Tag: ai
-
The Code to Survival: Taiwan’s Cybersecurity Pivot Explained
Taiwan is gearing up to launch a state-of-the-art cybersecurity center this August, amid mounting threats from the Chinese state and rapidly advancing technologies like artificial intelligence and quantum computing. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/taiwan-to-launch-cybersecurity-center/
-
New “Slopsquatting” Threat Emerges from AI-Generated Code Hallucinations
AI code tools often hallucinate fake packages, creating a new threat called slopsquatting that attackers can exploit in… First seen on hackread.com Jump to article: hackread.com/slopsquatting-threat-ai-generated-code-hallucinations/
-
ChatGPT Image Generator Abused for Fake Passport Production
OpenAI’s ChatGPT image generator has been exploited to create convincing fake passports in mere minutes, highlighting a significant vulnerability in current identity verification systems. This revelation comes from the 2025 Cato CTRL Threat Report, which underscores the democratization of cybercrime through the advent of generative AI (GenAI) tools like ChatGPT. Historically, the creation of fake…
-
Bot Traffic Overtakes Human Activity as Threat Actors Turn to AI
Thales report reveals bots now account for 51% of all web traffic, surpassing human activity First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/bot-traffic-human-activity-threat/
-
Organizations Found to Address Only 21% of GenAI-Related Vulnerabilities
Pentesting firm Cobalt has found that organizations fix less than half of exploited vulnerabilities, with just 21% of generative AI flaws addressed First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/organizations-fix-half/
-
Constitutional Classifiers – KI testet Algorithmus zum verlässlichen Unterbinden von ‘KI-Jailbreaks”
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/ki-testet-algorithmus-zum-verlaesslichen-unterbinden-von-ki-jailbreaks-a-3a3f79513ea97e5f728805304207fb29/
-
Slopsquatting: Von KI erfundene Paketnamen gefährden Systeme
KI-gestützte Code-Assistenten schlagen wiederholt Paketnamen vor, die nicht existieren. Angreifer können diese nutzen, um Schadcode einzuschleusen. First seen on golem.de Jump to article: www.golem.de/news/slopsquatting-von-ki-erfundene-paketnamen-gefaehrden-systeme-2504-195371.html
-
Silicon Valley: Gehackte Ampeln geben KI-Stimmen von Musk und The Zuck aus
Aus mehreren Fußgängerampeln im Silicon Valley sind Ende letzter Woche unerwartet Deepfake-Stimmen prominenter Tech-Milliardäre zu hören gewesen. First seen on golem.de Jump to article: www.golem.de/news/silicon-valley-gehackte-ampeln-geben-ki-stimmen-von-musk-und-the-zuck-aus-2504-195366.html
-
Top Four Considerations for Zero Trust in Critical Infrastructure
Tags: access, ai, attack, authentication, automation, best-practice, breach, business, cctv, ceo, cloud, communications, compliance, corporate, cyber, cybersecurity, data, defense, email, encryption, exploit, finance, group, hacker, healthcare, identity, infrastructure, iot, law, malicious, mfa, nis-2, privacy, regulation, risk, saas, service, software, strategy, threat, tool, vulnerability, zero-trustTop Four Considerations for Zero Trust in Critical Infrastructure madhav Tue, 04/15/2025 – 06:43 TL;DR Increased efficiency = increased risk. Critical infrastructure organizations are using nearly 100 SaaS apps on average and 60% of their most sensitive data is stored in the cloud. Threat actors aren’t naive to this, leading to a whopping 93% of…
-
Agentic AI is both boon and bane for security pros
Recent agentic security signposts: Recently, we have seen numerous examples of how quickly building your own autonomous AI agents has taken root. Microsoft last month demonstrated six new AI agents that work with its Copilot software that talk directly to its various security tools to identify vulnerabilities, flag identity and asset compromises. Simbian is hosting…
-
Digitale Fragmentierung kostet B2B-Unternehmen Millionen
90 Prozent der Befragten zahlen für Tools mit sich überschneidenden Funktionen 77 Prozent nutzen nicht freigegebene KI-Tools mit Sicherheitsrisiken Viele B2B-Unternehmen in Deutschland lassen durch redundante Tools bares Geld liegen und riskieren somit ihre Wettbewerbsfähigkeit. Trotz wachsender Anforderungen an Effizienz, Sicherheit und Kundennähe kämpfen Go-to-Market-Teams (GTM) mit einer Vielzahl isolierter Systeme, die… First seen on…
-
OT-Security: Warum der Blick auf Open Source lohnt
Tags: ai, compliance, control, data, detection, edr, endpoint, Hardware, incident, incident response, intelligence, iot, microsoft, ml, monitoring, network, open-source, PCI, technology, threat, tool, vulnerability, vulnerability-managementAuch im OT-Security-Bereich stellen Open-Source-Lösungen eine kostengünstige Alternative zu kommerziellen Tools dar. Die zunehmende Digitalisierung und Vernetzung in der industriellen Produktion haben OT-Security (Operational Technology-Sicherheit) zu einem Kernthema in Unternehmen gemacht. Produktionsdaten, SCADA-Systeme (Supervisory Control and Data Acquisition) und vernetzte Maschinen sind in vielen Branchen essenziell und äußerst anfällig für Cyberangriffe. Ein Zwischenfall kann…
-
94% of firms say pentesting is essential, but few are doing it right
Organizations are fixing less than half of all exploitable vulnerabilities, with just 21% of GenAI app flaws being resolved, according to Cobalt. Big firms take longer to fix … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/04/15/regular-pentesting-strategy-for-organizations/
-
Meta Resumes E.U. AI Training Using Public User Data After Regulator Approval
Meta has announced that it will begin to train its artificial intelligence (AI) models using public data shared by adults across its platforms in the European Union, nearly a year after it paused its efforts due to data protection concerns from Irish regulators.”This training will better support millions of people and businesses in Europe, by…
-
eco kommentiert AI Continent Action Plan der EU-Kommission
Tags: aiFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/eco-kommentar-ai-continent-action-plan
-
AI Code Tools Widely Hallucinate Packages
The hallucination problem is not just pervasive, it is persistent as well, according to new research. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/ai-code-tools-widely-hallucinate-packages
-
Fraud in Your Inbox: Email Is Still the Weakest Link
At-Bay Cyber Insurance Claims Report Finds 83% of Financial Fraud Starts With Email. Financial fraud remains the leading driver of cyberinsurance claims, with 83% of cases traced back to email-based attacks. Common tactics used to deceive employees include wiring funds to fraudulent accounts, generative AI-crafted emails, executive and vendor impersonation and BEC scams. First seen…
-
Microsoft’s Recall AI Tool Is Making an Unwelcome Return
Microsoft held off on releasing the privacy-unfriendly feature after a swell of pushback last year. Now it’s trying again, with a few improvements that skeptics say still aren’t enough. First seen on wired.com Jump to article: www.wired.com/story/microsoft-recall-returns-privacy/
-
Seemplicity Adds AI Tools to Streamline Vulnerability Remediation
First seen on scworld.com Jump to article: www.scworld.com/news/seemplicity-adds-ai-tools-to-streamline-vulnerability-remediation
-
New Xanthorox AI Threat Puts MSSPs, MPS, and Security Teams on Notice
First seen on scworld.com Jump to article: www.scworld.com/news/new-xanthorox-ai-threat-puts-mssps-mps-and-security-teams-on-notice
-
Trend Micro Flags Incomplete Nvidia Patch That Leaves AI Containers Exposed
Trend Micro researchers flagging problems with Nvidia’s patch for a critical, code execution vulnerability in the Nvidia Container Toolkit. The post Trend Micro Flags Incomplete Nvidia Patch That Leaves AI Containers Exposed appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/trend-micro-flags-incomplete-nvidia-patch-that-leaves-ai-containers-exposed/
-
AI Awful at Fixing Buggy Code
LLMs Falter on Real-world Bugs, Even With Debugger Access: Microsoft. Artificial intelligence can code but it can’t debug says Microsoft after observing how large language models performed when given a series of real world software programming tests. Most LLMs struggle to resolve software bugs, even when given access to traditional developer tools such as debuggers.…
-
Meta to resume AI training on content shared by Europeans
Meta announced today that it will soon start training its artificial intelligence models using content shared by European adult users on its Facebook and Instagram social media platforms. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/technology/meta-to-resume-ai-training-on-content-shared-by-europeans/
-
Kritik an OpenAI: Experten warnen vor verkürzten Sicherheitstests
OpenAI hat offenbar seine Sicherheitstests verkürzt.OpenAI ist bekannt für seine KI-Projekte wie der GPT-Reihe, Codec, DALL-E und Whisper. Experten befürchten nun, dass das KI-Forschungsunternehmen seine KI-Angebote ohne angemessenen Schutz bereitstellen könnte.Laut einem Bericht der Financial Times (FT) gibt der Hersteller von ChatGPT seinen Mitarbeitenden und externen Gruppen nur noch wenige Tage Zeit, um die Risiken…
-
Hackers using AI-produced audio to impersonate tax preparers, IRS
Artificial Intelligence has supercharged an array of tax-season scams this year, with fraudsters using deepfake audio and other techniques to trick taxpayers into sending them money and financial documents. First seen on therecord.media Jump to article: therecord.media/hackers-use-ai-audio-to-impersonate-irs-tax-scams
-
Harmony-SaaS im Google-Cloud-Marketplace verfügbar
Check Point Software Technologies stellt Harmony-SaaS, die hauseigene Lösung zur Absicherung von SaaS-Umgebungen, ab sofort im Google-Cloud-Marketplace zur Verfügung. Google-Cloud-Kunden können Check Points KI-Lösung einsetzen, um innerhalb ihres SaaS-Ökosystems den Überblick zu behalten, Aktivitäten zu verstehen, alles sofort abzusichern und auf schnellstem Wege zu SaaS-Sicherheit auf Unternehmensniveau gelangen. Die Bereitstellung adressiert das in vielen Unternehmen…
-
EU’s GDPR Article 7 Poses New Challenges for Businesses To Secure AI-Generated Image Data
As businesses worldwide embrace digital transformation, the European Union’s General Data Protection Regulation (GDPR), enacted in 2018, remains a cornerstone of data privacy and security. A recent safety report highlighting the rapid advancement of artificial intelligence (AI) has renewed focus on GDPR compliance, particularly Article 7, which governs consent requirements for handling personal data, including…
-
Don’t Be Robotic About Your Robots’ Cybersecurity
If AI-powered robotics companies do not increase their investment in privacy and cybersecurity, they risk the promise of their innovations. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/04/dont-be-robotic-about-your-robots-cybersecurity/