Tag: ai
-
Security leaders top 10 takeaways for 2024
Tags: access, ai, attack, automation, best-practice, breach, business, ciso, cloud, compliance, corporate, crowdstrike, cybercrime, cybersecurity, data, deep-fake, detection, email, finance, fraud, governance, group, guide, hacker, identity, incident response, infosec, ISO-27001, office, okta, phishing, privacy, programming, regulation, risk, risk-management, saas, security-incident, service, software, startup, strategy, technology, threat, tool, training, vulnerabilityThis year has been challenging for CISOs, with a growing burden of responsibility, the push to make cybersecurity a business enabler, the threat of legal liability for security incidents, and an expanding attack landscape.As the year comes to a close, CISOs reflect on some of the takeaways that have shaped the security landscape in 2024.…
-
How companies can address bias and privacy challenges in AI models
In this Help Net Security interview, Emre Kazim, Co-CEO of Holistic AI, discusses the need for companies to integrate responsible AI practices into their business strategies … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/16/emre-kazim-holistic-ai-strategy/
-
Cloud Access Security Broker ein Kaufratgeber
Tags: access, ai, api, authentication, cisco, cloud, compliance, control, cyberattack, data, detection, endpoint, exploit, gartner, governance, intelligence, mail, malware, microsoft, monitoring, network, phishing, ransomware, risk, saas, service, software, startup, threat, tool, zero-day, zero-trust -
Resecurity introduces Government Security Operations Center (GSOC) at NATO Edge 2024
Resecurity unveils AI-powered GSOC at NATO Edge 2024, integrating VR for advanced cybersecurity. Tailored for MSSPs, it enhances… First seen on hackread.com Jump to article: hackread.com/resecurity-government-security-operations-center-gsoc-nato-edge-2024/
-
Platforms are the Problem
Tags: ai, breach, business, chatgpt, cloud, cyber, cybercrime, cybersecurity, data, defense, detection, finance, firewall, fraud, infrastructure, intelligence, LLM, network, saas, service, technology, threat, toolA better path forward for cybersecurity Why is it that cybersecurity is struggling to keep pace with the rapidly evolving threat landscape? We spend more and more, tighten our perimeters, and still there are trillions of dollars being lost to cybercrime and cyber attacks. Setting aside the direct costs to individuals and businesses, and the…
-
Wie künstliche Intelligenz Authentifizierungstechnologien noch sicherer macht KI trifft auf PAM
»Die Zeit läuft nicht, sie rennt.« Friedrich Schillers Zitat trifft vor allem auf Cyberbedrohungen zu: diese werden nicht nur zunehmend komplexer, sondern entwickeln sich in rasantem Tempo weiter. Traditionelle Sicherheitsmaßnahmen stoßen immer häufiger an ihre Grenzen. In Sachen Authentifizierung zur kritischen Unternehmensinfrastruktur wird es besonders heikel insbesondere, wenn es sich um privilegierte Konten handelt. Über sie…
-
Microsoft’s AI Recall Tool Is Still Sucking Up Credit Card and Social Security Numbers
Plus: The US indicts North Koreans in fake IT worker scheme, file-sharing firm Cleo warns customers to patch a vulnerability amid live attacks, and more. First seen on wired.com Jump to article: www.wired.com/story/microsoft-recall-credit-card-social-security-numbers/
-
IT-Trends 2025: Künstliche Intelligenz wird wichtiger Wirtschaftsfaktor
GPU-Server und Green Computing ebnen den Weg für KI-Transformation 2025. Immer mehr Geschäftsprozesse werden durch den Einsatz unterschiedlicher KI-gestützter Funktionen optimiert. Schon heute erstellt künstliche Intelligenz für uns Präsentationen und Texte, berechnet komplexe Aufgaben, analysiert Big Data oder beantwortet sogar Kundenanfragen in Form von Chatbots. Wer in der freien Wirtschaft mithalten will, kommt in……
-
Podcast Episode 21: Interview with the University of Richmond’s CTF Winning Team
What happens when passion, talent, and opportunity collide in the university’s tech scene? Meet David Nathanson and Daniel Garay, the freshmen duo who took the University of Richmond’s Capture the Flag (CTF) competition by storm. With David bringing his coding journey from Nicaragua and Daniel harnessing his self-taught skills in AI and machine learning, they”¦…
-
Time of Reckoning Reviewing My 2024 Cybersecurity Predictions
Tags: ai, attack, automation, awareness, breach, business, chatgpt, china, compliance, cyber, cyberattack, cybercrime, cybersecurity, data, data-breach, disinformation, election, espionage, exploit, healthcare, incident response, infrastructure, jobs, law, linkedin, malware, monitoring, moveIT, phishing, privacy, ransomware, regulation, risk, russia, service, software, supply-chain, technology, threat, tool, ukraine, update, vulnerability, warfare, zero-dayThe brutal reality is that cybersecurity predictions are only as valuable as their accuracy. As 2024 comes to a close, I revisit my forecasts to assess their utility in guiding meaningful decisions. Anyone can make predictions (and far too many do), but actually being correct is another matter altogether. It is commonplace for security companies…
-
ISMG Editors: CEO Shooting Sparks AI Accountability Debate
Also: How Leading Cybersecurity Firms are Gearing up for 2025. In the latest weekly update, ISMG editors discussed the shooting death of the UnitedHealthcare CEO and its wider implications for AI-driven decision-making, market strategies for the top cybersecurity companies in 2025 and they are reflecting industry trends. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ismg-editors-ceo-shooting-sparks-ai-accountability-debate-a-27060
-
Generative AI Security Tools Go Open Source
Businesses deploying large language models and other GenAI systems have a growing collection of open source tools for testing AI security. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/generative-ai-breaking-tools-go-open-source
-
UnitedHealth’s Optum left an AI chatbot, used by employees to ask questions about claims, exposed to the internet
Optum’s AI chatbot was found exposed online at a time when the healthcare giant faces scrutiny for its use of AI to allegedly deny patient claims. First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/13/unitedhealthcares-optum-left-an-ai-chatbot-used-by-employees-to-ask-questions-about-claims-exposed-to-the-internet/
-
With ‘TPUXtract,’ Attackers Can Steal Orgs’ AI Models
A new side-channel attack method is a computationally practical way to infer the structure of a convolutional neural network, meaning that cyberattackers or rival companies can plagiarize AI models and take their data for themselves. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/tpuxtract-attackers-steal-ai-models
-
UnitedHealthcare’s Optum left an AI chatbot, used by employees to ask questions about claims, exposed to the internet
Optum’s AI chatbot was found exposed online at a time when the healthcare giant faces scrutiny for its use of AI to allegedly deny patient claims. First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/13/unitedhealthcares-optum-left-an-ai-chatbot-used-by-employees-to-ask-questions-about-claims-exposed-to-the-internet/
-
Survey: AI-enhanced cyberattacks seen as No. 1 threat to API security
First seen on scworld.com Jump to article: www.scworld.com/news/survey-ai-enhanced-cyberattacks-seen-as-number-one-threat-to-api-security
-
Leveraging AI and public data to gain control over third-party risk
First seen on scworld.com Jump to article: www.scworld.com/resource/leveraging-ai-and-public-data-to-gain-control-over-third-party-risk
-
Cyberint’s 2024 Report Highlights Surge in Credential Theft and Rise of AI-Powered Phishing
Cyberint, a Check Point company, has released its 2024 Cyber Security Landscape Report, painting a concerning picture of the evolving threat landscape. The report, drawing on data from the Cyberint Argos Platform, analysed 140,000 cyber threat alerts across critical industries, revealing a 333% surge in credential theft, a significant rise in supply chain attacks, and…
-
Analysis: AI-Powered Cyberattacks Are Here, But Real Threat Is Still Humans With A Keyboard
CrowdStrike’s Adam Meyers says manual attacks from hackers remain a massive problem for organizations even in the era of AI-driven cyberattacks. First seen on crn.com Jump to article: www.crn.com/news/security/2024/analysis-ai-powered-cyberattacks-are-here-but-real-threat-is-still-humans-with-a-keyboard
-
Autonomous Discovery of Critical Zero-Days in popular AI platforms
First seen on thesecurityblogger.com Jump to article: www.thesecurityblogger.com/autonomous-discovery-of-critical-zero-days-in-popular-ai-platforms/
-
Artificial Intelligence Looms Large at Black Hat Europe
Open Questions: What’s Next Killer Use Case? Can Output Be Better Validated?. The topic of AI reality versus hype, as well as what the next killer use cases might be, dominated the wrap-up Locknote panel at this year’s annual Black Hat Europe in London, comprised of conference Review Board members detailing this year’s hot topics,…
-
Ultralytics Supply-Chain Attack
Last week, we saw a supply-chain attack against the Ultralytics AI library on GitHub. A quick summary: On December 4, a malicious version 8.3.41 of the popular AI library ultralytics ”, which has almost 60 million downloads”, was published to the Python Package Index (PyPI) package repository. The package contained downloader code that was downloading…
-
Human Misuse Will Make Artificial Intelligence More Dangerous
AI creates what it’s told to, from plucking fanciful evidence from thin air, to arbitrarily removing people’s rights, to sowing doubt over public misdeeds. First seen on wired.com Jump to article: www.wired.com/story/human-misuse-will-make-artificial-intelligence-more-dangerous/
-
How to Generate a CrowdStrike RFM Report With AI in Tines
Run by the team at orchestration, AI, and automation platform Tines, the Tines library contains pre-built workflows shared by real security practitioners from across the community, all of which are free to import and deploy via the Community Edition of the platform. Their bi-annual “You Did What with Tines?!” competition highlights some of the most…
-
KI-gestützte Bedrohungen und Schwachstellen in der Lieferkette dominieren Europas Bedrohungslandschaft
Cyberint, ein Unternehmen von Check Point, stellt in neuestem Bericht einen Anstieg von 333 Prozent bei Datendiebstählen fest und warnt vor KI-getriebener Ransomware. Cyberint, jetzt Check Point External Risk Management, hat in seinem Bericht alarmierende Erkenntnisse veröffentlicht, welche die rasante Entwicklung von Cyber-Bedrohungen behandeln. Der Bericht zeigt einen Anstieg des […] First seen on netzpalaver.de…
-
KI-gestützte Bedrohungen und Schwachstellen in der Lieferkette dominieren in Europa
Der Bericht ‘Europe Threat Landscape Report 2024-2025″ bietet Organisationen ein hilfreiches Framework, um sich in der Cyber-Bedrohungslandschaft zurechtzufinden und auf die bevorstehenden Herausforderungen vorbereiten zu können. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/ki-gestuetzte-bedrohungen-und-schwachstellen-in-der-lieferkette-dominieren-in-europa/a39257/
-
KI in der Cybersecurity – KI-gestützte Anomalieerkennung gegen komplexe Cyberangriffe
First seen on security-insider.de Jump to article: www.security-insider.de/ki-cybersicherheit-revolution-cybersecurity-deutschland-a-84ad6aa4e77b886d3825758b0b2d5b90/
-
FuzzyAI: Open-source tool for automated LLM fuzzing
FuzzyAI is an open-source framework that helps organizations identify and address AI model vulnerabilities in cloud-hosted and in-house AI models, like guardrail bypassing and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/13/fuzzyai-automated-llm-fuzzing/
-
Mass Breaches in the Age of AI
Targeted Scams & What to do About Them Chris Clements, VP of Solutions Architecture Companies that have suffered massive data breaches are quick to downplay the risks, but they’re ignoring the elephant in the room: the sheer volume of personal information that’s been exposed. Nothing to See Here, Folks! The age-old refrain of “don’t worry,……