Collecting Cyber-News from over 60 sources

Tag: ai

Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Irregular says ‘human oversight’ responsible for AI sandbox escape incidents

Aug 17, 2026 11:55 PM

Tags: access, ai, cybersecurity, Internet

In a post-mortem, the frontier AI testing company said internet access for models is necessary to fully test out their cybersecurity capabilities. First seen on cyberscoop.com Jump to article: cyberscoop.com/irregular-ai-sandbox-escape-human-oversight/
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
‘MessiahGPT’ AI Service Promises Ransomware, Phishing Kits, and Malware

Aug 17, 2026 11:55 PM

Tags: ai, breach, cybercrime, malware, phishing, ransomware, service

Trellix says MessiahGPT is marketed to cybercriminals as an uncensored AI service for ransomware, phishing kits, malware, and breach exploitation. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/artificial-intelligence/news-messiahgpt-malware-phishing-ai/
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities

Aug 17, 2026 11:55 PM

Tags: access, ai, attack, backup, breach, cloud, control, credentials, cybercrime, data, defense, detection, encryption, endpoint, group, guide, infrastructure, intelligence, malicious, malware, microsoft, mitre, radius, ransom, ransomware, service, software, tactics, threat, tool, unauthorized

Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
AI Gives Defenders an Edge in the Vulnerability Race

Aug 17, 2026 9:55 PM

Tags: ai, attack, breach, data, exploit, extortion, mandiant, phone, risk, scam, social-engineering, software, supply-chain, tool, vulnerability

Mandiant Consulting’s Charles Carmakal on AI, Social Engineering and Extortion. Attackers are using AI to find vulnerabilities, build exploit tools and analyze stolen data, but defenders still hold an advantage. The greater risks now come from human-sounding phone scams, AI-assisted extortion and software supply chain attacks, said Charles Carmakal, CTO at Mandiant Consulting. First seen…
OpenMatter Network to Take Verification Message to Belgrade Blockchain Week 2026

Aug 17, 2026 7:55 PM

Tags: ai, awareness, blockchain, computing, cyber, network

Melbourne, Florida, August 17th, 2026, CyberNewswire Head of Operations and Partnerships Chris Biele to lead sessions on secure scientific collaboration, agentic AI and the need to move from trust to cryptographic proof Continuing its effort to build global awareness of the need to move computing from assumption-based trust to cryptographic proof, OpenMatter Network today announced…
FireTail State of AI Security 2026: Adoption Has Outpaced Control FireTail Blog

Aug 17, 2026 6:55 PM

Tags: access, ai, control, credentials, data, group, intelligence, jobs, leak, risk, threat, tool, vulnerability

Aug 17, 2026 – Ayush Sethi – What your workforce’s AI prompts reveal in aggregate Most AI security controls judge one prompt at a time. We built Topics to read the layer above them, where a workforce’s prompts add up into a pattern that no single message shows.Someone in your legal team pastes a contract…
Hopping the (Geo)Fence Why the Supreme Court’s Expected Ruling on Geofence Warrants May Not Make Any Difference

Aug 17, 2026 6:55 PM

Tags: ai, privacy

Chatrie v. United States could redefine geofence warrants, location privacy and Fourth Amendment protections as AI-enabled surveillance expands. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/hopping-the-geofence-why-the-supreme-courts-expected-ruling-on-geofence-warrants-may-not-make-any-difference/
Irregular faces criticism over ‘spin’ in AI hacking postmortem

Aug 17, 2026 6:55 PM

Tags: ai, computer, hacking

The company at the center of a series of incidents in which AI models compromised real-world computer systems during security evaluations is facing criticism after the release of a report that security experts say leaves key questions unanswered. First seen on therecord.media Jump to article: therecord.media/irregular-ai-hacking-model-blog
OpenAI, Anthropic, and Meta AI Breaches Shared the Same Testing Vendor

Aug 11, 2026 9:36 PM

Tags: ai, breach, openai, risk

OpenAI, Anthropic, and Meta AI incidents reportedly shared one testing vendor, exposing third-party and containment risks in AI security evaluations. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/cloud-security/news-openai-anthropic-meta-ai-incidents-irregular/
The inconvenient truth about AI pentesting: someone has to check all the work

Aug 11, 2026 8:26 PM

Tags: ai, penetration-testing, vulnerability

AI pentesting can flood teams with findings they cannot validate. The real challenge is managing “validation debt” as discovery scales. AI pentesting has a ‘Sorcerer’s Apprentice’ problem. Enchant a broom to fetch water, and it will fetch water, relentlessly, long after the workshop has flooded. The industry is busy measuring how fast AI finds vulnerabilities…
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Aug 11, 2026 8:26 PM

Tags: ai, cve, exploit, flaw, microsoft, rce, remote-code-execution

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent.The flaw, tracked as CVE-2026-55040 (CVSS 9.1), affects SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Server 2016. Microsoft’s First…
CVE Program eyes automation and globalization to weather AI ‘vulnpocalypse’

Aug 11, 2026 6:26 PM

Tags: ai, automation, cve, vulnerability

The vulnerability-coordination project has had a rocky few years, but a key leader says it will “flourish and improve.” First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cve-program-ai-black-hat-def-con/827477/
NIST wants to overhaul its vulnerability database for the AI age

Aug 11, 2026 6:26 PM

Tags: ai, cyber, nist, threat, vulnerability

NIST is seeking public input to modernize the National Vulnerability Database to keep pace with AI-driven cyber threats and machine-scale security data. First seen on cyberscoop.com Jump to article: cyberscoop.com/nist-national-vulnerability-database-ai-overhaul/
Verschlüsselte KI-Denkprotokolle geknackt Schwachstelle bei OpenAI, Anthropic und Google

Aug 11, 2026 6:26 PM

Tags: ai, api, google, openai, vulnerability

Forscher haben eine gravierende Schwachstelle bei der Absicherung sogenannter Reasoning-Logs entdeckt. Verschlüsselte Denkprotokolle moderner KI-Modelle lassen sich demnach unter bestimmten Bedingungen über ein schwächeres Modell desselben Anbieters entschlüsseln. Besonders brisant: In öffentlich zugänglichen Datensätzen fanden die Forscher bereits personenbezogene Daten, Zugangsdaten, API-Schlüssel und Passwörter. Forscher von MATS Research, dem Max-Planck-Institut für intelligente Systeme, dem ELLIS…
Blumira Unveils AI Command Center for Cybersecurity Tools

Aug 11, 2026 5:26 PM

Tags: ai, cybersecurity, intelligence, tool

Blumira today unfurled a command center that makes it simpler to integrate cybersecurity tools based on artificial intelligence (AI) that were developed by different vendors. Mike Toole, head of security and IT for Blumira, said Hearth makes it possible to integrate cybersecurity tools from different vendors through a common interface. Additionally, cybersecurity teams will find..…
AI Helps Researchers Uncover Zoom Zero-Click RCE in Less Than a Day

Aug 11, 2026 5:26 PM

Tags: ai, exploit, rce, remote-code-execution

Researchers used public AI models to uncover ZOOMSDAY, a critical Zoom zero-click RCE exploit chain, in less than 24 hours. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/ai-helps-researchers-uncover-zoom-zero-click-rce-in-less-than-a-day/
95 Prozent der Unternehmen verschieben KI-Projekte aufgrund von Hürden in der Datenarchitektur

Aug 11, 2026 4:26 PM

Tags: ai

Cloudera veröffentlicht seine neueste globale Studie ‘The Great AI Re-Architecture”. Diese zeigt einen grundlegenden Wandel in der Unternehmens-IT. So überarbeiten immer mehr Betriebe ihre Datenarchitekturen, um den Anforderungen von KI gerecht zu werden. Denn obwohl die KI-Nutzung zum Standard geworden ist, schränken veraltete Datenarchitekturen zunehmend die Fähigkeit von Unternehmen ein, KI sicher, effizient und kostengünstig zu…
Drei KI-Vorfälle in vierzehn Tagen Von der Evaluierung zum Ernstfall

Aug 11, 2026 4:26 PM

Tags: ai, openai

Innerhalb von vierzehn Tagen haben OpenAI, Anthropic und das britische AI Security Institute (AISI) jeweils offengelegt, dass KI-Agenten im Rahmen interner Sicherheitsprüfungen den vorgesehenen Testrahmen verlassen und auf reale Systeme sowie reale Personen eingewirkt haben. Weniger bemerkenswert als die Einzelfälle ist dabei die Geschwindigkeit, mit der sich die Fähigkeiten dieser Agenten entwickeln und der […]…
Vague Task, Total Access: When AI Delegation Becomes a Security Risk

Aug 11, 2026 4:26 PM

Tags: access, ai, risk

AI agents can improvise beyond the intended scope of a task when they are given broad access to enterprise systems and data. Token Security explains why organizations need to define agent intent and continuously enforce permissions around what each agent was actually created to do. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/vague-task-total-access-when-ai-delegation-becomes-a-security-risk/
A Zoom Screen-Sharing Bug Let Anyone Take Over Other Devices on a Call

Aug 11, 2026 3:26 PM

Tags: ai, flaw, tool

Researchers say it took fewer than 20 prompts for a public AI tool to find a flaw (now fixed) allowing anyone on a Zoom call to hijack another participants’ device. First seen on wired.com Jump to article: www.wired.com/story/a-zoom-screen-sharing-bug-let-anyone-take-over-other-devices-on-a-call/
LiteLLM Attack Shows AI Infrastructure Is Becoming a Strategic Software Supply Chain Target

Aug 11, 2026 3:26 PM

Tags: ai, attack, breach, cloud, credentials, cyber, infrastructure, malicious, pypi, software, supply-chain, theft

The March 2026 compromise of LiteLLM was more than a short-lived malicious PyPI upload. It demonstrated how an upstream breach in developer tooling can turn AI infrastructure into a high-value conduit for credential theft, cloud intrusion, and downstream software supply chain abuse. The packages were available for roughly 40 minutes before quarantine, but their brief…
The AI That Hacked Its Way to a Passing Grade Wasn’t the Real Story

Aug 11, 2026 2:26 PM

Tags: ai

An autonomous model breaking containment is alarming. What the incident reveals about how enterprises secure AI systems should be even more concerning. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/the-ai-that-hacked-its-way-to-a-passing-grade-wasnt-the-real-story/
OpenAI Launches Two-Tier Security Access Program Alongside GPT 5.6 Cyber

Aug 11, 2026 2:26 PM

Tags: access, ai, cyber, openai

Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/openai-daybreak-blue-red-gpt-cyber/
Acht Minuten bis zur Cloud-Kompromittierung: Wie IAM-Schlüssel und KI Angriffe beschleunigen

Aug 11, 2026 2:26 PM

Tags: ai, cloud, cyberattack, iam

Cloud-Angriffe in weniger als zehn Minuten: Wie kompromittierte IAM-Schlüssel, Fehlkonfigurationen und KI das Tempo von Cloud-Attacken erhöhen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/acht-minuten-bis-zur-cloud-kompromittierung-wie-iam-schluessel-und-ki-angriffe-beschleunigen/a46107/
Nearly 60% of people regretted taking social media financial advice

Aug 11, 2026 1:26 PM

Tags: ai, finance, intelligence

TSB survey of 2,000 people found that one in four have used artificial intelligence for financial advice First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366648053/Nearly-60-of-people-regretted-taking-social-media-financial-advice
GhostJacking Attacks Let Hackers Hijack AI Agents and Steal Cloud Credentials

Aug 11, 2026 1:26 PM

Tags: ai, attack, cloud, credentials, cyber, exploit, hacker, infrastructure, malicious, unauthorized

Security researchers have disclosed “GhostJacking,” a new class of attacks that exploits trusted observability and security platforms to manipulate AI agents into making unauthorized infrastructure changes, executing attacker-controlled commands, and exposing cloud credentials. GhostJacking Attacks This research, presented at DEF CON 34, describes how malicious content embedded in logs, alerts, or issue reports can serve…
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets

Aug 11, 2026 1:26 PM

Tags: ai, data, malicious, theft, tool

A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys, environment secrets, source code, and customer data without ever sending one obviously harmful instruction.The trick can work even after a blunt version of the same theft is refused: split the request into fragments that each look routine, place…
Nutzer wollte nur Kurs buchen: KI-Agent hat unerwartet ein Fitnessstudio gehackt

Aug 11, 2026 12:26 PM

Tags: ai

Unverhoffte KI-Hacks gibt es nicht nur mit den neuesten Modellen. In Australien ist ein KI-Agent schon vor Monaten in eine Buchungsplattform eingedrungen. First seen on golem.de Jump to article: www.golem.de/news/nutzer-wollte-nur-kurs-buchen-ki-agent-hackte-unerwartet-ein-fitnessstudio-2608-211796.html