Tag: ai
-
Wegen KI-Schrott: Curl-Entwickler erwägt Ende der Bug-Bounty-Prämien
Minderwertige Bug-Reports belasten Open-Source-Entwickler immer stärker. Curl-Maintainer Daniel Stenberg zieht nun radikale Maßnahmen in Erwägung. First seen on golem.de Jump to article: www.golem.de/news/wegen-ki-schrott-curl-entwickler-erwaegt-ende-der-bug-bounty-praemien-2507-198123.html
-
Intelligente Assistenten im Einsatz für IT-Sicherheit – KI-Agenten: Wie sie die Cloud schützen und gefährden können
First seen on security-insider.de Jump to article: www.security-insider.de/ki-agenten-wie-sie-die-cloud-schuetzen-und-gefaehrden-koennen-a-d5a5e9fdb0627e806dc935bf3618afff/
-
AI poisoning and the CISO’s crisis of trust
Tags: access, ai, breach, ceo, ciso, compliance, control, cybersecurity, data, defense, detection, disinformation, exploit, framework, healthcare, identity, infosec, injection, LLM, monitoring, network, privacy, RedTeam, resilience, risk, russia, saas, threat, tool, trainingFoundation models began parroting Kremlin-aligned propaganda after ingesting material seeded by a large-scale Russian network known as the “Pravda Network.”A high-profile AI-generated reading list published by two American news outlets included 10 hallucinated book titles mistakenly attributed to real authors.Researchers showed that imperceptible perturbations in training images could trigger misclassification. Researchers in the healthcare domain demonstrated…
-
Datadog doubles down on APAC, targets faster growth
The observability tools supplier is executing a multi-year growth plan for Asia-Pacific and Japan, focusing on data residency, localisation and AI-driven observability to grow its market share First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366627660/Datadog-doubles-down-on-APAC-targets-faster-growth
-
»manage it« TechTalk: So führt ein KI-Assistent namens Javi zu besseren Ergebnissen
Mit Javi hatte der Sicherheitsanbieter Omada einen KI-gestützten Assistenten in Berlin auf der European Identity Cloud Conference dabei. Was dieses Tool kann und bei welchen wesentlichen Aufgaben es eine echte Hilfe ist, darüber haben wir uns mit Thomas Müller-Martin ausgetauscht. Herausgekommen ist dieses Video mit zahlreichen nützlichen Infos zu Javi. First seen on ap-verlag.de Jump…
-
KI-Waffe Deepfake: Betrug, Identitätsdiebstahl und Angriffe auf Unternehmen
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/ki-waffe-deepfake-betrug-identitaetsdiebstahl-angriff-unternehmen
-
Aviatrix Pivots Investment From Networking to Cloud Security
CEO Doug Merritt: GenAI, Workload Sprawl Raise Zero Trust Stakes for Aviatrix. Aviatrix is addressing cloud network security gaps with its new Cloud Native Security Fabric. CEO Doug Merritt says companies need zero trust across ephemeral workloads, especially with agentic AI multiplying data pathways. The company’s pivot includes a new C-suite and product strategy overhaul.…
-
Why skipping security prompting on Grok’s newest model is a huge mistake
An AI red-teaming company found that xAI’s Grok 4 is “not suitable for enterprises” without substantial security prompting. First seen on cyberscoop.com Jump to article: cyberscoop.com/grok4-security-flaws-prompts-splxai-research/
-
Google Gemini AI Bug Allows Invisible, Malicious Prompts
A prompt-injection vulnerability in the AI assistant allows attackers to create messages that appear to be legitimate Google Security alerts but instead can be used to target users across various Google products with vishing and phishing. First seen on darkreading.com Jump to article: www.darkreading.com/remote-workforce/google-gemini-ai-bug-invisible-malicious-prompts
-
Researchers Jailbreak Elon Musk’s Grok-4 AI Within 48 Hours of Launch
Tags: aiElon Musk’s Grok-4 AI was compromised within 48 hours. Discover how NeuralTrust researchers combined >>Echo Chamber>Crescendo
-
How AI Expands SASE’s Role in Policy, Operations Efficiency
$238M Funding Round to Support Private POPs, Co-Piloted Policy and Global Reach. Cato Networks raised $238 million at a $4.8 billion valuation to accelerate AI integration into SASE. Co-founder and CEO Shlomo Kramer says AI will streamline security operations, improve agility and help secure generative AI workloads and business-critical systems. First seen on govinfosecurity.com Jump…
-
Nation-State Threats Push Claroty to Take on Risk Reduction
Claroty’s Yaniv Vardi: AI-Enabled Attackers Push Cyber-Physical Systems to the Edge. Claroty is strengthening its public sector offerings as hostile nation-state actors adopt sabotage tactics. CEO Yaniv Vardi says AI is accelerating adversary capabilities, requiring defenders to shift from visibility to action and reduce risks across connected cyber-physical systems. First seen on govinfosecurity.com Jump to…
-
Malicious VSCode extension in Cursor IDE led to $500K crypto theft
A fake extension for the Cursor AI IDE code editor infected devices with remote access tools and infostealers, which, in one case, led to the theft of $500,000 in cryptocurrency from a Russian crypto developer. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malicious-vscode-extension-in-cursor-ide-led-to-500k-crypto-theft/
-
Survey Finds AI Adoption Outpacing Security Readiness
As organizations continue to deploy AI, security professionals find themselves confronting critical gaps in their level of preparedness, according to F5’s 2025 State of AI Application Strategy Report. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/07/survey-finds-ai-adoption-outpacing-security-readiness/
-
Denmark Moves Toward AI Copyright Rules for Voice and Appearance
Denmark introduces new AI Copyright Rules to ban non-consensual deepfakes, giving citizens legal control over their face, voice and digital likeness. First seen on hackread.com Jump to article: hackread.com/denmark-ai-copyright-rules-for-voice-and-appearance/
-
New Grok-4 AI breached within 48 hours using ‘whispered’ jailbreaks
Safety systems cheated by contextual tricks: The attack exploits Grok 4’s contextual memory, echoing its own earlier statements back to it, and gradually guides it toward a goal without raising alarms. Combining Crescendo with Echo Chamber, the jailbreak technique that achieved over 90% success in hate speech and violence tests across top LLMs, strengthens the…
-
Is XBOW’s success the beginning of the end of human-led bug hunting? Not yet.
Tags: aiXBOW’s AI bug-hunter landed a big funding round while dominating HackerOne’s leaderboards. But even its founder says it hasn’t fully replaced the need for humans to be involved in the bug-hunting process. First seen on cyberscoop.com Jump to article: cyberscoop.com/is-xbows-success-the-beginning-of-the-end-of-human-led-bug-hunting-not-yet/
-
Rethinking Defense in the Age of AI-Generated Malware
Attackers are using public models and automation tools to generate malware that is unique to every campaign. It doesn’t look like anything we’ve seen before. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/07/rethinking-defense-in-the-age-of-ai-generated-malware/
-
AI ‘Nudify’ Websites Are Raking in Millions of Dollars
Tags: aiMillions of people are accessing harmful AI “nudify” websites. New analysis says the sites are making millions and rely on tech from US companies. First seen on wired.com Jump to article: www.wired.com/story/ai-nudify-websites-are-raking-in-millions-of-dollars/
-
Cloud und KI verändern Access Management – Access Management zukunftssicher gestalten
First seen on security-insider.de Jump to article: www.security-insider.de/access-management-strategien-herausforderungen-a-877b461748a5026f710de355bb225506/
-
Security in the Era of AI-speed Exploits
Modern AI attacks require runtime guardrails capable of spanning application, container and node/host runtime environments comprehensively. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/07/security-in-the-era-of-ai-speed-exploits/
-
McDonald’s Hiring Bot: Would You Like A Side of PII With That?
An AI hiring bot intended to streamline the job application process has instead created a super-sized privacy headache for McDonald’s. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/07/mcdonalds-hiring-bot-would-you-like-a-side-of-pii-with-that/
-
8 tough trade-offs every CISO must navigate
Tags: access, ai, attack, business, ciso, cloud, compliance, computer, cyber, cybersecurity, ddos, defense, detection, framework, group, healthcare, incident response, jobs, malicious, mfa, regulation, resilience, risk, service, technology, threat, tool, vulnerability2. Weighing security investments when the budget forces choices: Closely related to the trade-off around risk is what CISOs must navigate when it comes to security investments.”For most CISOs, when they have to make tough choices, 99% of the time it’s due to budget constraints that force them to weight risks versus rewards,” says John…
-
Putting AI-assisted ‘vibe hacking’ to the test
Tags: access, ai, attack, chatgpt, cyber, cybercrime, cybersecurity, data-breach, defense, exploit, hacking, least-privilege, LLM, network, open-source, strategy, threat, tool, vulnerability, zero-trustUnderwhelming results: For each LLM test, the researchers repeated each task prompt five times to account for variability in responses. For exploit development tasks, models that failed the first task were not allowed to progress to the second, more complex one. The team tested 16 open-source models from Hugging Face that claimed to have been…
-
Check Point erhält BSI C5 Typ 2-Testat für Cloud-Sicherheitslösung
Das Testat bestätigt die Einhaltung von Compliance für die KI-gestützte, cloudbasierte Cybersicherheitslösungen für den öffentlichen Sektor und KRITIS-Betreiber First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-erhaelt-bsi-c5-typ-2-testat-fuer-cloud-sicherheitsloesung/a41376/
-
Grok-4 Jailbroken Using Echo Chamber and Crescendo Exploit Combo
Security researchers have successfully demonstrated a sophisticated jailbreak attack against Grok-4, X’s advanced AI language model, by combining two powerful exploit techniques known as Echo Chamber and Crescendo. This breakthrough highlights growing concerns about the vulnerability of large language models to coordinated attack strategies that can bypass multiple layers of safety mechanisms. The attack represents…
-
Generative KI verändert Sicherheitsparadigmen – Warum Banken 2025 neue Cyberstrategien brauchen
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/generative-ki-sicherheitsbedrohungen-finanzsektor-a-610205b4ba0f6719a250a44ef9342387/
-
AI adoption grows amid falling trust in AI outputs
Tags: aiAs organisations move from AI hype to reality, a decline in trust for AI outputs is not a sign of failure, but a signal of market maturity, according to Bhavya Kapoor, Avanade’s Asia-Pacific president First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366627559/AI-adoption-grows-amid-falling-trust-in-AI-outputs
-
Legal gaps in AI are a business risk, not just a compliance issue
A new report from Zendesk outlines a growing problem for companies rolling out AI tools: many aren’t ready to manage the risks. The AI Trust Report 2025 finds that while AI is … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/07/14/ai-governance-risks-legal-security-teams/