Tag: ai
-
SailPoint und Deloitte stärken Identitätssicherheit im KI-Zeitalter
Tags: aiDa KI-Agenten zunehmend autonom agieren und zu einem integralen Bestandteil von Geschäftsprozessen werden, stehen Unternehmen vor völlig neuen Sicherheitsherausforderungen First seen on infopoint-security.de Jump to article: www.infopoint-security.de/sailpoint-und-deloitte-staerken-identitaetssicherheit-im-ki-zeitalter/a41146/
-
Top 5 AI SOC Analyst Platforms to Watch out for in 2025
As threats evolve in sophistication and frequency while cyber skills gaps persist, Security Operations Centres (SOCs) are increasingly turning to AI-driven platforms to enhance threat detection, streamline investigations, and automate responses. But which one is the best? Prophet Security (Best Overall) Prophet Security’s AI-native SOC platform deploys an “Agentic AI SOC Analyst” that autonomously triages,…
-
Hackers Weaponize Langflow Vulnerability to Launch Flodrix Botnet
Tags: ai, botnet, cve, cvss, cyber, cybercrime, exploit, flaw, framework, hacker, remote-code-execution, vulnerabilityA critical security flaw in Langflow, a widely adopted Python-based AI prototyping framework, is being actively exploited by cybercriminals to deploy the rapidly evolving Flodrix botnet. Security researchers have confirmed that attackers are exploiting CVE-2025-3248, a remote code execution (RCE) vulnerability rated 9.8 on the CVSS scale, to compromise unpatched Langflow servers and enlist them…
-
Agentic AI – Wie KI-Agenten die Angriffsfläche beeinflussen
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/ki-agenten-und-cybersicherheit-veraenderungen-a-643ecb9ba0d55b23b01d4feca41e6c59/
-
Before scaling GenAI, map your LLM usage and risk zones
In this Help Net Security interview, Paolo del Mundo, Director of Application and Cloud Security at The Motley Fool, discusses how organizations can scale their AI usage by … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/17/paolo-del-mundo-the-motley-fool-ai-usage-guardrails/
-
Output-driven SIEM”Š”, “Š13 years later
Output-driven SIEM”Š”, “Š13 years later Output-driven SIEM! Apart from EDR and SOC visibility triad, this is probably my most known “invention” even though I was very clear that I stole this from the Vigilant crew back in 2011. Anyhow, I asked this question on X the other day: So, what year is this? Let me see “¦ 2025! Anyhow,…
-
AI-driven ID fraud surges 195% globally
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-driven-id-fraud-surges-195-globally
-
AI scams trigger surge in student aid fraud
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-scams-trigger-surge-in-student-aid-fraud
-
Sysdig Puts Remediation First: Accelerating Risk Reduction with AI and Runtime Context
First seen on scworld.com Jump to article: www.scworld.com/news/sysdig-puts-remediation-first-accelerating-risk-reduction-with-ai-and-runtime-context
-
AuthZed Adds Authorization Support for RAG and Agentic AI for MSSPs and Enterprises
First seen on scworld.com Jump to article: www.scworld.com/brief/authzed-adds-authorization-support-for-rag-and-agentic-ai-for-mssps-and-enterprises
-
Copilot AI Bug Could Leak Sensitive Data via Email Prompts
Microsoft Patched Flaw Allowing Attackers to Hijack Copilot Responses. A well-phrased email was all an attacker would have needed to trick Microsoft Copilot into handing over sensitive data until the operating system giant patched the vulnerability. The zero-click prompt injection attack vulnerability received a CVSS severity score of 9.3. First seen on govinfosecurity.com Jump to…
-
Cybersicherheit für die Telekommunikation im KI-Zeitalter
Die Telekommunikation ist das Rückgrat der digitalen Wirtschaft. Sie unterstützt alles, von Emergency-Response-Call-Centern über Notfallsysteme und Banken bis hin zu generativer KI und intelligenten Städten. Doch mit diesem Wandel geht auch eine erhöhte Anfälligkeit der digitalen Umgebungen insbesondere im K-Fall einher. Bad-Actors haben nicht nur Daten, sondern auch die Infrastruktur, die unsere Gesellschaft […] First…
-
PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud Environments
Cybersecurity researchers from SafeDep and Veracode detailed a number of malware-laced npm packages that are designed to execute remote code and download additional payloads.The packages in question are listed below -eslint-config-airbnb-compat (676 Downloads)ts-runtime-compat-check (1,588 Downloads)solders (983 Downloads)@mediawave/lib (386 Downloads)All the identified npm First seen on thehackernews.com Jump to article: thehackernews.com/2025/06/malicious-pypi-package-masquerades-as.html
-
What are the best practices for MCP security?
Introduction Modern applications are increasingly powered by large language models (LLMs) that don’t just generate text”, they can call live APIs, query databases, and even trigger automated workflows. The Model Context Protocol (MCP) makes this possible by standardizing how LLMs interface with external tools, turning your AI assistant into a fully programmable agent. With great…
-
Erster Zero-Click-Angriff auf Microsoft 365 Copilot
Eine Lücke in Microsoft 365 Copilot ermöglicht es, sensible Daten zu stehlen.Stellen Sie sich einen Angriff vor, der so heimlich ist, dass er keine Klicks, keine Downloads und keine Warnungen erfordert es reicht eine einzelne E-Mail, die in Ihrem Posteingang landet. Das ist der Fall bei EchoLeak, einer kritischen Sicherheitslücke in Microsoft 365 Copilot. Sie…
-
Mit künstlicher Intelligenz und Laufzeitkontext die Schwachstellenbehebung beschleunigen
In der Cloud zählen Sekunden. Angreifer benötigen oft weniger als zehn Minuten, um Schwachstellen auszunutzen dennoch dauert deren Behebung in vielen Unternehmen Wochen oder sogar Monate. Ein Grund: Sicherheitsteams kämpfen mit unübersichtlichen CVE-Listen, mangelndem Kontext und begrenzten Ressourcen. Mit dem neuen Update seiner Schwachstellenmanagement-Lösung bringt Sysdig erstmals KI-gestützte, kontextbasierte Abhilfemaßnahmen direkt in die Arbeitsprozesse […]…
-
âš¡ Weekly Recap: iPhone Spyware, Microsoft 0-Day, TokenBreak Hack, AI Data Leaks and More
Some of the biggest security problems start quietly. No alerts. No warnings. Just small actions that seem normal but aren’t. Attackers now know how to stay hidden by blending in, and that makes it hard to tell when something’s wrong.This week’s stories aren’t just about what was attacked”, but how easily it happened. If we’re…
-
GUEST ESSAY: The AI illusion: Don’t be fooled, innovation without guardrails is just riskat scale
Artificial intelligence is changing everything from how we search for answers to how we decide who gets hired, flagged, diagnosed, or denied. Related: Does AI take your data? It offers speed and precision at unprecedented scale. But without intention,… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/guest-essay-the-ai-illusion-dont-be-fooled-innovation-without-guardrails-is-just-risk-at-scale/
-
Trotz wachsender KI-Investitionen sinkt der KI-Reifegrad in Europa
Tags: aiUm den KI-Reifegrad nachhaltig zu steigern, braucht es einen strategischen Gesamtansatz: Eine klar definierte, unternehmensweit verankerte KI-Vision sollte mit messbaren Zielen hinterlegt sein. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/trotz-wachsender-ki-investitionen-sinkt-der-ki-reifegrad-in-europa/a41135/
-
KI-Betrug explodiert: +1100″¯% mehr Deepfakes in Deutschland
Deepfakes, synthetische Ausweise und KI-generierte Identitäten: Deutschland wird zum Brennpunkt digitaler Betrugsversuche. Eine neue Studie des Verifizierungsunternehmens Sumsub zeigt, wie rasant die Bedrohung durch künstliche Intelligenz wächst und warum klassische Sicherheitsmaßnahmen zunehmend versagen. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/ki-betrug-explodiert
-
Why CISOs need to understand the AI tech stack
As AI spreads, so do the risks. Security leaders are being asked to protect systems they don’t fully understand yet, and that’s a problem. A new report from the Paladin Global … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/06/16/ciso-ai-tech-stack/
-
ChatGPT’s AI coder Codex now lets you choose the best solution
ChatGPT’s Codex, which is an AI agent that lets you code and delegate programming tasks, is now testing a new feature that lets you choose the best solution. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/chatgpts-ai-coder-codex-now-lets-you-choose-the-best-solution/
-
ChatGPT Search gets an upgrade as OpenAI takes aim at Google
On June 13, OpenAI began rolling out a new ChatGPT Search update to improve quality as the AI startup challenges Google’s dominance. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/chatgpt-search-gets-an-upgrade-as-openai-takes-aim-at-google/
-
EU AI ACT
What is the EU AI Act? The EU AI Act (European Union Artificial Intelligence Act) is the world’s first comprehensive legal framework regulating artificial intelligence. Introduced by the European Commission in April 2021 and formally adopted in 2024, the Act is designed to ensure AI systems developed or used in the EU are safe, transparent,……
-
Meta AI: Private Informationen können versehentlich in der App landen
Tags: aiIm Discover-Feed sollen sich in der AI-App von Meta nützliche Prompts finden lassen. In der Realität sind es Klarnamen, Adressen und private Informationen. First seen on golem.de Jump to article: www.golem.de/news/meta-ai-private-informationen-koennen-versehentlich-in-der-app-landen-2506-197146.html
-
Guardrails Breached: The New Reality of GenAI-Driven Attacks
From vibe hacking to malware development to deepfakes, bad actors are discovering more vulnerabilities to attack generative AI tools while also using AI to launch cyber attacks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/guardrails-breached-the-new-reality-of-genai-driven-attacks/
-
A New Identity: Agentic AI boom risks busting IAM norms
First seen on scworld.com Jump to article: www.scworld.com/analysis/a-new-identity-agentic-ai-boom-risks-busting-iam-norms
-
Dark web AI service abuses legitimate open-source models
First seen on scworld.com Jump to article: www.scworld.com/news/dark-web-ai-service-abuses-legitimate-open-source-models
-
Die Meta AI-App ist ein Datenschutz-GAU
Tags: aiVon Meta wird eine AI-App zum Download angeboten. Damit kann man deren KI-Lösung nutzen. Aber die AI-App ist eine Katastrophe in Sachen Datenschutz im dümmsten Fall werden sogar private Chats öffentlich ganz im Sinne von Meta “wir wissen … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/14/die-meta-ai-app-ist-ein-datenschutz-gau/