Tag: ai
-
AI Coding Adoption Hits 97% but Governance Lags Behind
Most dev teams use AI coding assistants but only 30% have full governance in place First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-coding-adoption-governance-lags/
-
Warum LLMs, KI-Pipelines und Agenten neue Schutzmechanismen brauchen
In vielen Unternehmen läuft generative KI inzwischen im Hintergrund mit, als Chatbot, als Wissensassistent, im Code-Editor und immer öfter als Agent, der eigenständig Systeme anspricht und Daten abruft. Mit jeder dieser Integrationen wächst eine Angriffsfläche, die vorhandene Sicherheitswerkzeuge allein nicht ausreichend abdecken. Firewall, Authentifizierung und Eingabefilter bleiben notwendig, für LLM-, RAG- und agentenbasierte […] First…
-
Partners can help secure AI and increase trust
Context and Veeam underline the challenges and importance of securing artificial intelligence, while Arrow takes steps to increase partner skills around the technology First seen on computerweekly.com Jump to article: www.computerweekly.com/microscope/news/366643947/Partners-can-help-secure-AI-and-increase-trust
-
Veeam-Studie deckt Vertrauenslücke bei künstlicher Intelligenz auf
Die globale C-Level-Studie ‘Data and AI Trust Gap” von Veeam zeigt: 48 % der Führungskräfte gehen davon aus, dass vertrauenswürdige, sichere Daten ein Umsatzwachstum von mehr als 25 % erschließen könnten. Allerdings weisen nur 7 % der Unternehmen auch den erforderlichen technologischen Reifegrad für künstliche Intelligenz auf. Die globalen Forschungsergebnisse im Veeam-Bericht ‘Data and AI…
-
Identity Scams Evolve Into Multi-Stage Attacks
Victims Increasingly Face Multiple Compromises From a Single Incident. Identity theft scams are increasingly unfolding as coordinated, AI-assisted attack chains that begin with phishing or impersonation escalate into account takeovers, device compromise and broader fraud, according to the Identity Theft Resource Center. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/identity-scams-evolve-into-multi-stage-attacks-a-31918
-
Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models
University of Toronto researchers have built and tested a proof-of-concept AI-driven computer worm that uses a locally hosted open-weight large language model to reason its way through a network, generate tailored attack strategies for each target it encounters, and replicate itself, all without human intervention and without touching a commercial AI service.The preprint, posted to…
-
LiteLLM Vulnerability Allows Attackers to Execute Arbitrary Commands on Servers
Tags: ai, authentication, control, cve, cyber, data-breach, infrastructure, remote-code-execution, risk, vulnerabilityA critical vulnerability chain affecting LiteLLM has been identified, enabling unauthenticated remote code execution (RCE) on exposed servers. Tracked as CVE-2026-42271 and chained to CVE-2026-48710, the issue allows attackers to bypass authentication controls and execute arbitrary system commands, posing a severe risk to AI infrastructure that relies on LiteLLM deployments. LiteLLM Vulnerability CVE-2026-42271 is a…
-
The Hidden Security Risk in Modern Networks: The Work Between Tools
Organizations have more visibility than ever. Growing tech stacks provide greater coverage, and network security teams are increasingly adopting AI and automation to help with routine tasks and reduce manual effort.But the same challenges persist. Outages still last hours, causing significant financial losses, operational disruption, and reputational impact. Threat response and mean time to First…
-
LiteLLM vulnerability under active attack, CISA warns (CVE-2026-42271)
Tags: ai, attack, cisa, cybersecurity, exploit, infrastructure, injection, open-source, vulnerabilityA command injection vulnerability (CVE-2026-42271) in BerryAI’s LiteLLM open-source AI gateway is being exploited by attackers, the US Cybersecurity and Infrastructure … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/09/litellm-vulnerability-under-active-attack-cisa-warns-cve-2026-42271/
-
Filigran uses AI agents to make CTEM practical for overstretched security teams
Filigran has unveiled XTM One, an AI-native orchestration layer designed to automate Continuous Threat Exposure Management (CTEM) workflows, as organisations struggle to keep pace with growing volumes of threat intelligence, vulnerabilities and attack data. The launch reflects a broader challenge facing security teams. While many organisations have invested heavily in threat intelligence, attack surface management…
-
TechTalk: Okta vereint sämtliche Identity-Tools unter einem Layer
Auf der diesjährigen European Identity Cloud Conference in Berlin durften wir unter anderem mit dem Sicherheitsanbieter Okta dieses Videointerview führen, und das in persona mit Thomas Heinz. Von dem wollten wir wissen, warum sich Unternehmen dieser Tage mit dem Thema Identity Security Fabric beschäftigen sollten, und welche Maßnahmen für den sicheren Betrieb von KI-Agenten erforderlich…
-
TechTalk: Okta vereint sämtliche Identity-Tools unter einem Layer
Auf der diesjährigen European Identity Cloud Conference in Berlin durften wir unter anderem mit dem Sicherheitsanbieter Okta dieses Videointerview führen, und das in persona mit Thomas Heinz. Von dem wollten wir wissen, warum sich Unternehmen dieser Tage mit dem Thema Identity Security Fabric beschäftigen sollten, und welche Maßnahmen für den sicheren Betrieb von KI-Agenten erforderlich…
-
The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic
The advent of AI-assisted vulnerability discovery and autonomous exploit development has brought about a new age in cybersecurity”, one in which we can no longer rely on … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/09/subtractive-security-attack-path-erasure/
-
Treating AI agents like service accounts for federated query security
In this interview with Help Net Security, Paras Malhotra, CISO at Starburst, explains how the company handles data governance across federated query environments. Topics … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/09/paras-malhotra-starburst-federated-query-security/
-
Unkontrollierte API-Schlüssel werden zum Compliance-Risiko – KI-Agenten brauchen Identitäten, keine statischen API-Schlüssel
First seen on security-insider.de Jump to article: www.security-insider.de/ki-agenten-api-schluessel-compliance-risiko-identitaetskontrolle-a-4f40226190969728f0264cb666f771ac/
-
Wie groß ist der Markt für Cybersecurity
Künstliche Intelligenz erschließt Wachstumspotenziale für Unternehmen, bringt aber auch neue Sicherheitsrisiken mit sich. Daher geben Sicherheitsverantwortliche geben KI-Themen bei der Budgetvergabe oberste Priorität. Wie groß dieses Wachstum ausfällt, zeigt auch das neue Statista Whitepaper Putting Agentic AI To Work[1]. Demnach belief sich der Umsatz mit Cyber Serurity im vergangenen Jahr auf 183 Milliarden Euro ……
-
Why voice is becoming India’s next payment frontier
India’s Unified Payments Interface has made mobile payments ubiquitous in the subcontinent. As the country gears up for voice-activated transactions, experts warn of new risks involving AI and audio deepfakes First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366643927/Why-voice-is-becoming-Indias-next-payment-frontier
-
Why voice is becoming India’s next payment frontier
India’s Unified Payments Interface has made mobile payments ubiquitous in the subcontinent. As the country gears up for voice-activated transactions, experts warn of new risks involving AI and audio deepfakes First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366643927/Why-voice-is-becoming-Indias-next-payment-frontier
-
The security questions around Chinese AI coding models in U.S. software
Software developers across the United States are using AI models built in China to write, debug, and review code, drawn by prices below those of American alternatives. These … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/06/09/chinese-ai-coding-models-security/
-
Startup Geordie AI Lands $30M to Secure Enterprise AI Agents
Series A Funding Supports Visibility Across Cloud, Code and Endpoint Environments. Geordie AI, the 2026 RSAC Innovation Sandbox winner, raised $30 million in Series A funding to expand a platform that provides visibility, governance and behavioral monitoring for AI agents operating across cloud, code and endpoint environments as enterprises accelerate autonomous AI adoption. First seen…
-
Startup Geordie AI Lands $30M to Secure Enterprise AI Agents
Series A Funding Supports Visibility Across Cloud, Code and Endpoint Environments. Geordie AI, the 2026 RSAC Innovation Sandbox winner, raised $30 million in Series A funding to expand a platform that provides visibility, governance and behavioral monitoring for AI agents operating across cloud, code and endpoint environments as enterprises accelerate autonomous AI adoption. First seen…
-
Startup Geordie AI Lands $30M to Secure Enterprise AI Agents
Series A Funding Supports Visibility Across Cloud, Code and Endpoint Environments. Geordie AI, the 2026 RSAC Innovation Sandbox winner, raised $30 million in Series A funding to expand a platform that provides visibility, governance and behavioral monitoring for AI agents operating across cloud, code and endpoint environments as enterprises accelerate autonomous AI adoption. First seen…
-
Miasma Worm Hits Microsoft’s AI Coding Ecosystem
Attackers Compromised More Than 70 Microsoft Repositories in Under 2 Minutes. Attackers linked to the Miasma supply-chain campaign compromised a Microsoft contributor account and pushed malicious code into more than 70 repositories, using artificial intelligence-assisted coding tools as an infection path to steal credentials and developer secrets at scale. First seen on govinfosecurity.com Jump to…
-
Microsoft’s open source tools were hacked to steal passwords of AI developers
Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack. First seen on techcrunch.com Jump to article: techcrunch.com/2026/06/08/microsofts-open-source-tools-were-hacked-to-steal-passwords-of-ai-developers/
-
For the 2nd time in weeks, Microsoft packages laced with credential stealer
73 packages run self-replicating stealer as soon as they’re opened by an AI agent. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/06/for-the-2nd-time-in-weeks-microsoft-packages-laced-with-credential-stealer/
-
AI Exploit Risks Pushing Healthcare Security Shift
MultiCare Health CISO Jason Elrod on Need for Faster Cyber Resilience. Emerging AI tools can identify and exploit software vulnerabilities within minutes, forcing healthcare organizations to rethink cyber strategies. Jason Elrod, CISO of MultiCare Health System, explains why exploitability management, microsegmentation and AI-driven resilience matter more than ever. First seen on govinfosecurity.com Jump to article:…
-
Meta Deletes Face-Recognition System From Its Smart Glasses App After WIRED Report
Tags: aiThe code WIRED identified is gone from the latest version of Meta AI, the companion app for the company’s smart glasses. Meta won’t say why or whether it’s coming back. First seen on wired.com Jump to article: www.wired.com/story/meta-removes-face-recognition-code-meta-ai-app-smart-glasses/
-
95 Prozent der CISOs stehen unter Druck, Compliance-relevante Probleme der Cybersicherheit zurückzustellen
Checkmarx hat die Ergebnisse seines diesjährigen <> vorgestellt. Demnach nutzen inzwischen 96 Prozent der Entwicklerinnen und Entwickler KI-Tools in ihrer IDE und bewerten deren Nutzen überwiegend positiv. Allerdings geben lediglich 18 Prozent an, bereits während der Entwicklung kontinuierliche Sicherheitsprüfungen durchzuführen. Gleichzeitig geben 95 Prozent der CISOs an, unter Druck zu stehen, […] First seen on…
-
Companies aren’t prepared for how AI is accelerating impersonation attacks
Businesses generally aren’t taking a proactive enough approach to blocking schemes that spoof their leaders’ identities, according to a new report. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-executive-impersonation-outtake-survey/822235/