Tag: ai
-
Shadow AI: Examples, Risks, and 8 Ways to Mitigate Them
Uncover the hidden risks of Shadow AI and learn 8 key strategies to address it. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/shadow-ai-examples-risks-and-8-ways-to-mitigate-them/
-
Generative KI boomt zunehmende Sicherheitsrisiken als Kehrseite der Medaille
Tags: aiFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/generative-ki-boom-sicherheitsrisiken
-
Microsoft Office 2016-Nutzer mit Copilot zwangsbeglückt
Die Woche ist mir erneut ein ein Fall untergekommen, wo Copilot, trotz gesetzter GPOs zum Deaktivieren, in Office 2016 auftaucht. Nachdem Sicherheitsforscher auf die erste Zero-Click-Schwachstelle in der KI-Anwendung Copilot gestoßen sind, greife ich das Thema nochmals hier im Blog auf. … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/14/microsoft-office-2016-nutzer-mit-copilot-zwangsbeglueckt/
-
Guardz Snags $56M to Grow AI Cybersecurity Platform for MSPs
Startup Boosts AI-Driven Detection, MSP Channel Outreach and Hiring With Series B. Guardz has secured $56 million to deepen AI-powered threat detection and enhance automation for MSPs. The Series B funding will support platform engineering, channel marketing and operational scaling as Miami-based Guardz targets a simplified and consolidated cybersecurity future. First seen on govinfosecurity.com Jump…
-
AI writes bad code faster than we can fix it
Tags: aiFirst seen on scworld.com Jump to article: www.scworld.com/perspective/ai-writes-bad-code-faster-than-we-can-fix-it
-
AI moderation guardrails circumvented by novel TokenBreak attack
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-moderation-guardrails-circumvented-by-novel-tokenbreak-attack
-
The hybrid defense model: How AI agents and human analysts are transforming MDR
First seen on scworld.com Jump to article: www.scworld.com/resource/the-hybrid-defense-model-how-ai-agents-and-human-analysts-are-transforming-mdr
-
Agentic AI Won’t Save the SOC, Yet
Opaque Decision-Making, Lack of Guardrails, Poor Auditability are Risks. The dream of replacing burned-out SOC analysts with autonomous AI agents is as premature as it is persistent. Cybersecurity leaders are finding that deploying such tools inside security operations centers may do less to eliminate toil than to shift it. First seen on govinfosecurity.com Jump to…
-
Meta AI is a ‘Privacy Disaster’, OK Boomer
More Meta mess: Pundits accuse Zuckerberg’s latest app of having a “dark pattern,” tricking the over 50s into oversharing. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/meta-ai-feed-privacy-richixbw/
-
Zero-Click Flaw in Microsoft Copilot Illustrates AI Agent, RAG Risks
Aim Security researchers found a zero-click vulnerability in Microsoft 365 Copilot that could have been exploited to have AI tools like RAG and AI agents hand over sensitive corporate data to attackers simply by issuing a request for the information in a specially worded email. Microsoft fixed the security flaw. First seen on securityboulevard.com Jump…
-
How identity management is shifting into the agent era
We’re witnessing a shift in enterprise architecture: AI agents are moving from supporting roles to autonomous actors that drive decisions, trigger transactions, and interact directly with APIs, often on behalf of users. As a result, identity management is evolving. Identity isn’t just for humans anymore, it’s becoming the security backbone for intelligent, non-human… First seen…
-
‘Dangerous’ vulnerability in GitLab Ultimate Enterprise Edition
Tags: access, ai, attack, authentication, best-practice, ceo, communications, control, cve, cvss, data, flaw, github, gitlab, incident response, injection, malicious, mfa, password, risk, service, vulnerabilityCVE-2025-2254, a cross-site scripting issue, which, under certain conditions, could allow an attacker to act like a legitimate user by injecting a malicious script into the snippet viewer.All GitLab CE/EE versions from 17.9 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2 are impacted;CVE-2025-0673, a vulnerability that can cause a denial of service by triggering…
-
First Known Zero-Click AI Exploit: Microsoft 365 Copilot’s ‘EchoLeak’ Flaw
Security researchers uncovered “EchoLeak,” a zero-click flaw in Microsoft 365 Copilot, exposing sensitive data without user action. Microsoft has mitigated the vulnerability. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-365-copilot-flaw-echoleak/
-
Identiverse 2025: Trust, Delegation, and the Era of Continuous Identity
Identiverse 2025 exposed the urgent need for NHI governance. From AI agents to orphaned credentials, NHIs and their sprawling secrets are today’s most overlooked risks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/identiverse-2025-trust-delegation-and-the-era-of-continuous-identity/
-
[Webinar] Securing AI-driven applications with DAST
Join us for a live webinar with application security experts and Escape clients – Seth Kirschner (DoubleVerify), Nathan Byrd (Applied Systems), Nick Semyonov (PandaDoc), as they break down how their teams are rethinking testing strategies to keep up with AI-influenced codebases. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/webinar-securing-ai-driven-applications-with-dast/
-
10.000 Blackwell-GPUs – Nvidia baut deutsche KI-Fabrik mit der Telekom
Die für Deutschland von Nvidia geplante KI-Fabrik mit 10.000 GPUs wird bis 2026 in Kooperation mit der Deutschen Telekom aufgebaut. First seen on computerbase.de Jump to article: www.computerbase.de/news/wirtschaft/10-000-blackwell-gpus-nvidia-baut-deutsche-ki-fabrik-mit-der-telekom.93142
-
ISMG Editors: Gartner Security & Risk Management Summit Recap
Security Leadership in Focus – From AI Risks to Cloud Responsibility. AI fragmentation, non-human identities and nation-state threats dominated conversations at the Gartner Security & Risk Management Summit. ISMG editors discuss how the event stood out for its vendor-neutral focus and strategic discussions tailored for senior security decision-makers. First seen on govinfosecurity.com Jump to article:…
-
First Known ‘Zero-Click’ AI Exploit: Microsoft 365 Copilot’s EchoLeak Flaw
Security researchers uncovered “EchoLeak,” a zero-click flaw in Microsoft 365 Copilot, exposing sensitive data without user action. Microsoft has mitigated the vulnerability. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-365-copilot-flaw-echoleak/
-
Arsen Launches AI-Powered Vishing Simulation to Help Organizations Combat Voice Phishing at Scale
Paris, France, 13th June 2025, CyberNewsWire First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/06/arsen-launches-ai-powered-vishing-simulation-to-help-organizations-combat-voice-phishing-at-scale/
-
Arsen Launches AI-Powered Vishing Simulation to Help Organizations Combat Voice Phishing at Scale
Paris, France, 13th June 2025, CyberNewsWire First seen on hackread.com Jump to article: hackread.com/arsen-launches-ai-powered-vishing-simulation-to-help-organizations-combat-voice-phishing-at-scale/
-
Datenschutz und KI-Nutzung – Kyndryl und Microsoft bündeln Kräfte für mehr Datensicherheit
First seen on security-insider.de Jump to article: www.security-insider.de/kyndryl-und-microsoft-buendeln-kraefte-fuer-mehr-datensicherheit-a-9c0a648e517da3e01b1f333cf800b539/
-
Datadog AI agent observability, security seek to boost trust
As AI agents mature, new tools aim to bolster their reliability and security with fresh visibility into automation workflows and more detailed troubleshooting. First seen on techtarget.com Jump to article: www.techtarget.com/searchitoperations/news/366625992/Datadog-AI-agent-observability-security-seek-to-boost-trust
-
Policymakers assess nuclear energy for AI data centers
Big tech vendors are recognizing the energy demands of their AI services, causing them to make significant energy investments. First seen on techtarget.com Jump to article: www.techtarget.com/searchcio/news/366625953/Policymakers-assess-nuclear-energy-for-AI-data-centers
-
Malware attack disguises itself as DeepSeek installer
Cybercriminals are exploiting the growing interest in open source AI models by disguising malware as a legitimate installer for DeepSeek. First seen on grahamcluley.com Jump to article: grahamcluley.com/malware-attack-disguises-itself-as-deepseek-installer/
-
EchoLeak: Erste AI 0-Click-Sicherheitslücke in Microsoft Copilot
Sicherheitsforscher sind auf die erste Zero-Click-Schwachstelle in einer KI-Anwendung gestoßen. Wenig überraschend für mich betrifft dies Microsoft 365 Copilot. Angreifer könnten Microsoft 365 Copilot über diese, als EchoLeak bezeichnete, Schwachstelle zu einer Datenexfiltration zwingen. Microsoft “stülpt” ja allen Office-Anwendern den … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/06/13/echoleak-erste-ai-0-click-sicherheitsluecke-in-microsoft-copilot/
-
Microsoft 365 Copilot: New Zero-Click AI Vulnerability Allows Corporate Data Theft
Researchers have found a flaw in Microsoft 365 Copilot that allows the exfiltration of sensitive corporate data with a simple email First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-365-copilot-zeroclick-ai/
-
Check Point kommentiert EU-Förderung zu mehr Cybersicherheit im Gesundheitswesen
Europa hat nun die Chance, eine Führungsrolle bei vertrauenswürdiger, transparenter KI für Cyber-Sicherheit zu übernehmen. Dazu muss der Schwerpunkt auf der Beschleunigung bewährter Lösungen, der Förderung sektorübergreifender Partnerschaften und der Entwicklung der nächsten Generation von Cyber-Talenten liegen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-kommentiert-eu-foerderung-zu-mehr-cybersicherheit-im-gesundheitswesen/a41130/