Tag: ai
-
Chainguard, JPMorgan, BNY Team Up to Secure Open Source from AI Threats
Athena is a new an industry coalition to fix the vulnerabilities frontier AI models find before attackers can exploit them First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/chainguard-bny-open-source-athena/
-
Schatten-KI wird zum messbaren Risiko
Zwei Drittel der Büromitarbeitenden nutzen nicht autorisierte KI-Tools am Arbeitsplatz. 75 % der Büroangestellten würden für bessere KI-Weiterbildungsmöglichkeiten einen Arbeitsplatzwechsel in Betracht ziehen; in Unternehmen mit über 1 Mrd. US-Dollar Umsatz sind es 80 %. PagerDuty hat eine internationale Umfrage veröffentlicht, die eine wachsende Diskrepanz zwischen der KI-Nutzung durch Mitarbeitende und der unternehmensinternen Governance… First…
-
Amnesty calls for ban on AI risk-profiling systems
Amnesty International says AI-driven risk profiling systems are discriminatory and may lead to misleading results that violate international human rights law First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366644494/Amnesty-calls-for-ban-on-AI-risk-profiling-systems
-
Thales warnt vor KI-gesteuerten Angriffen auf Ticketshops und Streamingplattformen
Tags: aiAuf Sport-Webseiten stammt bereits ein erheblicher Teil des Datenverkehrs von bösartigen Bots mit spürbaren Folgen für Fans, Veranstalter und digitale Sportangebote. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/thales-warnt-vor-ki-gesteuerten-angriffen-auf-ticketshops-und-streamingplattformen/a45501/
-
Thales warnt vor KI-gesteuerten Angriffen auf Ticketshops und Streamingplattformen
Tags: aiAuf Sport-Webseiten stammt bereits ein erheblicher Teil des Datenverkehrs von bösartigen Bots mit spürbaren Folgen für Fans, Veranstalter und digitale Sportangebote. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/thales-warnt-vor-ki-gesteuerten-angriffen-auf-ticketshops-und-streamingplattformen/a45501/
-
Flucht vor der KI-Flut: Curl pausiert Annahme jeglicher Bug-Reports
Tags: aiGroße Mengen an KI-generierten Bug-Reports überfordern Entwicklerteams. Curl-Entwickler Stenberg kündigt nun eine drastische Maßnahme an. First seen on golem.de Jump to article: www.golem.de/news/flucht-vor-der-ki-flut-curl-pausiert-annahme-jeglicher-bug-reports-2606-209805.html
-
Reachability makes AI threat modeling worth the trust
In this interview with Help Net Security, Oscar Andersson, CTO at Oplane, explains why most scanning tools fail. They cry wolf, flagging threats that cannot run in real code. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/16/oscar-andersson-oplane-ai-threat-modeling/
-
Russian and Chinese Actors Use AI Translation and Visual Content in Malign Influence Operations
AI is reshaping foreign malign influence operations in subtle but consequential ways. Our analysis of pro-Russia and pro-China inauthentic accounts on X across 20242026 shows actors are not leveraging AI primarily to flood platforms with volume. Instead, they are using AI to refine content quality, create more believable personas, and broaden linguistic and visual reach…
-
Microsoft 365 Copilot Vulnerability Exposes Sensitive Data Through One-Click Attack
Microsoft 365 Copilot has been found vulnerable to a critical one-click data exfiltration attack chain dubbed “SearchLeak,” exposing sensitive enterprise data through a combination of AI-specific and traditional web vulnerabilities. Discovered by Varonis Threat Labs, the flaw, tracked as CVE-2026-42824 and rated critical, demonstrates how modern AI integrations can unintentionally expand attack surfaces by linking…
-
The rise of machine identities and agentic AI: Securing trust in the next era of digital autonomy
In the latest episode of Identity Insider, I sat down with Chris Hughes, a cybersecurity expert who’s involved in OWASP’s work on non-human and machine identity … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/16/delinea-securing-machine-identities-and-agentic-ai/
-
A $2 trillion revenue shift hinges on AI data governance
Across large enterprises, a single question keeps surfacing when teams want to put customer data to work. Can this record be used for a given purpose, and does the consent … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/16/ai-data-governance-revenue-shift/
-
1Password acquires Apono to bolster AI security
Tags: aiFirst seen on scworld.com Jump to article: www.scworld.com/brief/1password-acquires-apono-to-bolster-ai-security
-
NewCore launches with $66M to secure human and AI agent identities
Tags: aiFirst seen on scworld.com Jump to article: www.scworld.com/brief/newcore-launches-with-66m-to-secure-human-and-ai-agent-identities
-
HPE unifies Juniper Partner Program, expands channel-only cloud and AI offers
First seen on scworld.com Jump to article: www.scworld.com/news/hpe-unifies-juniper-partner-program-expands-channel-only-cloud-and-ai-offers
-
SailPoint to acquire Entro as AI agent identity risks grow
First seen on scworld.com Jump to article: www.scworld.com/brief/sailpoint-to-acquire-entro-as-ai-agent-identity-risks-grow
-
Securing the model: Protecting AI systems from compromise
Tags: aiFirst seen on scworld.com Jump to article: www.scworld.com/resource/securing-the-model-protecting-ai-systems-from-compromise
-
Securing the model: Protecting AI systems from compromise
Tags: aiFirst seen on scworld.com Jump to article: www.scworld.com/resource/securing-the-model-protecting-ai-systems-from-compromise
-
Wechselwirkung zwischen KI und Cybersecurity als zentrale Führungsfrage 2026
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/wechselwirkung-ki-cybersecurity-fuehrungsfrage-2026
-
The US government’s Anthropic models ban was never about an AI jailbreak
The Trump administration’s decision that forced Anthropic to pull its latest cybersecurity models could be reactionary, retaliatory, or both, but the message is clear: The AI industry isn’t immune from U.S. government interference. First seen on techcrunch.com Jump to article: techcrunch.com/2026/06/15/the-us-governments-anthropic-models-ban-was-never-about-an-ai-jailbreak/
-
How FDA’s Draft Guidance Shapes AI Medical Device Safety
FDA’s draft guidance for AI-enabled medical devices reflects a major change in how regulators address software that changes over time, recognizing AI’s ability to evolve while emphasizing patient safety, transparency and accountability, said Phil Englert of the Health-ISAC. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/how-fdas-draft-guidance-shapes-ai-medical-device-safety-i-5550
-
DOJ seizes CFAKE, SOCFAKE deepfake nude sites under TAKE IT DOWN Act
The U.S. Department of Justice announced Friday that it has seized the CFAKE.com and SOCFAKE.com websites, which allegedly hosted nonconsensual AI-generated nude images and videos of women, in what appears to be the first publicly announced domain seizure under the TAKE IT DOWN Act. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/doj-seizes-cfake-socfake-deepfake-nude-sites-under-take-it-down-act/
-
How FDA’s Draft Guidance Shapes AI Medical Device Security
FDA’s draft guidance for AI-enabled medical devices reflects a major change in how regulators address software that changes over time, recognizing AI’s ability to evolve while emphasizing patient safety, transparency and accountability, said Phil Englert of the Health-ISAC. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/how-fdas-draft-guidance-shapes-ai-medical-device-security-i-5550
-
Copilot ‘SearchLeak’ Attack Allows 1-Click Data Theft
The critical, three-stage attack is now patched, but it’s part of a new group of AI prompt-injection issues that use hidden URLs and other variables. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/copilot-searchleak-attack-1-click-data-theft
-
WatchGuard CEO: MSPs Face Growing Pressure As AI Accelerates Threats
MSPs are facing intensifying pressure as AI-enabled threat actors increasingly target their SMB clients, according to WatchGuard CEO Joe Smolarski. First seen on crn.com Jump to article: www.crn.com/news/security/2026/watchguard-ceo-msps-face-growing-pressure-as-ai-accelerates-threats
-
NewCore Launches With $66M to Rebuild Identity for AI Agents
Startup Targets Incumbents Doing Directories, Authentication, Federation and SSO. NewCore, founded by Dome9 creator Zohar Alon, emerged from stealth with $66 million to build security-first identity infrastructure designed to manage the explosion of autonomous AI agents, machine identities and cryptographic credentials expected across modern enterprises. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/newcore-launches-66m-to-rebuild-identity-for-ai-agents-a-31974
-
GovSec Summit USA 2026: Cyber Resilience Amid Fiscal Reality
AI Governance, Compliance and Workforce Challenges Top GovSec Agenda. GovSec Summit USA 2026 explored how federal agencies are balancing AI adoption, regulatory complexity and national security priorities. Discussions centered on cyber resilience, AI governance, workforce challenges and public-private collaboration as critical pillars of modern government defense. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/govsec-summit-usa-2026-cyber-resilience-amid-fiscal-reality-a-31970
-
Why AI Defenses Fail Without Data and Identity Fundamentals
RPC’s Spencer Scott on Why Security Basics Must Come Before Agentic AI Adoption. Organizations are racing toward agentic AI defenses, but without clean data, identity and asset management in place, those defenses will fall short. Security fundamentals must come first, said Spencer Scott, head of information security at RPC. First seen on govinfosecurity.com Jump to…
-
Geopolitics Is Now a Cybersecurity Problem
UCL’s Melanie Garson on Anti-Fragility, Supply Chain Risk and AI Adoption. Geopolitical exposure has quietly moved to the front of the security agenda, and most organizations are only now realizing how little they understand about where their risks originate, says Melanie Garson, associate professor of international security at UCL. First seen on govinfosecurity.com Jump to…
-
Zenith Live Conference 2026: AI-Powered Threats Demand AI-Powered Defense
At Zscaler Zenith Live 2026, Deepen Desai shared why AI-powered threats require zero trust and machine-speed defenses. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/artificial-intelligence/zenith-live-conference-2026-ai-powered-threats-demand-ai-powered-defense/
-
LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers
A default low-privilege account on a LiteLLM proxy can climb to full admin and run code on the server by chaining three vulnerabilities, researchers at Obsidian Security disclosedLiteLLM is a widely deployed open-source AI gateway that brokers calls to more than 100 model providers behind one OpenAI-compatible interface.A server takeover exposes every provider key it…