Tag: ai
-
Angriff über Linkedin: Wie ein Entwickler mit KI eine Malware-Attacke entlarvt hat
Eine angebliche Recruiterin wollte einem Python-Entwickler über Linkedin Malware unterschieben. Ein KI-Tool half ihm dabei, den Angriff zu vereiteln. First seen on golem.de Jump to article: www.golem.de/news/linkedin-wie-ein-entwickler-mittels-ki-eine-schadcodeattacke-entlarven-konnte-2606-209862.html
-
Softwareprojekt mit Backdoor: Malware-Attacke über Linkedin mittels KI enttarnt
Eine angebliche Recruiterin wollte einem Python-Entwickler über Linkedin Malware unterschieben. Ein KI-Tool half ihm dabei, den Angriff zu vereiteln. First seen on golem.de Jump to article: www.golem.de/news/linkedin-wie-ein-entwickler-mittels-ki-eine-schadcodeattacke-entlarven-konnte-2606-209862.html
-
Staffing Is Top SOC Challenge Even as AI Proliferates, Says SANS
SANS Institute study finds few SOCs have built AI into defined workflows, despite widespread adoption First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/staffing-top-soc-challenge-ai/
-
Wie ein Entwickler mittels KI eine Schadcodeattacke entlarven konnte
Eine angebliche Recruiterin wollte einem Python-Entwickler über Linkedin Malware unterschieben. Ein KI-Tool half ihm dabei, das rechtzeitig zu erkennen. First seen on golem.de Jump to article: www.golem.de/news/linkedin-wie-ein-entwickler-mittels-ki-eine-schadcodeattacke-entlarven-konnte-2606-209862.html
-
FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data
FulcrumSec leaked data stolen from Novo Nordisk, claiming to have exfiltrated 1.3TB, including clinical records and AI research assets. On June 15, 2026, a data-theft extortion group calling itself FulcrumSec began leaking files from Novo Nordisk, the Danish maker of Ozempic and Wegovy, after the company refused a $25 million ransom demand. The attackers claimed…
-
Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats
Cybersecurity researchers have flagged a “coordinated malware campaign” on the JetBrains Marketplace that has published no less than 15 malicious plugins capable of exfiltrating artificial intelligence (AI) provider keys.”Every plugin poses as an AI coding assistant built on DeepSeek and other large language models, offering chat, commit messages, code review, bug finding, and unit tests,”…
-
15 Malicious JetBrains Plugins Caught Stealing DeepSeek, OpenAI API Keys
Hackers are using 15 malicious JetBrains plugins posing as AI coding assistants to steal DeepSeek, OpenAI, and other developer API keys. First seen on hackread.com Jump to article: hackread.com/malicious-jetbrains-plugins-steal-deepseek-openai-api-keys/
-
144 Mastra npm Packages Compromised via Hijacked Contributor Account
As many as 144 npm packages associated with the Mastra namespace (“@mastra/*”), a popular open-source JavaScript and TypeScript framework for building artificial intelligence (AI) applications, have been compromised as part of a software supply chain attack codenamed easy-day-js, per findings from JFrog, SafeDep, Socket, and StepSecurity.”A single npm account (ehindero) mass-published more First seen on…
-
JFrog-Plugin für Claude Code bringt Software-Supply-Chain-Security und Governance für KI-Coding-Agenten
KI-Agenten sind längst nicht mehr nur Assistenzsysteme für Entwickler. Sie analysieren Code, schlagen Abhängigkeiten vor, erzeugen Builds und können Plattformaufgaben automatisieren. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/jfrog-plugin-fuer-claude-code-bringt-software-supply-chain-security-und-governance-fuer-ki-coding-agenten/a45515/
-
Exportkontrollen der US-Regierung: USA verweigern G7-Staaten Zugriff auf Anthropic-KI
Die US-Regierung lehnt Ausnahmen ab. Wegen Exportkontrollen hat Anthropic seine neuesten KI-Modelle weltweit abgeschaltet. First seen on golem.de Jump to article: www.golem.de/news/exportkontrollen-der-us-regierung-usa-verweigern-g7-staaten-zugriff-auf-anthropic-ki-2606-209851.html
-
Historischer Anstieg: KI lässt Anzahl gemeldeter Sicherheitslücken explodieren
Tags: aiNeuen Hochrechnungen zufolge könnten 2026 etwa 66.000 neue Sicherheitslücken registriert werden. Im Vorjahr waren es noch deutlich weniger. First seen on golem.de Jump to article: www.golem.de/news/historischer-anstieg-ki-laesst-anzahl-gemeldeter-sicherheitsluecken-explodieren-2606-209853.html
-
The SOC’s visibility gap comes down to staffing
AI has settled into security operations centers faster than any earlier wave of technology. Around four in five practitioners report reaching for AI or machine learning tools … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/17/sans-ai-in-the-soc/
-
JetBrains Plugin Security Alert: 70,000+ Installs Linked to AI Key Theft
A coordinated supply chain attack targeting JetBrains IDE users has exposed over 70,000 developers to silent credential theft. The campaign involves at least 15 malicious plugins distributed via the JetBrains Marketplace, masquerading as AI-powered coding assistants built on models such as DeepSeek. While these plugins function as advertised, offering features like code review, chat, and…
-
Best Practices für Anwendungssicherheit im KI-Zeitalter – KI-generierter Code überfordert klassische AppSec-Audits
First seen on security-insider.de Jump to article: www.security-insider.de/appsec-audits-ki-generierter-code-kontinuierliche-sicherheitspruefungen-a-7bcecd63096deca4e56a10fc634b655f/
-
KI-Agenten, Bots, Services: Warum klassisches IAM an Grenzen stößt
Management Summary Nicht-menschliche Identitäten und KI-Agenten wachsen rasant klassische IAM-Modelle stoßen damit an ihre operativen und sicherheitstechnischen Grenzen. Unternehmen müssen Berechtigungen für Bots, Services und agentenbasierte KI konsequent nach denselben strengen Regeln steuern wie für menschliche Nutzer. Zero Trust und Just-in-Time-Access werden zur Pflicht, um Zugriffe granular, zeitlich begrenzt und nachvollziehbar abzusichern. SSO-fähige… First seen…
-
KI-Agenten, Bots, Services: Warum klassisches IAM an Grenzen stößt
Management Summary Nicht-menschliche Identitäten und KI-Agenten wachsen rasant klassische IAM-Modelle stoßen damit an ihre operativen und sicherheitstechnischen Grenzen. Unternehmen müssen Berechtigungen für Bots, Services und agentenbasierte KI konsequent nach denselben strengen Regeln steuern wie für menschliche Nutzer. Zero Trust und Just-in-Time-Access werden zur Pflicht, um Zugriffe granular, zeitlich begrenzt und nachvollziehbar abzusichern. SSO-fähige… First seen…
-
MSPs are now being pulled into AI security conversations
First seen on scworld.com Jump to article: www.scworld.com/news/msps-are-now-being-pulled-into-ai-security-conversations
-
MSPs are now being pulled into AI security conversations
First seen on scworld.com Jump to article: www.scworld.com/news/msps-are-now-being-pulled-into-ai-security-conversations
-
Salesforce and Databricks expand partnership to govern AI agent workflows
Tags: aiFirst seen on scworld.com Jump to article: www.scworld.com/brief/salesforce-and-databricks-expand-partnership-to-govern-ai-agent-workflows
-
Ping Identity extends runtime identity for AI agents across AWS, Google Cloud and Cloudflare
First seen on scworld.com Jump to article: www.scworld.com/brief/ping-identity-extends-runtime-identity-for-ai-agents-across-aws-google-cloud-and-cloudflare
-
Beyond Identity launches Ceros to secure enterprise AI agents
First seen on scworld.com Jump to article: www.scworld.com/brief/beyond-identity-launches-ceros-to-secure-enterprise-ai-agents
-
SailPoint acquires Entro Security to enhance AI agent security
Tags: aiFirst seen on scworld.com Jump to article: www.scworld.com/brief/sailpoint-acquires-entro-security-to-enhance-ai-agent-security
-
AI amplifies cyber risk in professional sports, Darktrace report finds
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-amplifies-cyber-risk-in-professional-sports-darktrace-report-finds
-
AI amplifies cyber risk in professional sports, Darktrace report finds
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-amplifies-cyber-risk-in-professional-sports-darktrace-report-finds
-
Identiverse 2026: Making enterprise AI agents accountable
Tags: aiFirst seen on scworld.com Jump to article: www.scworld.com/resource/identiverse-2026-making-enterprise-ai-agents-accountable
-
Identiverse 2026: Making enterprise AI agents accountable
Tags: aiFirst seen on scworld.com Jump to article: www.scworld.com/resource/identiverse-2026-making-enterprise-ai-agents-accountable
-
AI agents are turning credential sprawl into an MSSP problem
First seen on scworld.com Jump to article: www.scworld.com/news/ai-agents-are-turning-credential-sprawl-into-an-mssp-problem
-
Malicious JetBrains Marketplace plugins steal AI API keys from developers
At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malicious-jetbrains-marketplace-plugins-steal-ai-api-keys-from-developers/
-
Ent Raises $100M to Reinvent Endpoint Security for AI Era
Startup Analyzes Endpoint Behavior to Stop Incidents Before Security Teams Respond. Endpoint security startup Ent emerged from stealth with a $100 million seed round led by Decibel, betting that intent-aware AI running on endpoints can prevent increasingly automated AI-driven attacks before traditional detection and response tools have time to react. First seen on govinfosecurity.com Jump…