Tag: ai
-
Zscaler schließt Übernahme von Red Canary ab und forciert agentenbasierte KI-gesteuerte Security-Operations
Tags: aiZscaler hat die Übernahme von Red Canary abgeschlossen. Gemeinsam werden die Unternehmen hochintegrierte Sicherheitslösungen anbieten, die ein fortschrittliches Exposure-Management mit agentenbasiertem, KI-gestütztem Bedrohungsmanagement kombinieren. Red Canary wird zunächst als separate Geschäftseinheit innerhalb von Zscaler operieren, um die Kontinuität für seine Kunden zu gewährleisten. Das Unternehmen wird von der Größe und den Ressourcen von Zscaler profitieren…
-
Deepfakes 2025 Von der KI-Spielerei zum Hackertool
Deepfakes sind längst keine Spielerei mehr. Was als unterhaltsamer Internettrend begann, ist heute ein hochentwickeltes Werkzeug für Cyber-Kriminalität. Moderne Deepfakes schauen täuschend echt aus, lassen sich in Echtzeit einsetzen und sind massentauglich. Damit stellen sie eine akute Bedrohung für Wirtschaft und Gesellschaft dar. Laut unserem
-
New Promptware Attack Hijacks User’s Gemini AI Via Google Calendar Invite
Cybersecurity researchers demonstrate a new attack on Google Gemini AI for Workspace. Discover how a simple calendar invite can be used to perform phishing, steal emails, and even control home appliances. First seen on hackread.com Jump to article: hackread.com/promptware-attack-hijack-gemini-ai-google-calendar-invite/
-
Digitalisierung auf Sand gebaut: Wie KI-Euphorie die IT-Security im Mittelstand gefährdet
Tags: aiDer Einsatz generativer KI eröffnet ganz neue Möglichkeiten, beispielsweise wenn Maschinen Baupläne verstehen oder Vertriebsprozesse selbstständig Texte erstellen. Gleichzeitig sind unter den vielen neuen Angeboten erstaunlich viele ‘Klon”‘Produkte”, die lediglich eine hübsche Oberfläche über das immer gleiche Grundmodell stülpen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/digitalisierung-auf-sand-gebaut-wie-ki-euphorie-die-it-security-im-mittelstand-gefaehrdet/a41636/
-
Smart Home mit Google Gemini: Fremde Jalousien per Kalendereinladung gesteuert
Forscher haben Googles Gemini per Prompt-Injection bösartige Befehle untergejubelt. Die KI steuerte daraufhin Jalousien, Beleuchtung und einen Boiler. First seen on golem.de Jump to article: www.golem.de/news/per-kalendereinladung-wie-hacker-ueber-google-ki-smart-home-geraete-steuern-konnten-2508-198909.html
-
Sysdig stellt agentenbasierte Cloud-Sicherheitslösung mit semantischer Analyse vor
Mit dieser Lösung hebt Sysdig die Cloud-Sicherheit auf ein neues Level. Durch die Kombination aus semantischer Analyse und autonomen KI-Agenten wird nicht nur reagiert, sondern vorausgedacht. Unternehmen erhalten ein präzises Bild ihrer Sicherheitslage und die Möglichkeit, gezielt und schnell zu handeln, bevor aus Risiken echte Schäden werden. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/sysdig-stellt-agentenbasierte-cloud-sicherheitsloesung-mit-semantischer-analyse-vor/a41634/
-
Überwachung des KI-Markts – Datenschützer mahnt Handeln der Bundesregierung bei KI an
First seen on security-insider.de Jump to article: www.security-insider.de/datenschuetzer-mahnt-handeln-der-bundesregierung-bei-ki-an-a-9f14929fe46f3bae5be823e01debbd32/
-
Agenten-Modus von OpenAI: Wenn die KI nicht mehr nur hilft, sondern handelt
KI und Menschen – wer dient hier wem? Der neue Agent Mode von OpenAI zeigt: Diese Frage wird bald nicht mehr einfach zu beantworten sein. First seen on golem.de Jump to article: www.golem.de/news/agenten-modus-von-openai-wenn-die-ki-nicht-mehr-nur-hilft-sondern-handelt-2508-198753.html
-
News alert: SpyCloud’s AI-powered platform mimics veteran analysts, speeds threat detection
Austin, TX, Aug. 6, 2025, CyberNewswire: SpyCloud, the leader in identity threat protection, today announced a significant enhancement to its SaaS Investigations solution: the integration of advanced AI-powered insights that mirror the tradecraft of SpyCloud’s seasoned investigators. Building on… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/news-alert-spyclouds-ai-powered-platform-mimics-veteran-analysts-speeds-threat-detection/
-
Beef up AI security with zero trust principles
Tags: access, ai, attack, control, data, data-breach, defense, intelligence, LLM, mitigation, mitre, monitoring, risk, strategy, tactics, threat, update, vulnerability, zero-trustStrategies for CSOs: Brauchler offered three AI threat modelling strategies CSOs should consider:Trust flow tracking, the tracking of the movement of data throughout an application, and monitoring the level of trust that is associated with that data. It’s a defense against an attacker who is able to get untrusted data into an application to control…
-
News alert: SpyCloud’s AI-powered platform mimics veteran analysts, speeds threat detection
Austin, TX, Aug. 6, 2025, CyberNewswire: SpyCloud, the leader in identity threat protection, today announced a significant enhancement to its SaaS Investigations solution: the integration of advanced AI-powered insights that mirror the tradecraft of SpyCloud’s seasoned investigators. Building on… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/news-alert-spyclouds-ai-powered-platform-mimics-veteran-analysts-speeds-threat-detection/
-
AI can write your code, but nearly half of it may be insecure
While GenAI excels at producing functional code, it introduces security vulnerabilities in 45 percent of cases, according to Veracode’s 2025 GenAI Code Security Report, which … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/07/create-ai-code-security-risks/
-
Durch Datenlecks verursachte Kosten sind gefallen
Tags: ai, breach, cyberattack, data, data-breach, deep-fake, fraud, germany, ibm, infrastructure, phishing, risk, security-incident, service, usaDurch KI unterstützte Angriffe wie Phishing und Deepfakes nehmen weiter zu, doch Unternehmen zögern in gleichem Maße nachzurüsten.Die gute Nachricht zuerst: Wie IBM in seinem jährlich erscheinenden Cost of a Data Breach Report herausfand, sind die durchschnittlichen Kosten eines Datenlecks in Deutschland erstmals seit fünf Jahren wieder gesunken. Ein einzelner Vorfall kostete demnach 2024 im…
-
Durch Datenlecks verursachte Kosten sind gefallen
Tags: ai, breach, cyberattack, data, data-breach, deep-fake, fraud, germany, ibm, infrastructure, phishing, risk, security-incident, service, usaDurch KI unterstützte Angriffe wie Phishing und Deepfakes nehmen weiter zu, doch Unternehmen zögern in gleichem Maße nachzurüsten.Die gute Nachricht zuerst: Wie IBM in seinem jährlich erscheinenden Cost of a Data Breach Report herausfand, sind die durchschnittlichen Kosten eines Datenlecks in Deutschland erstmals seit fünf Jahren wieder gesunken. Ein einzelner Vorfall kostete demnach 2024 im…
-
No, Mr. Altman, Passwords Are Not Back in Vogue
OpenAI CEO Says AI Has Beaten Voice Recognition, But Experts Disagree OpenAI CEO Sam Altman recently claimed that artificial intelligence has fully defeated most of the ways that people authenticate currently, other than passwords. A host of security experts disagree and point out that passwords got us into this authentication mess to begin with. First…
-
Project Ire: Microsoft Tests AI That Autonomously Detects Malware
Project Ire is Microsoft’s autonomous AI that reverse engineers software to detect malware without prior knowledge or human intervention. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-project-ire-ai-reverse-engineers-malware/
-
Microsoft researchers bullish on AI security agent even though it let 74% of malware slip through
Project Ire promises to use LLMs to detect whether code is malicious or benign First seen on theregister.com Jump to article: www.theregister.com/2025/08/06/microsofts_ai_agent_malware_detecting/
-
The AI Security Dilemma: Navigating the High-Stakes World of Cloud AI
Tags: access, ai, attack, cloud, container, control, credentials, cve, data, data-breach, flaw, google, identity, infrastructure, intelligence, least-privilege, microsoft, risk, service, software, tool, training, vulnerability, vulnerability-managementAI presents an incredible opportunity for organizations even as it expands the attack surface in new and complex ways. For security leaders, the goal isn’t to stop AI adoption but to enable it securely. Artificial Intelligence is no longer on the horizon; it’s here, and it’s being built and deployed in the cloud at a…
-
MCP Protocol Bug Let Attackers Execute Code in Cursor
Cursor Patched Flaw Days After Disclosure, Says Check Point. Check Point researchers found a RCE flaw in Cursor, an AI-powered code editor, by manipulating a previously approved model context protocol configuration. Once a developer approved a configuration file for an MCP server, any future changes to that file could be executed without further prompts. First…
-
Lazarus Hackers Use Fake Camera/Microphone Alerts to Deploy PyLangGhost RAT
North Korean state-sponsored threat actors associated with the Lazarus Group, specifically the subgroup known as Famous Chollima, have evolved their tactics by deploying a new Python-based remote access trojan (RAT) dubbed PyLangGhost. This malware represents a reimplementation of the earlier GoLangGhost RAT, exhibiting code structures indicative of AI-assisted porting, including Go-like logic patterns and extensive…
-
Black Hat 2025: Security Researcher Unpacks Cybercrime’s Evolution”¦ and How AI Is Changing the Game
From prank viruses to profit-driven cybercrime, Mikko Hypponen explains how today’s malware is targeted, professional, and all about money. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-black-hat-2025-cybercrime-evolution-ai-mikko-hypponen/
-
Google Gemini AI Bot Hijacks Smart Homes, Turns Off the Lights
Using invisible prompts, the attacks demonstrate a physical risk that could soon become reality as the world increasingly becomes more interconnected with artificial intelligence. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/google-gemini-ai-bot-hijacks-smart-homes
-
Mistaken Identity? AI Agent Oversight Key To Success
The AI agent revolution and its promise of unprecedented productivity gains could hit major roadblocks if cybersecurity concerns aren’t dealt with, experts and industry executives told CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2025/mistaken-identity-ai-agent-oversight-key-to-success
-
Google agrees to pause AI workloads to protect the grid when power demand spikes
On hot summer days, air conditioning is rather more important than search summaries First seen on theregister.com Jump to article: www.theregister.com/2025/08/04/google_ai_datacenter_grid/
-
NVIDIA Takes Firm Stance Against Kill Switches Backdoors in AI Chips
The statement comes as both US and Chinese authorities probe the lucrative global AI chip business, which NVIDIA dominates. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-nvidia-ai-chips-backdoors-kill-switches/
-
Black Duck Announces Enhancements to AI Powered Application Security Assistant
Black Duck has unveiled Black Duck Assist, which enables developers to find and fix security and compliance issues in human and AI-generated code in real time. Black Duck Assist is now woven into the company’s Code Sight IDE plugin. These updates introduce automated scanning of AI-generated code and AI-powered remediation guidance, bringing continuous code protection…
-
OpenAI Bets on Open Models With GPT-OSS Launch
AI Powerhouse Releases Its First Public Model in 6 Years. OpenAI released its first open-weight reasoning models since GPT-2, unveiling gpt-oss-120b and gpt-oss-20b under the Apache 2.0 license. With performance approaching o-series benchmarks, the models are designed specifically for reasoning tasks. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/openai-bets-on-open-models-gpt-oss-launch-a-29136
-
DataDome TollBit Partner to Protect and Monetize AI traffic
Tags: aiDataDome and TollBit partner to help businesses protect content and monetize compliant AI traffic. Gain real-time protection, actionable insights, and new revenue from agentic AI. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/datadome-tollbit-partner-to-protect-and-monetize-ai-traffic/