Tag: ai
-
Radioaktive Wespennester bei US-Atomanlage gefunden
Mal ein Thema abseits der IT, was aber Berührungspunkte mit der IT bekommt. Derzeit träumen in den USA ja die KI-Anbieter davon, den von den Modellen erzeugten Stromhunger mittels Atomkraftwerken zu stillen. Neue Reaktortypen sollen her. Dabei ist gänzlich ungeklärt, … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/08/03/radioaktive-wespennester-bei-us-atomanlage-gefunden/
-
KI hoch im Kurs bei deutschen Tech-Startups
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/ki-hoch-im-kurs-deutschland-tech-startups
-
China Presses Nvidia Over Alleged Backdoors in H20 Chips Amid Tech Tensions
China questioned Nvidia over suspected backdoors in its H20 chips, adding to rising tensions in the tech fight between the U.S. and Beijing. China’s internet watchdog has summoned Nvidia over concerns that its H20 AI chips may contain hidden backdoors. Nvidia H20 chips are AI GPUs tailored for the Chinese market, based on Hopper architecture.…
-
‘Man in the Prompt’Attacke auf LLMs
Large Language Modelle (LLMs) lassen sich über Prompts angreifen, um den Modellen unbefugt Daten zu entlocken. Dabei könnten auch ‘Man in the Prompt’-Browser-Angriffe benutzt werden, um AI-Anfragen von Benutzern zu manipulieren und für kriminelle Aktivitäten zu benutzen. Mit dem Einzug … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/08/03/man-in-the-prompt-browser-attacke-auf-llms/
-
STRATEGIC REEL: Proactive by design: Fortinet retools network defense for real-time threats
Security teams can no longer afford to wait for alerts, not when cyberattacks unfold in milliseconds. That’s the core warning from Fortinet’s Derek Manky in a new Last Watchdog Strategic Reel recorded at RSAC 2025. As adversaries adopt AI-driven… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/strategic-reel-proactive-by-design-fortinet-retools-network-defense-for-real-time-threats/
-
News alert: Comp AI lands $2.6M pre-seed to modernize compliance, disrupt SOC 2 market
San Francisco, Calif., Aug. 1, 2025, CyberNewswire”, Comp AI, an emerging player in the compliance automation space, today announced it has secured $2.6 million in pre-seed funding to accelerate its mission of transforming how companies achieve compliance with critical frameworks… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/news-alert-comp-ai-lands-2-6m-pre-seed-to-modernize-compliance-disrupt-soc-2-market/
-
Werbung in Alexa+: Amazon möchte mit dem KI-Assistenten viel Geld verdienen
Tags: aiWerbung in Alexa+: Amazons KI-Assistent soll künftig bezahlte Dialoge mit personalisierter Werbung führen in Europa wird das schwierig. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/datenschutz/werbung-in-alexa-amazon-moechte-mit-dem-ki-assistenten-viel-geld-verdienen-318998.html
-
Google Will Use AI to Guess People’s Ages Based on Search History
Plus: A former top US cyber official loses her new job due to political backlash, Congress is rushing through a bill to censor lawmakers’ personal information online, and more. First seen on wired.com Jump to article: www.wired.com/story/security-news-this-week-google-will-use-ai-to-guess-peoples-ages-based-on-search-history/
-
China Investigates NVIDIA’s H20 Chips for Surveillance Risks
NVIDIA has been called in by Chinese regulators over claims that its H20 AI chip poses security risks, putting billions in potential sales at stake. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-china-investigates-nvidia-h20-chips-backdoor-security-risks/
-
IBM Report: Shadow AI and Poor Governance Linked to Costlier Breaches in 2025
Only 34% of organizations with AI governance audit for misuse, IBM’s 2025 breach report warns. Lack of oversight is raising risks and costs. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ai-breach-risks-rise-as-governance-lags/
-
The $30M Cybersecurity AI, And Why Experts Say It Could Fail Spectacularly
Prophet Security has raised $30 million to deploy autonomous AI defenders. But experts warn that fully autonomous security operations are a dangerous myth that could leave companies more vulnerable than ever. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-30m-ai-promises-to-fix-cybersecurity/
-
Europe’s General-Purpose AI Rulebook: What’s Covered Which Tech Giants Will Sign It
The EU’s General-Purpose AI Code of Practice is intended to guide AI developers in complying with the EU AI Act. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-eu-ai-code/
-
AI Turns Panda Image Into ‘New Breed of Persistent Malware’
AI-assisted malware named Koske is hidden inside panda images, silently hijacking Linux machines for crypto mining while evading detection. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ai-malware-linux-panda-images/
-
Malicious AI-generated npm package hits Solana users
AI-generated npm package @kodane/patch-manager drained Solana wallets; 1,500+ downloads before takedown on July 28, 2025. AI-generated npm package @kodane/patch-manager was flagged for hiding malicious software to drain Solana wallets. The package was uploaded on July 28, 2025, and it was downloaded more than 1,500 times before takedown. >>The package @kodane/patch-manager, is a sophisticated cryptocurrency wallet…
-
Black Hat 2025: Latest news and insights
Tags: access, ai, api, attack, ciso, cloud, conference, crowdstrike, cvss, cyber, cybersecurity, data, defense, email, exploit, finance, firmware, flaw, group, hacker, hacking, identity, Internet, LLM, malicious, malware, reverse-engineering, sap, service, threat, tool, training, update, usa, vulnerability, windowsBlack Hat USAAugust 2-7, 2025Las Vegas, NVBlack Hat USA 2025 returns to the Mandalay Bay Convention Center in Las Vegas on August 2-7. The annual event is a perennial magnet for cybersecurity professionals, researchers, vendors and othersThe week kicks off on August 2 with four days of cybersecurity training courses. The courses cover a range…
-
Safe Raises $70M Series C to Scale Cyber Risk Management
New Funding, Platform Expansion Aim for Predictive, Autonomous Threat Defense. Safe’s $70 million Series C will fund expanded capabilities across its cyber risk quantification, exposure management and third-party oversight tools. The company says its agentic AI vision cyber AGI will transform how enterprises manage and mitigate cyberthreats. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/safe-raises-70m-series-c-to-scale-cyber-risk-management-a-29109
-
Noma Raised $100M to Expand Agentic AI Security Platform
Red-Hot Startup Noma Security to Deepen Protection for AI Models and Agents. With agentic AI deployments accelerating, Noma Security’s $100 million Series B will fuel development of risk management and runtime protection features. CEO Niv Braun said demand for securing agentic AI has surged among Fortune 500 firms and healthcare and financial institutions. First seen…
-
BSidesSF 2025: GenAI Application Security: Not Just Prompt Injection
Creator/Author/Presenter: Ahmed Abugharbia Our deep appreciation to Security BSides – San Francisco and the Creators/Authors/Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView / AMC Metreon – certainly a venue like no other; and via the organization’s YouTube channel. Additionally, the organization is welcoming…
-
Cursor’s AI coding agent morphed ‘into local shell’ with one-line prompt attack
The flaw, disclosed a month after it was patched, provided an attacker with remote code execution privileges by poisoning the data ingested by the model. First seen on cyberscoop.com Jump to article: cyberscoop.com/cursor-ai-prompt-injection-attack-remote-code-privileges-aimlabs/
-
AI Still Writing Vulnerable Code
GenAI Chooses Insecure Code Nearly Half the Time, Veracode Finds. There’s been little improvement in how well AI models handle core security decisions, says a report from application security company Veracode. Large language models introduce vulnerabilities in nearly half of test cases when asked to complete secure code tasks, it found. First seen on govinfosecurity.com…
-
Cursor AI Code Editor Fixed Flaw Allowing Attackers to Run Commands via Prompt Injection
Cybersecurity researchers have disclosed a now-patched, high-severity security flaw in Cursor, a popular artificial intelligence (AI) code editor, that could result in remote code execution.The vulnerability, tracked as CVE-2025-54135 (CVSS score: 8.6), has been addressed in version 1.3 released on July 29, 2025. It has been codenamed CurXecute by Aim”¯Labs, which previously disclosed EchoLeak. First…
-
How RAG Models Work in AI-Based Vulnerability Scanner
AI-powered vulnerability scanners are increasingly using Retrieval-Augmented Generation (RAG) models to improve the detection of security issues in infrastructure. RAG is a technique that combines large language models (LLMs) with external knowledge sources, enabling an AI to retrieve up-to-date, domain-specific information and utilize it to generate more accurate and context-aware results. In the cybersecurity domain,……
-
AI Agents Can Hack Smart Contracts on Autopilot
AI Tools Can Steal Crypto Autonomously, Even From Audited Code. Armed with just a smart contract address, researchers developed an autonomous artificial intelligence tool that can scan for vulnerabilities, write working exploits in the Solidity blockchain programming language and siphon funds. It behaves more like a human hacker, said its co-creator. First seen on govinfosecurity.com…
-
ISC2 Launches New Security Certificate for AI Expertise
Tags: aiISC2 is launching a 6-course certification program to address the growing demand for AI security expertise. Courses cover topics such as AI fundamentals, ethics, and risks. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-careers/isc2-launches-security-certificate-ai-expertise
-
Koske Marks a Significant Step in AI-Created Malware: Aqua Security
Aqua Security detected “Koske,” a cryptomining malware that brings malicious code closer to being as good or better than malware created by humans and includes indicators that it was developed with the use of a large language model. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/koske-marks-a-significant-step-in-ai-created-malware-aqua-security/
-
Securing agentic identities focus of Palo Alto’s CyberArk buy
Palo Alto Networks is entering the identity security space with a multibillion-dollar acquisition, and plans to address growing concerns around protecting identities associated with AI agents First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366628304/Securing-agentic-identities-focus-of-Palo-Altos-CyberArk-buy
-
LLMs’ AI-Generated Code Remains Wildly Insecure
Security debt ahoy: only about half of the code that the latest large language models (LLMs) create is cybersecure, and more and more of it is being created all the time. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/llms-ai-generated-code-wildly-insecure
-
Comp AI secures $2.6M pre-seed to disrupt SOC 2 market
San Francisco, California, 1st August 2025, CyberNewsWire First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/08/comp-ai-secures-2-6m-pre-seed-to-disrupt-soc-2-market/
-
Comp AI secures $2.6M pre-seed to disrupt SOC 2 market
San Francisco, California, 1st August 2025, CyberNewsWire First seen on hackread.com Jump to article: hackread.com/comp-ai-secures-2-6m-pre-seed-to-disrupt-soc-2-market/
-
AI-powered Cursor IDE vulnerable to prompt-injection attacks
A vulnerability that researchers call CurXecute is present in almost all versions of the AI-powered code editor Cursor, and can be exploited to execute remote code with developer privileges. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ai-powered-cursor-ide-vulnerable-to-prompt-injection-attacks/