Tag: ai
-
How Oracle is using AI to combat financial crime
The tech giant is leveraging artificial intelligence to surface fraudulent financial transactions and improve the efficiency of financial crime investigations, offering relief to banks battling high costs and alert fatigue First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366621012/How-Oracle-is-using-AI-to-combat-financial-crime
-
AI Operator Agents Helping Hackers Generate Malicious Code
Symantec’s Threat Hunter Team has demonstrated how AI agents like OpenAI’s Operator can now perform end-to-end phishing attacks with minimal human intervention, marking a significant evolution in AI-enabled threats. A year ago, Large Language Model (LLM) AIs were primarily passive tools that could assist attackers in creating phishing materials or writing code. Now, with the…
-
Android Malware Disguised as DeepSeek Steals Users’ Login Credentials
A recent cybersecurity threat has emerged in the form of Android malware masquerading as the DeepSeek AI application. This malicious software is designed to deceive users into downloading a fake version of the DeepSeek app, which then compromises their device’s security by stealing sensitive information such as login credentials. Malware Propagation and Installation The malware…
-
Leak zum Google Pixel 10: KI-Assistent „Pixel Sense” soll Siri Konkurrenz machen
First seen on t3n.de Jump to article: t3n.de/news/leak-google-pixel-10-ki-assistent-pixel-sense-1677705/
-
AI Module Security Flaws in Drupal: MyCERT Urges Immediate Patching
The Malaysia Computer Emergency Response Team (MyCERT) has reported several Drupal vulnerabilities within its AI module, specifically affecting versions prior to 1.0.5. This issue, outlined in a MyCERT advisory (MA-1292.032025), has raised cybersecurity concerns regarding potential remote code execution risks and the overall security of Drupal-powered websites. MyCERT has recommended that all users and administrators of Drupal promptly…
-
AI development pipeline attacks expand CISOs’ software supply chain risk
Tags: access, ai, api, application-security, attack, backdoor, breach, business, ciso, cloud, container, control, cyber, cybersecurity, data, data-breach, detection, encryption, exploit, flaw, fortinet, government, infrastructure, injection, intelligence, LLM, malicious, malware, ml, network, open-source, password, penetration-testing, programming, pypi, risk, risk-assessment, russia, saas, sbom, service, software, supply-chain, threat, tool, training, vpn, vulnerabilitydevelopment pipelines are exacerbating software supply chain security problems.Incidents of exposed development secrets via publicly accessible, open-source packages rose 12% last year compared to 2023, according to ReversingLabs (RL).A scan of 30 of the most popular open-source packages found an average of six critical-severity and 33 high-severity flaws per package.Commercial software packages are also a…
-
KI So können sich Unternehmen im KI-Zeitalter schützen
First seen on security-insider.de Jump to article: www.security-insider.de/kuenstliche-intelligenz-sicherheit-herausforderungen-loesungen-a-586d0afebe0877da8fe08e22bfd9b5cc/
-
AI Action Summit review: Differing views cast doubt on AI’s ability to benefit whole of society
Governments, companies and civil society groups gathered at the third global AI summit to discuss how the technology can work for the benefit of everyone in society, but experts say competing imperatives mean there is no guarantee these visions will win out First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366620444/AI-Action-Summit-review-Differing-views-cast-doubt-on-AIs-ability-to-benefit-whole-of-society
-
Pravda-Netzwerk: Chatbots von russischer Propaganda verseucht
Das russische Pravda-Netzwerk infiltriert KI-Tools wie ChatGPT und Perplexity mit Fehlinformationen, wie eine Studie belegt. First seen on golem.de Jump to article: www.golem.de/news/pravda-netzwerk-chatbots-von-russischer-propaganda-verseucht-2503-194349.html
-
Kann eine AI wie DeepSeek Malware und Keylogger erstellen?
Sicherheitsexperten treibt die Frage um, ob Large Language Modelle (LLMs), allgemein als KI-Lösungen (AI) gehandelt, sich missbrauchen lassen, um Malware oder Keylogger zu erstellen. Sicherheitsforscher haben das mit der chinesischen AI DeepSeek getestet und konnten die Sicherheitsmechanismen aushebeln. Die latente … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/16/kann-eine-ai-wie-deepseek-malware-und-keylogger-erstellen/
-
We did not have Brave clashing with Rupert Murdoch on our 2025 bingo card, but there it is
Indie browser maker asks judge for legal shield against copyright threats over AI summaries First seen on theregister.com Jump to article: www.theregister.com/2025/03/13/brave_news_corp_content/
-
Invisible C2″Š”, “Šthanks to AI-powered techniques
Tags: ai, api, attack, breach, business, chatgpt, cloud, communications, control, cyberattack, cybersecurity, data, defense, detection, dns, edr, email, encryption, endpoint, hacker, iot, LLM, malicious, malware, ml, monitoring, network, office, openai, powershell, service, siem, soc, strategy, threat, tool, update, vulnerability, zero-trustInvisible C2″Š”, “Šthanks to AI-powered techniques Just about every cyberattack needs a Command and Control (C2) channel”Š”, “Ša way for attackers to send instructions to compromised systems and receive stolen data. This gives us all a chance to see attacks that are putting us at risk. LLMs can help attackers avoid signature based detection Traditionally, C2…
-
The Silent Infiltration: How Powerful CPS Devices Are Amplifying Cyber Risks for Businesses
The Internet of Things (IoT), also referred to as Cyber-Physical Systems (CPS) has exploded across all types of enterprises, promising greater efficiency, automation, and data-driven insights. From smart sensors monitoring factory floors to AI-powered cameras securing premises, these devices are transforming how businesses operate. However, this surge in connectivity, coupled with the increasing power of……
-
Will Cisco’s Free Tech Training for 1.5M People Help Close EU’s Skills Gap?
Cisco’s training through its Networking Academy will help “build a resilient and skilled workforce ready to meet Europe’s digital transformation and AI objectives.” First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-cisco-skills-tech-training-european-union/
-
Forcepoint Boosting AI-based Data Security with Getvisibility Buy
First seen on scworld.com Jump to article: www.scworld.com/news/forcepoint-boosting-ai-based-data-security-with-getvisibility-buy
-
OpenAI’s Operator AI agent can be used in phishing attacks, say researchers
First seen on scworld.com Jump to article: www.scworld.com/news/openais-operator-ai-agent-can-be-used-in-phishing-attacks-say-researchers
-
AI Vs. SOAR for MSSPs: Scaling Alert Investigations With Automation
First seen on scworld.com Jump to article: www.scworld.com/native/ai-vs-soar-for-mssps-scaling-alert-investigations-with-automation
-
AI Adoption For Cybersecurity Healthcare Poised For Surge
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-adoption-for-cybersecurity-healthcare-poised-for-surge
-
AI-Powered Profitability: How Autonomous SOC Drives MSSP Margin Growth
First seen on scworld.com Jump to article: www.scworld.com/native/ai-powered-profitability-how-autonomous-soc-drives-mssp-margin-growth
-
DeepSeek-R1 Can Almost Generate Malware
DeepSeek Comes Very Close to Producing a Keylogger and Ransomware. Security researchers used the Chinese DeepSeek-R1 artificial intelligence reasoning model to come close to developing ransomware variants and keyloggers with evasion capabilities. The model needs prompt engineering and its output requires code editing. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/deepseek-r1-almost-generate-malware-a-27731
-
Symantec Demonstrates OpenAI’s Operator Agent in PoC Phishing Attack
Symantec demonstrates OpenAI’s Operator Agent in PoC phishing attack, highlighting AI security risks and the need for proper cybersecurity. First seen on hackread.com Jump to article: hackread.com/symantec-openai-operator-agent-poc-phishing-attack/
-
Symantec Uses OpenAI Operator to Show Rising Threat of AI Agents
Symantec threat researchers used OpenAI’s Operator agent to carry out a phishing attack with little human intervention, illustrating the looming cybersecurity threat AI agents pose as they become more powerful. The agent learned how to write a malicious PowerShell script and wrote an email with the phishing lure, among other actions. First seen on securityboulevard.com…
-
Tech giants seek data standards amid AI push
Microsoft, IBM and Cisco are among the vendors backing the OASIS Data Provenance Standards Technical Committee announced last week. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-data-quality-ibm-microsoft-red-hat-cisco/742581/
-
Devnexus: Bringing Java Into The Age Of AI
The largest Java community conference, Devnexus 2025, tackled AI, security, and Java’s role in enterprise development. Read key takeaways for securing applications. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/03/devnexus-bringing-java-into-the-age-of-ai/
-
FCC Takes on China Threats with New National Security Council
The FCC is launching a new agency council to push back on Chinese-backed cyberthreats like Salt Typhoon by pushing telecoms to harden their defense, reduce their reliance on trade with foreign adversaries, and ensure continued U.S. leadership is key areas like AI, the IoT, quantum computing, and 5G and 6G networks. First seen on securityboulevard.com…
-
Die wichtigsten Herausforderungen bei der Nutzung von Mainframe-Daten in modernen Systemen
Mainframes speichern riesige Datenmengen, die oft nicht ausreichend genutzt werden, obwohl sie eine Schlüsselrolle bei fortgeschrittenen Analysen, generativer KI und strategischen Entscheidungen spielen könnten. Laut einer globalen Studie des IBM Institute for Business Value halten 79 % der IT-Führungskräfte diese Systeme für unerlässlich, um Innovationen voranzutreiben und durch KI-Werte zu schaffen. Die Herausforderungen im Zusammenhang…
-
New AI Security Tool Helps Organizations Set Trust Zones for Gen-AI Models
Measure the different level of risk inherent to all gen-AI foundational models and use that to fine-tune the operation of in-house AI deployments. The post New AI Security Tool Helps Organizations Set Trust Zones for Gen-AI Models appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/new-ai-security-tool-helps-organizations-set-trust-zones-for-gen-ai-models/
-
DeepSeek R1 Jailbreaked to Create Malware, Including Keyloggers and Ransomware
Tags: ai, chatgpt, cyber, cybercrime, exploit, google, intelligence, malicious, malware, openai, ransomware, toolThe increasing popularity of generative artificial intelligence (GenAI) tools, such as OpenAI’s ChatGPT and Google’s Gemini, has attracted cybercriminals seeking to exploit these technologies for malicious purposes. Despite the guardrails implemented by traditional GenAI platforms to prevent misuse, cybercriminals have circumvented these restrictions by developing their own malicious large language models (LLMs), including WormGPT, FraudGPT,…