Tag: ai
-
Hackers Monetize LLMjacking, Selling Stolen AI Access for $30 per Month
LLMjacking attacks target DeepSeek, racking up huge cloud costs. Sysdig reveals a black market for LLM access has… First seen on hackread.com Jump to article: hackread.com/hackers-monetize-llmjacking-selling-stolen-ai-access/
-
French AI Action Summit, What Can We Expect?
Summit to Focus on Open-Source, AI Governance and Development. The historic presidential Élysée Palace in Central Paris will host world leaders, tech CEOs and researchers for the French AI Action Summit, a two-day event that will commence on Monday. U.S. Vice President JD Vance, OpenAI CEO Sam Altman and Google’s Sundar Pichai will be on…
-
Asian Governments Rush to Ban DeepSeek Over Privacy Concerns
Governments Are Skeptical of Chinese A1 Platform’s Data Security Controls. Countries across Asia are racing to ban government officials, national agencies and critical infrastructure organizations from using Chinese artificial intelligence company DeepSeek’s open-source chatbot application, citing data security and privacy risks. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/asian-governments-rush-to-ban-deepseek-over-privacy-concerns-a-27476
-
US lawmakers move to ban DeepSeek AI tool
US politicians have introduced a bill seeking to ban the use of the DeepSeek AI tool on government-owned devices, citing national security concerns due to its alleged links to the Chinese state First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366619153/US-lawmakers-move-to-ban-DeepSeek-AI-tool
-
Channel Brief: Oracle NetSuite Adds New AI Capabilities
First seen on scworld.com Jump to article: www.scworld.com/news/channel-brief-oracle-netsuite-adds-new-ai-capabilities
-
SuperOps Earmarks $25M Series C for Endpoint, AI Tools
First seen on scworld.com Jump to article: www.scworld.com/news/superops-earmarks-25m-series-c-for-endpoint-ai-tools
-
Attackers hide malicious code in Hugging Face AI model Pickle files
Tags: ai, data, github, malicious, ml, open-source, programming, remote-code-execution, risk, service, software, threat, tool, vulnerabilityLike all repositories of open-source software in recent years, AI model hosting platform Hugging Face has been abused by attackers to upload trojanized projects and assets with the goal of infecting unsuspecting users. The latest technique observed by researchers involves intentionally broken but poisoned Python object serialization files called Pickle files.Often described as the GitHub…
-
ISMG Editors: AI Security Wake-Up Call From DeepSeek
Tags: ai, api, ciso, data, data-breach, governance, leak, open-source, risk, risk-management, vulnerabilityAlso: Addressing AI Vulnerabilities and Governance Challenges. DeepSeek, an advanced open-source AI model, is under scrutiny for its safety guardrails failing multiple security tests and a data leak that exposed user information and API keys. Sam Curry, CISO at Zscaler, discusses AI security, risk management and upcoming U.S. policy changes. First seen on govinfosecurity.com Jump…
-
IT Teams Worry About Increasing Cost of Cyber Tools From AI Features, While Criminals Barely Use Them
Most IT leaders believe generative AI will increase the cost of their security tools, according to Sophos research. But, by the looks of cyber crime forums, hackers are barely using AI. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/ai-cybersecurity-costs/
-
AI Security is API Security: What CISOs and CIOs Need to Know
Just when CIOs and CISOs thought they were getting a grip on API security, AI came along and shook things up. In the past few years, a huge number of organizations have adopted AI, realizing innumerable productivity, operational, and efficiency benefits. However, they’re also having to deal with unprecedented API security challenges. Wallarm’s Annual 2025…
-
Securing Autonomous AI Workflows Through Advanced Single Sign-On
Single Sign-On (SSO) is transforming how AI agents authenticate across systems. This article explores SSO’s role in enhancing security, enforcing least-privilege access, and enabling real-time threat detection for autonomous AI workflows. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/securing-autonomous-ai-workflows-through-advanced-single-sign-on/
-
ThreatMate Raises $3.2 Million for Attack Surface Management Platform
ThreatMate has raised $3.2 million in seed funding for its AI-powered attack surface management solution for MSPs. The post ThreatMate Raises $3.2 Million for Attack Surface Management Platform appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/threatmate-raises-3-2-million-for-attack-surface-management-platform/
-
Yahoo Finance: U.S. Lawmakers Push to Ban China’s DeepSeek AI Over Security Risks Feroot Security Analysis
Washington, D.C. U.S. lawmakers announced a bill to ban DeepSeek, the Chinese AI chatbot app, from government devices following a security analysis by Feroot Security that revealed alarming privacy and national security risks. The research suggests that DeepSeek collects user data, including digital fingerprints, login credentials, and behavioral information, potentially sending it to servers…The post…
-
Securing GAI-Driven Semantic Communications: A Novel Defense Against Backdoor Attacks
Semantic communication systems, powered by Generative AI (GAI), are transforming the way information is transmitted by focusing on the meaning of data rather than raw content. Unlike traditional communication methods, these systems encode semantic features such as text, images, or speech into low-dimensional vectors, significantly reducing bandwidth usage while maintaining the integrity of transmitted information.…
-
7,000 Exposed Ollama APIs Leave DeepSeek AI Models Wide Open to Attack
UpGuard discovers exposed Ollama APIs revealing DeepSeek model adoption globally. See where these AI models are running and the security risks involved. First seen on hackread.com Jump to article: hackread.com/exposed-ollama-apis-leave-deepseek-ai-models-attack/
-
Malicious AI Models on Hugging Face Exploit Novel Attack Technique
The technique, called nullifAI, allows the models to bypass Hugging Face’s protective measures against malicious AI models First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/malicious-ai-models-hugging-face/
-
7AI Streamlines Security Operations With Autonomous AI Agents
Cybereason co-founders launch their second act with a security startup focused offering a platform that uses agentic AI to offload repetitive tasks commonly performed by security analysts. First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/7ai-streamlines-security-operations-with-autonomous-ai-agents
-
Platform-Engineering im KI-Zeitalter
Red Hat hat einen Bericht zum Stand des Platform-Engineering im Zeitalter der künstlichen Intelligenz erstellt. Er untersucht Trends, Herausforderungen und Best-Practices, um besser zu verstehen, wie und warum Unternehmen Platform-Engineering-Verfahren implementieren. Der Report basiert auf einer weltweiten Umfrage unter 1.000 Plattformingenieuren und IT-Entscheidungsträgern. Platform-Engineering hat die Art und Weise verändert, wie Unternehmen Anwendungen entwickeln, bereitstellen…
-
Microsoft Edge update adds AI-powered Scareware Blocker
Microsoft Edge 133 is now rolling out globally, and it ships with several improvements, including a new scareware blocker feature. In addition, Microsoft is updating the backend of the Downloads UI with performance improvements. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-edge-update-adds-ai-powered-scareware-blocker/
-
Infinity-Plattform von Check Point erhält neue KI-Funktionen
Tags: aiDie neuen und verbesserten KI-gestützten Innovationen von Check Point beschleunigen dagegen den Betrieb und verbessern die Bedrohungsabwehr auf drei Arten: First seen on infopoint-security.de Jump to article: www.infopoint-security.de/infinity-plattform-von-check-point-erhaelt-neue-ki-funktionen/a39700/
-
Taiwan’s DeepSeek Ban Reflects Global Concerns Over AI Security
The Taiwan government’s recent decision to implement a ban on the use of the DeepSeek artificial intelligence chatbot within its public sector has drawn significant attention to the growing global concerns regarding AI security. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/taiwans-deepseek-ban/
-
Developers Beware! Malicious ML Models Found on Hugging Face Platform
In a concerning development for the machine learning (ML) community, researchers from ReversingLabs have uncovered malicious ML models on the Hugging Face platform, a popular hub for AI collaboration. Dubbed “nullifAI,” this novel attack method leverages vulnerabilities in the widely used Python Pickle serialization format to execute malicious code on unsuspecting systems. The discovery highlights…
-
Hackers Exploit DeepSeek Qwen AI Models for Malware Development
Check Point Research (CPR) has revealed that cybercriminals are increasingly leveraging the newly launched AI models, DeepSeek and Qwen, to create malicious content. These models, which lack robust anti-abuse provisions, have quickly become a preferred choice for threat actors over more regulated platforms like ChatGPT. The exploitation of these tools highlights a concerning shift in…
-
Former Google Engineer Charged for Allegedly Stealing AI Secrets for China
A federal grand jury has indicted Linwei Ding, also known as Leon Ding, a former Google software engineer, on four counts of theft of trade secrets. The charges stem from allegations that Ding stole proprietary artificial intelligence (AI) technologies from Google and shared them with companies based in the People’s Republic of China (PRC). According…
-
Recaptcha: Google trackt, KI trainiert, Datenschützer schauen zu
An der Sicherheitstechnik Recaptcha hagelt es Kritik. Die zuständige Hamburger Datenschutzbehörde will dennoch nicht dagegen vorgehen. First seen on golem.de Jump to article: www.golem.de/news/recaptcha-google-trackt-ki-trainiert-datenschuetzer-schauen-zu-2502-192985.html
-
Vectra AI möchte Nachwuchs fördern – Stipendienprogramm für Talente in der Cybersicherheit gestartet
First seen on security-insider.de Jump to article: www.security-insider.de/-vectra-ai-stipendienprogramm-ki-cybersicherheit-a-2b6d52ea9351d3ea005adb9eaa5b5669/
-
DeepSeek iOS App Leaks Data to ByteDance Servers Without Encryption
DeepSeek iOS app”, a highly popular AI assistant recently crowned as the top iOS app since its January 25 release”, has been discovered to transmit sensitive user data to ByteDance servers without encryption. The security flaws, uncovered by mobile app security firm NowSecure, have prompted swift reactions from governments, enterprises, and cybersecurity experts worldwide. The…
-
Ethische und datenschutzrechtliche Erwägungen beim KI-Einsatz – Vertrauen in KI oder Zero-Trust?
First seen on security-insider.de Jump to article: www.security-insider.de/cybergefahren-durch-ki-zero-trust-strategien-dsgvo-compliance-a-b0be51d3fbd18f47bafd66cb9da43336/