Tag: ai
-
Multiple payloads deployed via fake AI tool installers
First seen on scworld.com Jump to article: www.scworld.com/brief/multiple-payloads-deployed-via-fake-ai-tool-installers
-
Preview: Hot Sessions at Infosecurity Europe 2025 in London
Ransomware, Quantum Computing, Geopolitics, GenAI and More on the Agenda Infosecurity Europe is set to return June 3 to London. Hot topics at this year’s event include everything from quantum computing, geopolitics and artificial intelligence, to supply chain attacks, insider threats and the cybercrime juggernaut that continues to be ransomware. First seen on govinfosecurity.com Jump…
-
DeepSeek Upgrade Edges Model Closer to AI’s Frontline
New Open-Source Model Rivals OpenAI, While Treading Beijing’s Red Line. Artificial intelligence startup DeepSeek released Thursday an updated version of its flagship reasoning model months after its Chinese origin sent shockwaves through industry. The model is a glimpse into high-performance systems being trained and deployed under norms governed by Beijing. First seen on govinfosecurity.com Jump…
-
Why AI Hallucinations Are the Biggest Threat to Gen AI’s Adoption in Enterprises
In 2024, enterprise investments in generative AI skyrocketed. Microsoft alone committed over $10 billion to OpenAI, and according to a Gartner report, more than 80%…Read More First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2025/05/why-ai-hallucinations-are-the-biggest-threat-to-gen-ais-adoption-in-enterprises/
-
Genetic Data: Emerging Cyberthreats and Privacy Concerns
It’s only a matter of time before cybercriminals begin to use artificial intelligence-enabled tools, open-source software and other technologies to launch attacks to exploit sensitive genetic data, said Nicholas Morris, a practice manager at security firm Optiv. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/genetic-data-emerging-cyberthreats-privacy-concerns-i-5478
-
Linux Zero-Day Vulnerability Discovered Using Frontier AI
Vulnerability Researchers: Start Tracking LLM Capabilities, Says Veteran Bug Hunter. Large language models have taken a big step forward in their ability to help chase down code flaws, said a vulnerability researcher who successfully trained OpenAI’s o3 to review Linux kernel code, leading to the LLM – in an apparent first – discovering a new…
-
ISMG Editors: Are We Less Secure Despite the AI Buzz?
Also: Deepfake Dangers with Veo 3; Claude Opus 4’s Manipulative Edge. In this week’s update, Information Security Media Group editors questioned whether we’re less secure today despite agentic AI and platformization, examined Veo 3’s alarming leap in deepfake realism, and dug into Anthropic’s powerful yet problematic Claude Opus 4. First seen on govinfosecurity.com Jump to…
-
Autonomous Payment or Anarchy? AI Gets Purchasing Power
As Visa and Mastercard Deploy AI Agents, Experts Ask: Who Holds the Receipt?. When AI assistants order groceries or book flights, who’s responsible when something goes wrong? That question is no longer hypothetical. As Visa and Mastercard enable AI agents to perform transactions on behalf of cardholders, experts weigh the legal, security and privacy stakes.…
-
Beware: Weaponized AI Tool Installers Infect Devices with Ransomware
Cisco Talos has uncovered a series of malicious threats masquerading as legitimate AI tool installers, targeting unsuspecting users and businesses across multiple industries. These threats, including the CyberLock and Lucky_Gh0$t ransomware families, along with a newly identified destructive malware dubbed “Numero,” exploit the growing popularity of AI solutions in sectors like B2B sales, technology, and…
-
Vibe Coding Changed the Development Process
AI tools shook up development. Now, product security must change too. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/vibe-coding-changed-development-process
-
Smarter Defenses: How AI Improves Security for Low/No-Code and Vibe Coded Applications
Companies want results fast, and low/no-code (LCNC) and Vibe Coding platforms promise just that: rapid application development with either no coding or AI-generated coding. LCNC and Large Language Model (LLM) Vendors quickly release products to get ahead in the AI race. Organizations procure these products to implement right away aiming for quick returns on investment…
-
Tenable to Acquire AI Security Startup Apex
Apex will enhance Tenable’s AI Aware tool by mitigating the threats of AI applications and tools not governed by organizations, while enforcing existing security policies. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/tenable-acquire-ai-security-apex
-
NSA, CISA Urge Organizations to Secure Data Used in AI Models
New guidance includes a list of 10 best practices to protect sensitive data throughout the AI lifecycle as well as addressing supply chain and data poisoning risks. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/nsa-cisa-gudnceai-secure-data-ai-models
-
Hackers Use AI-Generated Videos on TikTok to Spread Info-Stealing Malware
TrendMicro has uncovered a sophisticated campaign where threat actors are exploiting TikTok to distribute information-stealing malware. By leveraging AI-generated videos posing as tutorials for unlocking pirated software, cybercriminals trick unsuspecting viewers into executing malicious PowerShell commands. These commands download dangerous malware strains such as Vidar and StealC, designed to harvest sensitive data from infected systems.…
-
Crims defeat human intelligence with fake AI installers they poison with ransomware
Take care when downloading AI freebies, researcher tells The Register First seen on theregister.com Jump to article: www.theregister.com/2025/05/30/fake_ai_installers_carry_ransomware/
-
Dreamteam KI und Cloud – Grenzen zwischen Cloud- und Edge-Computing verschwimmen
First seen on security-insider.de Jump to article: www.security-insider.de/grenzen-zwischen-cloud-und-edge-computing-verschwimmen-a-bdd32458bcd0c1dce405351111a3daaa/
-
Datenschutz ade: KI-Tool ortet Youtube-Nutzer anhand ihrer Kommentare
Ein KI-Tool soll die Herkunft von Youtube-Nutzern auf Basis ihrer Kommentare erraten können. Die Kosten: 20 US-Dollar pro Monat. First seen on golem.de Jump to article: www.golem.de/news/datenschutz-ade-ki-tool-ortet-youtube-nutzer-anhand-ihrer-kommentare-2505-196701.html
-
Securing Windows 11 and Server 2025: What CISOs should know about the latest updates
Susan Bradley / CSOYou can prevent Recall use by turning off the saving of snapshots and also disabling Click to Do. Alternatively, if you want to enable the service, I recommend setting a list of applications that you want filtered as well as excluding a list of URLs.In addition, you can set policies for Copilot.…
-
KI und Datenmanagement in der Cybersicherheit – Sicherheitsrelevante Daten aufspüren, anreichern und auswerten
First seen on security-insider.de Jump to article: www.security-insider.de/effiziente-security-operations-durch-ki-intelligente-datenverarbeitung-a-6ccdc83798ab0fff8d75b2517177e0ce/
-
Using AI to outsmart AI-driven phishing scams
Phishing scams used to be filled with awkward wording and obvious grammar mistakes. Not anymore. AI is now making it harder to distinguish what is real. According to Cofense, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/30/ai-phishing-defense/
-
AI agents have access to key data across the enterprise
82% of organizations already use AI agents, but only 44% of organizations report having policies in place to secure them, according to SailPoint. While 53% are in the process … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/05/30/ai-agents-organizations-risk/
-
What Is MCP? The New Protocol Reshaping AI Agent Security
Tags: aiAs AI agents take on more autonomous roles across the web, the Model Context Protocol (MCP) emerges as a promising, but risky, foundation for enabling secure, structured, and intent-aware interactions at scale. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/05/what-is-mcp-the-new-protocol-reshaping-ai-agent-security/
-
Poisoned models in fake Alibaba SDKs show challenges of securing AI supply chains
Malicious code in ML models is hard to detect: While Hugging Face hosts models directly, PyPI hosts Python software packages, so detection of poisoned models hidden inside Pickle files hidden inside packages could prove even harder for developers and PyPI’s maintainers, given the extra layer of obfuscation.The attack campaign discovered by ReversingLabs involved three packages:…
-
Webinar | How to Build a Platform-Based Defense Against Evolving Cyber Threats
Palo Alto Networks on How to Construct a Defense for Modern Threats. The rapid evolution of cyber threats, amplified by the integration of AI into adversarial tactics, calls for a shift in defensive strategies. Traditional approaches are no longer sufficient to address the sophistication, scale, and speed of modern attacks. First seen on govinfosecurity.com Jump…
-
Tenable Bolsters AI Controls With Apex Security Acquisition
Apex Security Detection Tools Help Tenable Spot Accidental and Malicious AI Misuse. Tenable is acquiring Israeli startup Apex Security to extend AI security features that go beyond asset discovery. With user-level controls and risk mitigation for AI usage, Tenable aims to accelerate its exposure management roadmap by integrating Apex into Tenable One later this year.…
-
Parties behind 2024 Biden AI robocall reach deal in lawsuit
The defendants will increase reporting on spoofing, create a compliance team or AI and conduct regular training for staff on how to identify deceptive messages and the dangers of misinformation in U.S. elections. First seen on cyberscoop.com Jump to article: cyberscoop.com/biden-ai-robocall-league-of-women-voters-lawsuit-life-corporation-voice-broadcasting/
-
Ransomware, Rewritten: How AI Is Fueling Both Sides of the Fight
First seen on scworld.com Jump to article: www.scworld.com/news/ransomware-rewritten-how-ai-is-fueling-both-sides-of-the-fight
-
Vectra AI Broadens its AI Agents to Bolster Cybersecurity for Customers
First seen on scworld.com Jump to article: www.scworld.com/news/vectra-ai-broadens-its-ai-agents-to-bolster-cybersecurity-for-customers