Tag: ai
-
Threat Actors Use GenAI to Launch Phishing Attacks Mimicking Government Websites
Threat actors are increasingly leveraging generative AI (GenAI) tools to craft highly convincing phishing websites that impersonate legitimate government portals. As highlighted by Zscaler ThreatLabz in their recent reports and blogs, the dual nature of GenAI empowering productivity for legitimate users while enabling cybercriminals has become a critical issue. These tools, such as DeepSite AI…
-
Nvidia patches critical Triton server bugs that threaten AI model security
This could matter to AI everywhere: Wiz researchers focused their analysis on Triton’s Python backend, citing its popularity and central role in the system. While it handles models written in Python, it also serves as a dependency for several other backendsmeaning models configured under different frameworks may still rely on it during parts of the…
-
Four Areas CISOs Must Assess Before Being AI Ready
Every CISO must assess their organization’s AI readiness from technology and talent to governance and compliance. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/four-areas-cisos-must-assess-before-being-ai-ready/
-
SentinelOne To Acquire AI Protection Startup Prompt Security
SentinelOne announced Tuesday it has reached a deal to acquire a startup focused on securing AI and agentic technologies, Prompt Security, in the company’s latest move to enable AI adoption. First seen on crn.com Jump to article: www.crn.com/news/security/2025/sentinelone-to-acquire-ai-protection-startup-prompt-security
-
Agenticgestütztes Risk-Operations-Center für autonomes Risk-Management
Qualys stellt mehrere neue Funktionen auf Basis von Agentic-AI innerhalb der Qualys-Plattform vor. Das neue AI-Framework führt einen Marktplatz für Cyber-Risk-AI-Agents ein, die in Echtzeit risikobasierte Einblicke über sämtliche Angriffsflächen hinweg liefern, priorisiert nach geschäftlicher Relevanz. Darüber hinaus reduziert die Lösung Sicherheitsrisiken und Betriebskosten, indem sie eigenständig mit hoher Geschwindigkeit, Skalierbarkeit und Präzision Schwachstellen behebt…
-
Threat Actors Exploit Open-Source Vulnerabilities to Spread Malicious Code
Tags: ai, cyber, data, exploit, malicious, malware, open-source, pypi, software, supply-chain, threat, vulnerabilityFortiGuard Labs has reported a sustained trend in the exploitation of open-source software (OSS) repositories for malware dissemination within supply chain ecosystems. As development workflows increasingly depend on third-party packages, adversaries are capitalizing on vulnerabilities in platforms like NPM and PyPI to inject malicious code, facilitate data exfiltration, and inflict broader damage. Leveraging proprietary AI-driven…
-
Firebox-Tabletop-Appliances für KMUs kombinieren intelligente Firewall-Sicherheit mit KI-gestützter Bedrohungserkennung
Watchguard Technologies präsentiert seine neueste Generation der Firewall-Tabletop-Appliances, die konkret an den Bedürfnissen kleiner und mittlerer Unternehmen ausgerichtet ist. Die Modelle der T-Serie bieten moderne Sicherheit, die sich durch Highspeed-Verbindungen und KI-gesteuerte Bedrohungsabwehr auszeichnet. Zudem sind Unternehmen damit in der Lage, selbst den Anforderungen wachsender Netzwerke jederzeit gerecht zu werden. Dabei spielt es keine Rolle,…
-
Qualys stellt seinen neuen Cyber Risk AI Agents vor
Durch die Einbettung von Agentic AI in das Enterprise TruRisk Management (ETM) erweitert Qualys seine Fähigkeiten zur risikozentrierten Automatisierung und ermöglicht eine schnellere, intelligentere Entscheidungsfindung. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/qualys-stellt-seinen-neuen-cyber-risk-ai-agents-vor/a41611/
-
Cloudflare Accuses AI Startup of ‘Stealth Crawling Behavior’ Across Millions of Sites
Cloudflare is accusing Perplexity of using stealth crawlers to bypass site restrictions, triggering fresh concerns over how AI firms access web content. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-cloudflare-accuses-perplexity-stealth-crawling-violations/
-
AI Fuels Record Number of Fraud Cases
Cifas noted a record number of filings in its National Fraud Database for the first half of 2025 First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-fuels-record-number-of-fraud/
-
Chaining NVIDIA’s Triton Server flaws exposes AI systems to remote takeover
New flaws in NVIDIA’s Triton Server let remote attackers take over systems via RCE, posing major risks to AI infrastructure. Newly revealed security flaws in NVIDIA’s Triton Inference Server for Windows and Linux could let remote, unauthenticated attackers fully take over vulnerable servers. According to Wiz Research team, chaining these vulnerabilities enables remote code execution…
-
5 hard truths of a career in cybersecurity, and how to navigate them
Tags: access, ai, application-security, attack, awareness, best-practice, breach, business, cio, ciso, conference, control, cyber, cybersecurity, data-breach, finance, firewall, framework, gartner, identity, ISO-27001, jobs, mitigation, network, regulation, risk, risk-assessment, risk-management, skills, strategy, technology, threat, training, wafCybersecurity teams protect systems but neglect people: After all the effort it takes to break into cybersecurity, professionals often end up on teams that don’t feel welcoming or supportive.Jinan Budge, a research director at Forrester who focuses on enabling CISOs and other technical leaders, believes the way most cybersecurity career paths are structured plays a…
-
15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign
Cybersecurity researchers have lifted the veil on a widespread malicious campaign that’s targeting TikTok Shop users globally with an aim to steal credentials and distribute trojanized apps.”Threat actors are exploiting the official in-app e-commerce platform through a dual attack strategy that combines phishing and malware to target users,” CTM360 said. “The core tactic involves a…
-
Top cybersecurity M&A deals for 2025
Tags: 5G, access, ai, api, apple, application-security, attack, automation, awareness, banking, breach, business, ceo, cisco, cloud, compliance, control, crowdstrike, cyber, cybersecurity, data, ddos, defense, detection, edr, email, endpoint, finance, firewall, gitlab, government, group, ibm, identity, incident response, infrastructure, intelligence, leak, microsoft, mitigation, network, password, programming, risk, risk-management, saas, service, software, sophos, strategy, supply-chain, technology, threat, tool, training, vulnerability, waf, zero-trustPalo Alto Networks to buy CyberArk for $25B as identity security takes center stage July 30, 2025: Palo Alto Networks is making what could be its biggest bet yet by agreeing to buy Israeli identity security company CyberArk for around $25 billion. “We envision Identity Security becoming the next major pillar of our multi-platform strategy, complementing our leadership…
-
LegalPwn Attack Tricks AI Tools Like ChatGPT and Gemini into Running Malicious Code
Security researchers have discovered a new type of cyberattack that exploits how AI tools process legal text, successfully tricking popular language models into executing dangerous code. Cybersecurity firm Pangea has unveiled a sophisticated attack method called >>LegalPwn
-
Your employees uploaded over a gig of files to GenAI tools last quarter
In Q2 2025, Harmonic reviewed 1 million GenAI prompts and 20,000 uploaded files across more than 300 GenAI and AI-powered SaaS apps, and the findings confirm that sensitive … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/05/genai-sensitive-data-exposure/
-
Back to basics webinar: The ecosystem of CIS Security best practices
Generative AI models, multi-cloud strategies, Internet of Things devices, third-party suppliers, and a growing list of regulatory compliance obligations all require the same … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/08/05/cis-security-best-practices-ecosystem-webinar/
-
So verändert KI Ihre GRC-Strategie
Tags: ai, ciso, compliance, cyersecurity, framework, fraud, governance, grc, group, monitoring, nist, risk, risk-management, strategy, tool -
OWASP LLM Risk #5: Improper Output Handling FireTail Blog
Tags: ai, application-security, attack, awareness, cyber, detection, email, injection, LLM, mitigation, monitoring, phishing, remote-code-execution, risk, sql, strategy, threat, vulnerabilityAug 04, 2025 – Lina Romero – 2025 is seeing an unprecedented surge of cyber attacks and breaches. AI, in particular, has introduced a whole new set of risks to the landscape and researchers are struggling to keep up. The OWASP Top 10 Risks for LLMs goes into detail about the ten most prevalent risks…
-
How AI Ticketing Systems Are Streamlining IT Support in the Age of Content Streaming
Discover how AI ticketing systems are helping to streamline IT support and business operations in the age of the content streaming world in 2025 First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/how-ai-ticketing-systems-are-streamlining-it-support-in-the-age-of-content-streaming/
-
AI company Perplexity is sneaking to get around blocks on crawlers, Cloudflare alleges
Cloudflare said it received complaints from customers about Perplexity using stealthy tactics to evade network blocks against systematic browsing and scraping of web pages. First seen on cyberscoop.com Jump to article: cyberscoop.com/perplexity-blocks-on-crawlers-cloudflare/
-
News brief: Rise of AI exploits and the cost of shadow AI
Check out the latest security news from the Informa TechTarget team. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366628186/News-brief-Rise-of-AI-exploits-and-the-cost-of-shadow-AI
-
Threat Actors Exploit AI to Scale Attacks and Target Autonomous Agents
Adversaries are using artificial intelligence (AI) to increase their operational efficiency in a fast-changing threat landscape. They are scaling attacks and focusing on autonomous AI agents that support contemporary enterprise ecosystems. According to frontline intelligence from CrowdStrike’s 2025 Threat Hunting Report, derived from elite threat hunters and analysts, threat actors are employing generative AI (GenAI)…
-
Threat Actors Increasingly Leaning on GenAI Tools
From eCrime actors to fake IT tech workers, CrowdStrike researchers found that adversaries are using AI to enhance their offensive cyber operations. First seen on darkreading.com Jump to article: www.darkreading.com/remote-workforce/threat-actors-leaning-genai-tools
-
AI site Perplexity uses “stealth tactics” to flout no-crawl edicts, Cloudflare says
Tags: aiThe allegations are the latest to accuse Perplexity of improper web crawling. First seen on arstechnica.com Jump to article: arstechnica.com/information-technology/2025/08/ai-site-perplexity-uses-stealth-tactics-to-flout-no-crawl-edicts-cloudflare-says/
-
Google says its AI-based bug hunter found 20 security vulnerabilities
The discoveries by an AI-based bug hunter are significant, as it shows these tools are starting to get real results, even if they still need a human. First seen on techcrunch.com Jump to article: techcrunch.com/2025/08/04/google-says-its-ai-based-bug-hunter-found-20-security-vulnerabilities/
-
Delta Air Lines Taps AI to Rewrite Rules of Ticket Pricing
AI Helps Delta Shift 20% of Ticket Pricing to Real-Time Automation by 2025. Delta Air Lines is revolutionizing ticket pricing with AI, aiming to automate 20% of fares by 2025. Partnering with Fetcherr, the airline uses real-time data and machine learning for personalized pricing, raising revenue potential and privacy concerns. First seen on govinfosecurity.com Jump…