Tag: ai
-
AI-supported spear phishing fools more than 50% of targets
First seen on thesecurityblogger.com Jump to article: www.thesecurityblogger.com/ai-supported-spear-phishing-fools-more-than-50-of-targets/
-
Greek authorities subject refugees to invasive surveillance
Greek border authorities are subjecting asylum seekers to invasive phone confiscations and artificial intelligence-powered surveillance, in another potential violation of European data protection laws First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366618223/Greek-authorities-subject-refugees-to-invasive-surveillance
-
SandboxAQ Partners with Google Cloud to Advance Quantitative AI in Enterprise Applications
SandboxAQ is teaming up with Google Cloud to revolutionise how Large Quantitative Models (LQMs) are developed, integrated, and deployed in enterprise environments. The partnership will see SandboxAQ utilize Google Cloud’s advanced infrastructure as its preferred cloud platform and leverage the Google Cloud Marketplace to streamline access to its cutting-edge solutions. SandboxAQ’s LQMs are at the…
-
Criminal IP Teams Up with OnTheHub for Digital Education Cybersecurity
AI SPERA announced today that it has partnered with education platform OnTheHub to provide its integrated cybersecurity solution, Criminal IP, to students and educational institutions. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/criminal-ip-teams-up-with-onthehub-for-digital-education-cybersecurity/
-
Neue Malware-Machtverteilung in Deutschland
Check Point Software Technologies hat seinen Global-Threat-Index für Dezember 2024 veröffentlicht, in dem die jüngsten Aktivitäten von Cyberkriminellen hervorgehoben werden. In diesem Monat machte Funksec auf sich aufmerksam, ein aufstrebender Ransomware-as-a-Service (RaaS)-Betreiber, der künstliche Intelligenz für seine Machenschaften nutzt. In Deutschland spielte der im November noch mit einem Anteil von 18,5 Prozent an allen Malware-Infektionen…
-
Almost 10% of GenAI Prompts Include Sensitive Data: Study
A study by cybersecurity startup Harmonic Security found that 8.5% of prompts entered into generative AI models like ChatGPT, Copilot, and Gemini last year included sensitive information, putting personal and corporate data at risk of being leaked. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/almost-10-of-genai-prompts-include-sensitive-data-study/
-
President Trump Scraps Biden’s AI Safety Executive Order
Trump Has Pledged to ‘Support AI Development’ But Not Yet Shared Specifics. President Donald Trump on the first day of his second term fulfilled a campaign promise to rescind a 2023 Biden executive order designed to curb the risk posed by artificial intelligence to consumers and national security. The Trump administration has not yet previewed…
-
Echtzeit-Deepfakes werden das neue Phishing
Ohne Zweifel: Die künstliche Intelligenz wird auch das Jahr 2025 bestimmen, auch und insbesondere in der Cybersecurity. Eines der Felder, in der sie schon einige Zeit eingesetzt wird, sind mittels Midjourney und ähnlichen Tools erstellte Fake-Bilder. Ein echter Meilenstein war hier wohl das Bild vom Papst in der weißen Daunenjacke, das im März 2023 veröffentlicht…
-
7 top cybersecurity projects for 2025
Tags: access, advisory, ai, backup, best-practice, breach, business, cio, ciso, cloud, compliance, control, cyber, cybersecurity, data, data-breach, detection, encryption, framework, google, governance, infrastructure, intelligence, law, mitigation, monitoring, network, resilience, risk, risk-management, service, strategy, technology, threat, tool, vulnerabilityAs 2025 dawns, CISOs face the grim reality that the battle against cyberattackers never ends. Strong and carefully planned cybersecurity projects are the best way to stay a step ahead of attackers and prevent them gaining the upper hand.”Urgency is the mantra for 2025,” says Greg Sullivan, founding partner of cybersecurity services firm CIOSO Global.…
-
API Security’s Role in Responsible AI Deployment
By now, you will almost certainly be aware of the transformative impact artificial intelligence (AI) technologies are having on the world. What you may not be aware of, however, is the role Application Programming Interfaces (APIs) are playing in the AI revolution. The bottom line is that APIs are critical to AI systems but […]…
-
Wie sich Cybersecurity mit KI im Jahr 2025 weiterentwickelt
Kürzlich veröffentlichte Google Cloud seinen Cybersecurity Forecast für das Jahr 2025 [1]. Der Bericht enthält zukunftsweisende Erkenntnisse mehrerer führender Sicherheitsverantwortlicher von Google Cloud darunter Google Threat Intelligence, Mandiant Consulting und das Office of the CISO von Google Cloud. Sie beschreiben unter anderem, wie die nächste Phase der künstlichen Intelligenz (KI) sowohl für Angreifer als… First…
-
Cybersecurity-Trends für 2025: Manipulative KI, Techno-Nationalismus und Risiken für Open-Source-Projekte
2025 markiert einen Wendepunkt im Bereich der Cybersecurity: Manipulative KI-Systeme, der wachsende Einfluss von Techno-Nationalismus und gezielte Angriffe auf Open-Source-Projekte treiben die Fragmentierung und Komplexität der Bedrohungsszenarien auf ein neues Niveau. Der aktuelle Threatscape Report 2025 zeigt eindringlich, welche Cyberherausforderungen dieses Jahr zu erwarten sind und wie dadurch die digitale Souveränität von Staaten und die……
-
Addressing the intersection of cyber and physical security threats
In this Help Net Security, Nicholas Jackson, Director of Cyber Operations at Bitdefender, discusses how technologies like AI, quantum computing, and IoT are reshaping … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/21/nicholas-jackson-bitdefender-emerging-technologies-threats/
-
The AI Revolution No One Saw Coming Until It Was Too Late
Tags: aiWith the AI revolution comes hidden security risks. Employees are embracing AI faster than businesses can secure it, exposing critical gaps in governance. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/the-ai-revolution-no-one-saw-coming-until-it-was-too-late/
-
Threat Intelligence’s Top Players Tackle Evolving Cyber Risk
Acquisitions, AI and Emerging Threats Define Strategy for Recorded Future, Google. From Google’s $5.4 billion acquisition of Mandiant to Recorded Future’s fraud insights following Mastercard’s $2.65 billion purchase, threat intelligence vendors are innovating with AI and are focused on operationalizing their data through automation and managed services. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/threat-intelligences-top-players-tackle-evolving-cyber-risk-a-27327
-
MY TAKE: Here’s why Donald Trump really needs to fully embrace Joe Biden’s cybersecurity EO
As one of his final official acts, President Joe Biden issued a landmark directive, addressing the evolving challenges posed by cyber threats while charting a strategic course toward a more secure digital ecosystem. Related: How Trump views of AI, “¦ (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/my-take-heres-why-donald-trump-really-needs-to-fully-embrace-joe-bidens-cybersecurity-eo/
-
Die EU als Vorbild bei der weltweiten KI-Regulierung
Mit dem EU-AI-Act hat die Europäische Union im Mai 2024 die weltweit erste umfassende Regulierung für künstliche Intelligenz verabschiedet. KI-Systeme mit inakzeptablem Risiko, etwa für Social-Scoring oder Emotionserkennung am Arbeitsplatz, sind in den Mitgliedsstaaten künftig verboten. KI-Systeme mit hohem Risiko hingegen sind zulässig, müssen aber in einer EU-Datenbank registriert werden und strenge Auflagen hinsichtlich Sicherheit,…
-
ChatGPT Crawler Vulnerability Abused to Trigger Reflexive DDoS Attacks
Security researchers have uncovered a severe vulnerability in OpenAI’s ChatGPT API, allowing attackers to exploit its architecture for launching Reflective Distributed Denial of Service (DDoS) attacks. This loophole, characterized by a high severity CVSS score of 8.6, raises significant concerns regarding the scalability and security of AI services deployed on cloud platforms, specifically Microsoft’s Azure.…
-
Product Walkthrough: How Satori Secures Sensitive Data From Production to AI
Every week seems to bring news of another data breach, and it’s no surprise why: securing sensitive data has become harder than ever. And it’s not just because companies are dealing with orders of magnitude more data. Data flows and user roles are constantly shifting, and data is stored across multiple technologies and cloud environments.…
-
FunkSec Ransomware Dominating Ransomware Attacks, Compromised 85 Victims In December
FunkSec is a RaaS operator that makes use of artificial intelligence and demonstrates how threat actor strategies are constantly evolving. The analysis reveals that artificial intelligence has limited sophistication, even though it enables rapid operations scaling and the generation of ransomware. Claims that have been recycled or fabricated undermine credibility and suggest that there may…
-
Sage Copilot grounded briefly to fix AI misbehavior
‘Minor issue’ with showing accounting customers ‘unrelated business information’ required repairs First seen on theregister.com Jump to article: www.theregister.com/2025/01/20/sage_copilot_data_issue/
-
How organizations can secure their AI code
Tags: ai, application-security, awareness, backdoor, breach, business, chatgpt, ciso, compliance, control, credentials, crime, cybersecurity, data, data-breach, finance, github, healthcare, LLM, malicious, ml, open-source, organized, programming, risk, risk-management, software, startup, strategy, supply-chain, technology, tool, training, vulnerabilityIn 2023, the team at data extraction startup Reworkd was under tight deadlines. Investors pressured them to monetize the platform, and they needed to migrate everything from Next.js to Python/FastAPI. To speed things up, the team decided to turn to ChatGPT to do some of the work. The AI-generated code appeared to function, so they…
-
Midsize firms universally behind in slog toward DORA compliance
Tags: ai, business, ciso, compliance, cybersecurity, dora, finance, germany, insurance, intelligence, monitoring, resilience, risk, service, skills, technology, toolBeginning Friday, Jan. 17, all EU financial institutions are now required to operate in compliance with the Digital Operational Resilience Act (DORA). The EU directive aims to increase cybersecurity in the financial industry. However, studies show that many companies are still struggling with implementation.According to a November 2024 survey from metafinanz, the average level of…
-
Trends für den digitalen Arbeitsplatz im Jahr 2025
Tags: aiDer digitale Arbeitsplatz entwickelt sich ständig weiter und wird von der Welt um ihn herum beeinflusst. Die Notwendigkeit, sich mit dem Klimawandel auseinanderzusetzen, hat weiterhin großen Einfluss auf Unternehmen und ihre Aktivitäten in ganz Europa. Darüber hinaus wird die faire und respektvolle Behandlung von Arbeitnehmern immer wichtiger. Der Einsatz generativer KI nimmt explosionsartig zu, und……
-
Direkt vor den Augen der Nutzer: Angreifer schmuggeln Malware in Bilder auf Website
Malware-by-Numbers-Kits und GenAI machen Cyberkriminellen das Leben leichter als jemals zuvor. HP veröffentlicht seinen neuesten Threat Insights Report, der zeigt, wie Cyberkriminelle Malware-Kits und generative künstliche Intelligenz (GenAI) einsetzen, um effizientere Angriffe zu entwickeln [1]. Die neusten Tools reduzieren nicht nur den Zeitaufwand für die Erstellung von neuen Angriffskomponenten, sondern auch die erforderlichen Fähigkeiten…. First…
-
AI-driven insights transform security preparedness and recovery
In this Help Net Security interview, Arunava Bag, CTO at Digitate, discusses how organizations can recover digital operations after an incident, prioritize cybersecurity … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/20/arunava-bag-digitate-securing-digital-operations/
-
One in ten GenAI prompts puts sensitive data at risk
Despite their potential, many organizations hesitate to fully adopt GenAI tools due to concerns about sensitive data being inadvertently shared and possibly used to train … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/01/20/genai-prompts-risk/
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 29
Tags: ai, attack, credit-card, group, injection, international, malware, ransomware, service, wordpressSecurity Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Stealthy Credit Card Skimmer Targets WordPress Checkout Pages via Database Injection Ransomware on ESXi: The mechanization of virtualized attacks FunkSec Alleged Top Ransomware Group Powered by AI Abusing AWS Native Services: Ransomware Encrypting S3 Buckets […]…