Tag: ai
-
Bright Security Expands its AI SDLC security Platform Launches an AI PT Module
Tags: aiSan Rafael, United States, 1st September 2026, CyberNewswire First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/bright-security-expands-its-ai-sdlc-security-platform-launches-an-ai-pt-module/
-
The Security Interviews: Abby Kearns, ActiveState
ActiveState CEO Abby Kearns discusses open source’s ‘existential crisis’, how AI is changing the secure software playbook, and why it’s time to have a different conversation about open source security First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366649338/The-Security-Interviews-Abby-Kearns-ActiveState
-
Introducing Agentic Code Scanning: The Holistic Cycode System Around the Model
Tags: aiTL;DR: Agentic Code Scanning is the fourth dimension of Cycode’s code scanning spectrum, not a separate product bolted on. Deterministic SAST, AI SAST, SAST + AI Exploitability, and Agentic Code Scanning run as one single system that decides what runs… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/introducing-agentic-code-scanning-the-holistic-cycode-system-around-the-model/
-
AI-Enhanced BraZetsu Malware Powers Underground Market Selling Access to Corporate Networks
BraZetsu, a Python-based Windows malware framework allegedly operated by the Brazilian threat actor Exilware to identify, profile, and monetize compromised corporate systems. Rather than behaving like a conventional infostealer, BraZetsu appears designed to support an Initial Access Broker operation, converting infected endpoints into cataloged access offerings for an underground marketplace. The framework is reportedly the…
-
KI und Compliance – Kiteworks-Report: Sicherheit top, KI-Governance flop?
First seen on security-insider.de Jump to article: www.security-insider.de/kiteworks-report-sicherheit-top-ki-governance-flop-a-8f143aa6fa4d6699f00911b21d2fe72c/
-
AISI Deutschland: KI-Institut soll Gefahren von KI-Modellen bewerten
Die Bundesregierung sieht in KI-Systemen auch Gefahren für die nationale Sicherheit. BSI und Bundesnetzagentur sollen nun KI-Modelle bewerten. First seen on golem.de Jump to article: www.golem.de/news/aisi-deutschland-ki-institut-soll-gefahren-von-ki-modellen-bewerten-2609-212488.html
-
Fake OpenAI, Anthropic and DeepSeek Crawlers Target .env Files and Cloud Credentials
Threat actors are impersonating AI web crawlers from organizations such as OpenAI, Anthropic, DeepSeek, Google, Perplexity, and Amazon to scan internet-facing servers for exposed secrets, according to a GreyNoise research report published on August 28, 2026. This activity involves automated scanners that use forged crawler user-agent strings to request sensitive files, including .env configurations, AWS…
-
WordPress Uses Frontier AI Tools to Detect Vulnerabilities Before They Can Be Exploited
The WordPress project has launched a coordinated security program to improve how vulnerabilities are identified, prioritized, fixed, and released across the world’s most widely used content management system. This initiative, known as the Core Security Initiative, responds to a significant rise in security-related reports over the past year. According to Rudy Faile, a member of…
-
Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis
Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that’s been put to use by a Russia-aligned threat actor known as UAC-0099 against a target in Ukraine with an aim to interfere with artificial intelligence (AI)-assisted analysis.The idea, ESET said in a series of posts on X, is to deliberately trip a large language model’s…
-
Financial Stability Board Sounds the Alarm Over Frontier AI Risks
The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/financial-stability-board-alarm/
-
Financial Stability Board Sounds the Alarm Over Frontier AI Risks
The Financial Stability Board has warned G20 banking leaders about the cyber risks of frontier AI First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/financial-stability-board-alarm/
-
Fake Claude Opus 5 App Deploys RevStealer to Steal Passwords, Crypto Wallets and Sessions
Threat actors are exploiting demand for generative AI tools to distribute RevStealer, a Windows-focused information stealer hidden inside a trojanized Electron application that impersonates a free desktop version of Anthropic’s Claude Opus 5. Instead a stealthy credential theft tool engineered to evade sandboxes, endpoint monitoring, and post-infection investigation. The primary lure, branded “Claude Opus 5…
-
Hacker nutzten KI-Assistenten Cursor für Angriffe auf Unternehmensnetzwerke
Eine Untersuchung zeigt, wie die Erpressergruppe Aur0ra Cursor zur Ausnutzung bereits kompromittierter Unternehmensnetzwerke einsetzte. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/cursor-hackergruppe
-
Why Enterprises Need AI FinOps, Security to Scale Responsibly
Enterprises Need Unified Cost and Security Controls to Scale AI Agents Responsibly AI agents can run up costs and expand security risks faster than traditional governance can respond. Companies need real-time visibility into every model call, tool invocation and agent action, linking spending, access and outcomes so finance and security teams can control AI jointly…
-
Askeal, the AI cybersecurity assistant that gives verifiable, expert-backed answers
Askeal takes the opposite approach to omniscient Gen AI: rather than pretending to know everything, it combines AI with community expertise. Vetted vendors, researchers, and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/01/askeal-ai-cybersecurity-assistant/
-
Broadcom Unveils VMware AI Factory With Secure Sandboxes for Enterprise AI Workloads
Broadcom has announced the VMware AI Factory, a software-defined private AI platform designed to accelerate the transition from bare-metal servers to production-ready AI models. This platform enhances governance, infrastructure automation, and workload isolation. Unveiled during VMware Explore 2026, the VMware AI Factory serves as the foundation for VMware’s Private AI Cloud. It combines VMware Cloud…
-
LogicGate Bets on AI Agents to Automate GRC Workflows
Incoming CEO Diego Panama Says AI Can Cut Manual Configuration and Workflow Tasks. LogicGate CEO Diego Panama says AI agents can reduce manual GRC configuration and application development, but enterprises will need strong change management, testing and platform reliability as they automate workflows across security, compliance, audit and legal. First seen on govinfosecurity.com Jump to…
-
CrowdStrike Looks to Operationalize Project QuiltWorks AI Initiative
CrowdStrike today unveiled a platform, dubbed Falcon IQ, that operationalizes vulnerability discovery and remediation using data collected from partners participating in a Project QuiltWorks initiative the company launched earlier this year. Announced at its Fal.Con 2026 conference, CrowdStrike also revealed that Abnormal AI, Artemis Security, AttackIQ, ExtraHop, HackerOne, Horizon3, Netskope, Picus Security, Rubrik, SafeBreach, Terra..…
-
GRC Teams Scale AI Governance: Insights from the 2026 IT Risk and Compliance Benchmark
Hyperproof’s 2026 IT Risk and Compliance Benchmark Report reveals that while 97% of GRC teams leverage AI for internal productivity, only 27% have operationalized AI for external assurance. To bridge this gap, modern compliance leaders are anchoring programs in frameworks… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/grc-teams-scale-ai-governance-insights-from-the-2026-it-risk-and-compliance-benchmark/
-
Anthropic Warning: Infostealer Malware Is Hijacking Claude Sessions, Draining Accounts
Infostealer malware is stealing authenticated Claude browser sessions, letting attackers access paid AI accounts and consume victims’ usage allowances. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-claude-session-hijacking-infostealer-malware/
-
Anthropic Warning: Infostealer Malware Is Hijacking Claude Sessions, Draining Accounts
Infostealer malware is stealing authenticated Claude browser sessions, letting attackers access paid AI accounts and consume victims’ usage allowances. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-claude-session-hijacking-infostealer-malware/
-
AI Model Rules Are Not Security Controls
OpenAI’s Hugging Face attack postmortem shows agents don’t care about rules, they need strong controls. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/model-knowing-rules-is-not-security-control
-
AI Agents Can Infect Each Other: Mind Viruses and Turf Wars
Self-propagating instructions can spread through ordinary agent memory. Isolated agents with conflicting goals wrote malware to sabotage each other. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/ai-agents-can-infect-each-other-mind-viruses-and-turf-wars/
-
Agents Without Guardrails: Why Agentic AI Governance Must Focus on Behavior, Not Just Identity
Enterprises have spent decades building security around a familiar question:”¯Who are you? Identity and access management (IAM), authentication, service accounts, OAuth tokens, and role-based access controls all start there. Establish identity, assign permissions, and control access. Agentic AI changes the equation. AI agents do not simply access systems. They reason, select tools, call APIs, retrieve……
-
How AI could make it harder for governments to use hacking tools
AI is proving effective at finding and exploiting vulnerabilities. Some say this will make it harder for governments to use hacking tools and spyware and could reignite calls to backdoor devices. First seen on techcrunch.com Jump to article: techcrunch.com/2026/08/31/how-ai-could-make-it-harder-for-governments-to-use-hacking-tools/
-
âš¡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More
The boring parts caused most of the trouble.A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new attack chains. Even an AI agent decided its assigned task was optional.Elsewhere, fake apps, helpful support calls, cheap banking…
-
Threat actors are posing as AI crawlers to hunt for exposed credentials
Attackers are disguising automated scanning as traffic from AI crawlers operated by OpenAI, Anthropic, Google, Perplexity and other companies while searching websites for … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/31/ai-crawlers-scan-exposed-credentials/
-
Aurora Ransomware Hackers Use Cursor AI Agent for Hands-On Exploitation and ESXi Attacks
Aurora ransomware operators have been observed using Cursor Agent, powered by Claude Sonnet, to support hands-on intrusion activity across ten victim organizations, while deploying a purpose-built Linux encryptor designed to disrupt VMware ESXi environments. The findings show how ransomware affiliates are integrating agentic AI into established post-compromise workflows rather than relying on it as a…