Tag: ai
-
Securing the AI Stack: How to Combine NDR with Post-Quantum Safeguards
Learn how to protect your AI infrastructure against HNDL attacks by combining NDR with post-quantum cryptography to secure the Model Context Protocol. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/securing-the-ai-stack-how-to-combine-ndr-with-post-quantum-safeguards/
-
Horizon3 hits $2 billion valuation with $250M Series E as AI threats escalate
Cybersecurity startup Horizon3 raised $250 million at a $2 billion valuation as companies want continuous, AI-powered security validation instead of annual pentesting. First seen on techcrunch.com Jump to article: techcrunch.com/2026/08/03/horizon3-hits-2-billion-valuation-with-250m-series-e-as-ai-threats-escalate/
-
Escape joins OpenAI’s Trusted Access for Cyber (TAC) to advance AI-powered offensive security
We’ve been approved for OpenAI’s Trusted Access for Cyber preview. For years we’ve been building toward one idea: offensive security that runs continuously inside engineering, instead of arriving twice a year as a PDF nobody reads past the executive summary. Business-logic DAST first, then First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/escape-joins-openais-trusted-access-for-cyber-tac-to-advance-ai-powered-offensive-security/
-
BLACK HAT QA: The AI agent that clears the human door and slips past the machine gate
Companies are deploying AI agents into everyday work at a pace no security program was built for. Related: AI layoffs pays for AI infrastructure The rush is competitive. Nobody wants to be the last one still doing this by hand…. (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/black-hat-qa-the-ai-agent-that-clears-the-human-door-and-slips-past-the-machine-gate/
-
Künstliche Intelligenz ist fester Bestandteil moderner Cyberangriffe
Cyberangreifer operationalisieren künstliche Intelligenz nicht nur, um Schwachstellen innerhalb von Stunden auszunutzen, sondern auch, um KI, die in Unternehmen eingesetzt wird, anzugreifen. Zudem nutzen Angreifer sie auch, um Angriffe entlang der Software-Lieferkette zu skalieren. Dies verdeutlicht der aktuelle <> von Crowdstrike. So nutzten China-nahe Angreifer innerhalb von 24 Stunden nach der Veröffentlichung eines […] First seen…
-
Risiken der KI-Lieferkette
Die jüngste Offenlegung von kritischen Schwachstellen in großen KI-Repositorien wie Hugging Face verdeutlicht ein grundlegendes Problem. Ausgerechnet jene Plattformen, auf die Unternehmen bei der Entwicklung KI-gestützter Anwendungen setzen, entwickeln sich zunehmend zu einem Einfallstor für systemische Risiken. Mit dem Übergang zu agentenbasierten Systemen gewinnt dieses Problem an Dringlichkeit. Von Shadow-IT zu Shadow-AI Über Jahre […]…
-
SMBs Using AI Are More Competitive and Confident in Business Growth
Research finds SMBs using AI gain three times the competitive advantage, although skills shortages, uncertain ROI and security concerns still slow deployment. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/smbs-using-ai-are-more-competitive-and-confident-in-business-growth/
-
The OpenAI Hack Shows the Genie Is Out of the Bottle
This essay originally appeared in Foreign Policy. Earlier this month, two of OpenAI’s models broke out of their containment sandbox and attacked another AI company. The story is kind of wild. OpenAI was running security tests on two of its models: GPT-5.6 Sol and an unreleased model that is almost certainly GPT-6. In particular, it…
-
30 days with Claude Mythos Preview: How Tenable adapted our security program, and why yours is next
Tags: ai, api, attack, business, control, cybersecurity, data, data-breach, endpoint, exploit, flaw, injection, LLM, remote-code-execution, risk, service, threat, tool, update, vulnerabilityTenable spent 30 days running frontier AI models against our own code. It didn’t just find bugs, it proved they’re real, with reproducible exploits. That fundamentally changes code security from ranking potential code defects to a much higher signal focused on the findings that matter. Read on to learn how it reshaped our security team’s…
-
FOMO in the SOC: Where AI Platforms like Claude Actually Fit
AI is moving incredibly fast, and every security leader is feeling the pressure to keep up.AI platforms like Claude, Codex and Cursor are already helping security teams write detections, investigate alerts, summarize incidents, and automate repetitive work. The conversation has evolved from whether AI belongs in the SOC, to where each type of AI delivers…
-
Securing AI in the Browser for Enterprises – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/securing-ai-in-the-browser-for-enterprises-kovrr/
-
Kaspersky to scan AI agents for backdoors as shadow AI spreads
The security supplier will release a tool this month that vets agent skills, models and artificial intelligence development components before they reach corporate networks to defend against threats from shadow AI First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366646680/Kaspersky-to-scan-AI-agents-for-backdoors-as-shadow-AI-spreads
-
Klassische Firewalls sind blind für Angriffe in natürlicher Sprache – Warum LLM-Guards allein die KI-Sicherheit nicht retten
First seen on security-insider.de Jump to article: www.security-insider.de/llm-guards-ki-sicherheit-a-2fbccecb3c2d06bb933157bbaadd9970/
-
Shadow AI und autonome Agenten: Die unterschätzte Gefahr aus öffentlichen KI-Repositorien
Open-Source-Modelle und KI-Agenten schaffen neue Lieferkettenrisiken. Unternehmen brauchen Governance, Transparenz und menschliche Kontrolle. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/shadow-ai-und-autonome-agenten-die-unterschaetzte-gefahr-aus-oeffentlichen-ki-repositorien/a45980/
-
OAuth 2.0 Token Exchange (RFC 8693) for Agent Delegation: A Worked Example
Tags: aiA worked RFC 8693 token exchange for AI agent delegation: actor_token, the act claim, downscoping, nested delegation chains, and what the spec does not cover. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/oauth-2-0-token-exchange-rfc-8693-for-agent-delegation-a-worked-example/
-
OpenAI Says Its AI Hacked Another Company on Its Own
OpenAI disclosed an unusual AI security incident involving a frontier model evaluation and Hugging Face, but the episode cuts through the hype: was this true autonomous intent, an agent following bad scope boundaries, or a warning about giving AI systems real tools and permissions? Tom, Scott, and Kevin discuss why anthropomorphizing AI makes the story……
-
What the Minnesota Water Attacks Reveal About Securing Remote Access to Critical Infrastructure
Tags: access, ai, attack, authentication, cisa, control, corporate, credentials, cyberattack, data-breach, exploit, Hardware, identity, infrastructure, Internet, law, least-privilege, malware, mfa, monitoring, network, password, risk, router, supply-chain, technology, vpn, zero-day, zero-trustWhen headlines break about cyberattacks targeting critical infrastructure, the conversation often turns immediately to zero-day exploits, advanced malware, and other sophisticated techniques. The recent attacks on municipal water systems across at least seven US states, including more than 30 Minnesota water and wastewater utilities, illustrate why this assumption can be misleading. As a “recovering CISO” who…
-
Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code
Three high-severity security flaws have been disclosed in Hugging Face’s Diffusers library that could allow crafted model repositories to stealthily execute arbitrary code on machines that load it, opening the artificial intelligence (AI) supply chain to security risk.”These vulnerabilities are bypassing trust_remote_code, the safeguard designed to stop unreviewed code from running in the First seen…
-
AI is now both the weapon and the target in cyberattacks
AI generates 2.5 signals for every human-triggered signal CrowdStrike has to assess. Meanwhile, attackers are using AI to weaponize vulnerabilities faster than companies can patch them. First seen on cyberscoop.com Jump to article: cyberscoop.com/crowdstrike-annual-threat-hunting-report-2026/
-
Mapping the malware blast radius a single alert won’t show you
In this interview with Help Net Security, Mike Wiacek, founder and CTO of Stairwell, explains Backstory, an AI agent that takes a single alert and works outward to map how far … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/03/mike-wiacek-stairwell-backstory-malware-blast-radius/
-
SkillSpector: NVIDIA’s open-source security scanner for AI agent skills
SkillSpector is an open-source scanner from NVIDIA that reads an agent skill and tells you whether to install it. Point it at a directory, a zip file, a single SKILL.md, or a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/03/skillspector-open-source-agent-skill-security-scanner/
-
AI cut phishing from hours to seconds, which is where DMARC and BIMI come in
In this Help Net Security video, Mike Boyle, VP of Business Units at GMO GlobalSign, and Rahul Powar, CEO and founder of Red Sift, unpack the evolution of email security and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/03/dmarc-and-bimi-video/
-
KI-Systeme: Wer testet, haftet für die Folgen
Tags: aiFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/ki-systeme-test-haftung-folgen
-
Entwicklung zur verlässlichen Geschäftstechnologie: KI-Kennzeichnung gemäß EU AI Act erst der Anfang
Tags: aiFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/entwicklung-verlass-geschaeftstechnologie-ki-kennzeichnung-anfang
-
OpenAI teases Astra, its next major AI model, after it solves 10 long-standing math problems
OpenAI has revealed Astra, an unreleased model designed to tackle complex, long-running tasks, after an internal version produced ten significant advances in mathematics and theoretical computer science. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-teases-astra-its-next-major-ai-model-after-it-solves-10-long-standing-math-problems/
-
The Massive AI Security Hole Your CISO Doesn’t Know About
Your AI security review passed and still missed the real attack surface. EchoLeak, over-permissioned agents, shadow AI: the AI-specific vectors most CISOs never test for, and the five moves that close them. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/the-massive-ai-security-hole-your-ciso-doesnt-know-about/
-
Why a Payments Company Wants an AI Model Router: Tokens Are Acting Like Currency
OpenRouter was worth .3 billion in May. Stripe is reportedly discussing billion in July. The routing layer turned out to be the valuable part. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/why-a-payments-company-wants-an-ai-model-router-tokens-are-acting-like-currency/
-
SabPaisa Partners with AccuKnox for Zero Trust AI-Powered Cloud Security to Secure Its Payments Platform
CALIFORNIA, USA, August 2nd, 2026, CyberNewswire AccuKnox, a leading Zero Trust Security platform, today announced that SabPaisa, an RBI-authorised digital payments company, has selected its AI-powered cloud security platform to ensure robust security of its payments platform. SabPaisa joins a growing roster of financial services leaders using AccuKnox to meet stringent compliance requirements while defending…
-
Grip AI Security Platform First AI Security
Discover the Grip AI Security Platform. Gain visibility into AI applications, agents, identities, and permissions with identity-first AI governance. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/grip-ai-security-platform-identity-first-ai-security/
-
AI Security Incident Response Framework – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/ai-security-incident-response-framework-kovrr/