japan-us-south-korea-forum-north-korea-it-worker-scheme
-
Researchers flag code that uses AI systems to carry out ransomware attacks
The malware, called PromptLock, essentially functions as a hard-coded prompt injection attack on a large language model, inspecting local filesystems, exfiltrating files and encrypting data. First seen on cyberscoop.com Jump to article: cyberscoop.com/prompt-lock-eset-ransomware-research-ai-powered-prompt-injection/