Tag: ai
-
OWASP Top 10 Risk Mitigations for LLMs and Gen AI Apps 2025
The rapid advancement of AI, particularly in large language models (LLMs), has led to transformative capabilities in numerous industries. However, with great power comes significant security challenges. The OWASP Top… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/owasp-top-10-risk-mitigations-for-llms-and-gen-ai-apps-2025/
-
The Rise of AI-Generated Professional Headshots
It’s clear that a person’s reputation is increasingly influenced by their online presence, which spans platforms like LinkedIn, corporate websites, and various professional networks. In today’s digital age, having a quality photograph is essential rather than optional. In the past, obtaining professional headshots required booking a photoshoot, hiring an experienced photographer, and investing time and…
-
Catching the ghost in the machine: Adapting threat detection to cloud speed
The rapid adoption of cloud technology has transformed how businesses operate, offering scalability, agility, and opportunities for innovation. However, this transformation has also introduced a profound challenge: the “ghost in the machine””, elusive and dynamic threats that exploit the complexity and scale of cloud environments to remain hidden, evading traditional detection methods and posing significant…
-
Why AI Adoption Stalls: Data, Talent and Strategy Gaps
Brett Barton of Unisys on Bridging the AI Readiness Gap for Competitive Advantage. More than 93% of organizations believe AI will be a permanent part of their strategies but only 30% say their current adoption levels give them a competitive edge. This gap stems from data, talent and operational challenges, said Brett Barton, vice president…
-
Worry About Misuse of AI, Not Superintelligence
AI risks arise not from AI acting on its own, but because of what people do with it. First seen on wired.com Jump to article: www.wired.com/story/human-misuse-will-make-artificial-intelligence-more-dangerous/
-
Datenschutz als Innovationsbremse?
Tags: aiDer europäische Umgang mit Künstlicher Intelligenz steht vor entscheidenden Weichenstellungen: Noch im Dezember will der Europäische Datenschutzausschuss eine richtungsweisende Stellungnahme vorlegen. Währenddessen warnt der Digitalverband Bitkom vor wachsender Rechtsunsicherheit und möglichen Wettbewerbsnachteilen für die KI-Entwicklung und den Einsatz in Europa. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/cybersecurity/datenschutz-als-innovationsbremse/
-
Data Governance in DevOps: Ensuring Compliance in the AI Era
With the evolution of modern software development, CI/CD pipeline governance has emerged as a critical factor in maintaining both agility and compliance. As we enter the age of artificial intelligence (AI), the importance of robust pipeline governance has only intensified. With that said, we’ll explore the concept of CI/CD pipeline governance and why it’s vital,…
-
New Investment Scam Leverages AI, Social Media Ads to Target Victims Worldwide
Cybersecurity researchers are calling attention to a new kind of investment scam that leverages a combination of social media malvertising, company-branded posts, and artificial intelligence (AI) powered video testimonials featuring famous personalities, ultimately leading to financial and data loss.”The main goal of the fraudsters is to lead victims to phishing websites and forms that harvest…
-
Autonomous Security for Cloud – GenAI und Automatisierung zum Schutz von AWS-Umgebungen
First seen on security-insider.de Jump to article: www.security-insider.de/ibm-autonomous-security-cloud-ki-gestuetzte-loesung-fuer-aws-a-e8a03eb607692100a4d7ddc16014df25/
-
Security leaders top 10 takeaways for 2024
Tags: access, ai, attack, automation, best-practice, breach, business, ciso, cloud, compliance, corporate, crowdstrike, cybercrime, cybersecurity, data, deep-fake, detection, email, finance, fraud, governance, group, guide, hacker, identity, incident response, infosec, ISO-27001, office, okta, phishing, privacy, programming, regulation, risk, risk-management, saas, security-incident, service, software, startup, strategy, technology, threat, tool, training, vulnerabilityThis year has been challenging for CISOs, with a growing burden of responsibility, the push to make cybersecurity a business enabler, the threat of legal liability for security incidents, and an expanding attack landscape.As the year comes to a close, CISOs reflect on some of the takeaways that have shaped the security landscape in 2024.…
-
How companies can address bias and privacy challenges in AI models
In this Help Net Security interview, Emre Kazim, Co-CEO of Holistic AI, discusses the need for companies to integrate responsible AI practices into their business strategies … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/12/16/emre-kazim-holistic-ai-strategy/
-
Cloud Access Security Broker ein Kaufratgeber
Tags: access, ai, api, authentication, cisco, cloud, compliance, control, cyberattack, data, detection, endpoint, exploit, gartner, governance, intelligence, mail, malware, microsoft, monitoring, network, phishing, ransomware, risk, saas, service, software, startup, threat, tool, zero-day, zero-trust -
Resecurity introduces Government Security Operations Center (GSOC) at NATO Edge 2024
Resecurity unveils AI-powered GSOC at NATO Edge 2024, integrating VR for advanced cybersecurity. Tailored for MSSPs, it enhances… First seen on hackread.com Jump to article: hackread.com/resecurity-government-security-operations-center-gsoc-nato-edge-2024/
-
Platforms are the Problem
Tags: ai, breach, business, chatgpt, cloud, cyber, cybercrime, cybersecurity, data, defense, detection, finance, firewall, fraud, infrastructure, intelligence, LLM, network, saas, service, technology, threat, toolA better path forward for cybersecurity Why is it that cybersecurity is struggling to keep pace with the rapidly evolving threat landscape? We spend more and more, tighten our perimeters, and still there are trillions of dollars being lost to cybercrime and cyber attacks. Setting aside the direct costs to individuals and businesses, and the…
-
Wie künstliche Intelligenz Authentifizierungstechnologien noch sicherer macht KI trifft auf PAM
»Die Zeit läuft nicht, sie rennt.« Friedrich Schillers Zitat trifft vor allem auf Cyberbedrohungen zu: diese werden nicht nur zunehmend komplexer, sondern entwickeln sich in rasantem Tempo weiter. Traditionelle Sicherheitsmaßnahmen stoßen immer häufiger an ihre Grenzen. In Sachen Authentifizierung zur kritischen Unternehmensinfrastruktur wird es besonders heikel insbesondere, wenn es sich um privilegierte Konten handelt. Über sie…
-
Microsoft’s AI Recall Tool Is Still Sucking Up Credit Card and Social Security Numbers
Plus: The US indicts North Koreans in fake IT worker scheme, file-sharing firm Cleo warns customers to patch a vulnerability amid live attacks, and more. First seen on wired.com Jump to article: www.wired.com/story/microsoft-recall-credit-card-social-security-numbers/
-
IT-Trends 2025: Künstliche Intelligenz wird wichtiger Wirtschaftsfaktor
GPU-Server und Green Computing ebnen den Weg für KI-Transformation 2025. Immer mehr Geschäftsprozesse werden durch den Einsatz unterschiedlicher KI-gestützter Funktionen optimiert. Schon heute erstellt künstliche Intelligenz für uns Präsentationen und Texte, berechnet komplexe Aufgaben, analysiert Big Data oder beantwortet sogar Kundenanfragen in Form von Chatbots. Wer in der freien Wirtschaft mithalten will, kommt in……
-
Podcast Episode 21: Interview with the University of Richmond’s CTF Winning Team
What happens when passion, talent, and opportunity collide in the university’s tech scene? Meet David Nathanson and Daniel Garay, the freshmen duo who took the University of Richmond’s Capture the Flag (CTF) competition by storm. With David bringing his coding journey from Nicaragua and Daniel harnessing his self-taught skills in AI and machine learning, they”¦…
-
Time of Reckoning Reviewing My 2024 Cybersecurity Predictions
Tags: ai, attack, automation, awareness, breach, business, chatgpt, china, compliance, cyber, cyberattack, cybercrime, cybersecurity, data, data-breach, disinformation, election, espionage, exploit, healthcare, incident response, infrastructure, jobs, law, linkedin, malware, monitoring, moveIT, phishing, privacy, ransomware, regulation, risk, russia, service, software, supply-chain, technology, threat, tool, ukraine, update, vulnerability, warfare, zero-dayThe brutal reality is that cybersecurity predictions are only as valuable as their accuracy. As 2024 comes to a close, I revisit my forecasts to assess their utility in guiding meaningful decisions. Anyone can make predictions (and far too many do), but actually being correct is another matter altogether. It is commonplace for security companies…
-
ISMG Editors: CEO Shooting Sparks AI Accountability Debate
Also: How Leading Cybersecurity Firms are Gearing up for 2025. In the latest weekly update, ISMG editors discussed the shooting death of the UnitedHealthcare CEO and its wider implications for AI-driven decision-making, market strategies for the top cybersecurity companies in 2025 and they are reflecting industry trends. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ismg-editors-ceo-shooting-sparks-ai-accountability-debate-a-27060
-
Generative AI Security Tools Go Open Source
Businesses deploying large language models and other GenAI systems have a growing collection of open source tools for testing AI security. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/generative-ai-breaking-tools-go-open-source
-
UnitedHealth’s Optum left an AI chatbot, used by employees to ask questions about claims, exposed to the internet
Optum’s AI chatbot was found exposed online at a time when the healthcare giant faces scrutiny for its use of AI to allegedly deny patient claims. First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/13/unitedhealthcares-optum-left-an-ai-chatbot-used-by-employees-to-ask-questions-about-claims-exposed-to-the-internet/
-
With ‘TPUXtract,’ Attackers Can Steal Orgs’ AI Models
A new side-channel attack method is a computationally practical way to infer the structure of a convolutional neural network, meaning that cyberattackers or rival companies can plagiarize AI models and take their data for themselves. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/tpuxtract-attackers-steal-ai-models
-
UnitedHealthcare’s Optum left an AI chatbot, used by employees to ask questions about claims, exposed to the internet
Optum’s AI chatbot was found exposed online at a time when the healthcare giant faces scrutiny for its use of AI to allegedly deny patient claims. First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/13/unitedhealthcares-optum-left-an-ai-chatbot-used-by-employees-to-ask-questions-about-claims-exposed-to-the-internet/
-
Survey: AI-enhanced cyberattacks seen as No. 1 threat to API security
First seen on scworld.com Jump to article: www.scworld.com/news/survey-ai-enhanced-cyberattacks-seen-as-number-one-threat-to-api-security
-
Leveraging AI and public data to gain control over third-party risk
First seen on scworld.com Jump to article: www.scworld.com/resource/leveraging-ai-and-public-data-to-gain-control-over-third-party-risk
-
Cyberint’s 2024 Report Highlights Surge in Credential Theft and Rise of AI-Powered Phishing
Cyberint, a Check Point company, has released its 2024 Cyber Security Landscape Report, painting a concerning picture of the evolving threat landscape. The report, drawing on data from the Cyberint Argos Platform, analysed 140,000 cyber threat alerts across critical industries, revealing a 333% surge in credential theft, a significant rise in supply chain attacks, and…
-
Analysis: AI-Powered Cyberattacks Are Here, But Real Threat Is Still Humans With A Keyboard
CrowdStrike’s Adam Meyers says manual attacks from hackers remain a massive problem for organizations even in the era of AI-driven cyberattacks. First seen on crn.com Jump to article: www.crn.com/news/security/2024/analysis-ai-powered-cyberattacks-are-here-but-real-threat-is-still-humans-with-a-keyboard
-
Autonomous Discovery of Critical Zero-Days in popular AI platforms
First seen on thesecurityblogger.com Jump to article: www.thesecurityblogger.com/autonomous-discovery-of-critical-zero-days-in-popular-ai-platforms/
-
Artificial Intelligence Looms Large at Black Hat Europe
Open Questions: What’s Next Killer Use Case? Can Output Be Better Validated?. The topic of AI reality versus hype, as well as what the next killer use cases might be, dominated the wrap-up Locknote panel at this year’s annual Black Hat Europe in London, comprised of conference Review Board members detailing this year’s hot topics,…