Tag: ai
-
Microsoft Copilot Deployments Delayed Over Security Concerns
CoreView research finds that security leadership is concerned about AI Assistant exposing confidential data First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/microsoft-copilot-delayed-over/
-
OpenAI’s AI >>goes rogue<< and hacks Hugging Face: what you need to know
You can’t have failed to hear the news headlines about “rogue” OpenAI models hacking into another AI organisation, Hugging Face. First seen on bitdefender.com Jump to article: www.bitdefender.com/en-us/blog/hotforsecurity/openais-hacks-hugging-face
-
Deutschland belegt weltweit den 4. Platz im Bereich künstliche Intelligenz
Angesichts des sich rasant beschleunigenden internationalen Wettbewerbs im Bereich der künstlichen Intelligenz verstärken die Großmächte ihre Bemühungen, ihre Position in einem Sektor zu festigen, der für Wirtschaftswachstum, Innovation und technologische Souveränität von zentraler Bedeutung geworden ist. Über die Investitionen und Industriestrategien der USA, Chinas und Europas hinaus etabliert sich KI nun als Massenmarkttechnologie. In diesem Kontext…
-
Künstliche Intelligenz hat Hugging Face nicht an Cleverness übertroffen, sie hat das Mittelmaß optimiert
Die in der Diskussion stehende Attacke einer OpenAI-KI auf Hugging Face hat eine Zero-Day-Lücke in einem Package-Registry-Proxy ausgenutzt, um die Isolation zu durchbrechen. Die KI eskalierte in der Folge Privilegien, startete Seitwärtsbewegungen und erreichte so einen Knotenpunkt mit Internetzugang. Sie nutzte einen bösartigen Datensatz, um über unsichere Loader und Template-Injection die Ausführung von Remote-Code auszulösen.…
-
New Kimi K3 AI Agent Uncovers Redis Remote Code Execution Flaws in Just 27 Minutes
Moonshot AI’s newly unveiled Kimi K3 model is attracting considerable attention in the cybersecurity community after successfully demonstrating its ability to autonomously identify critical vulnerabilities in Redis within minutes. This 2.8-trillion-parameter AI agent reportedly discovered multiple remote code execution (RCE) vulnerabilities across various Redis versions, specifically 6.2.22, 7.4.9, 8.6.4, and 8.8.0. This highlights the increasing…
-
KI greift eigenständig an Unternehmen müssen ihre Cyberabwehr neu denken
Die aktuelle Berichterstattung ruft erschreckende Zukunftsszenarien wach: Zum ersten Mal wurde ein selbstständiger Hackerangriff durch eine künstliche Intelligenz bekannt. Der KI-Anbieter OpenAI meldet einen neuartigen Sicherheitsvorfall, hervorgerufen von einer unternehmenseigenen KI-Technologie. Dan Schiappa, President Technology and Services bei Arctic Wolf, erklärt, was die Evolution eigenständig angreifender KI für die Cyberbedrohungslandschaft bedeutet. ‘KI ist zunehmend in…
-
Google Released Gemini 3.5 Flash Cyber AI, a Specialized AI Model for Vulnerability Hunting
Google DeepMind unveiled Gemini 3.5 Flash Cyber, an AI model for vulnerability discovery and patching, available only to governments and trusted partners. Google DeepMind announced Gemini 3.5 Flash Cyber on Tuesday, a security-focused AI model built on top of the existing 3.5 Flash architecture and designed specifically to find, validate, and patch software vulnerabilities. It…
-
Agentic AI Challenges Progress in Confidential Computing
Core issues that slowed down adoption of secure data vaults are being resolved by technology, but artificial intelligence poses new ones. Experts have some answers. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/agentic-ai-challenges-progress-in-confidential-computing
-
AI Agents Now the Enterprises Fastest Growing Exposed Attack Surface
Sophos report warns that the rapid adoption of AI by businesses is leaving them vulnerable to a new source of cyber threats First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-agents-attack-surface/
-
New Windows Stealer Uses AI Profiling to Identify High-Value Corporate Victims
A new Windows-focused infostealer and remote access trojan (RAT) dubbed Dolphin X is being advertised on cybercrime forums with a clear pitch: automate the theft and triage of high-value corporate targets. Unlike commodity stealers that focus mainly on browser passwords, Dolphin X is positioned as an enterprise-adjacent data vacuum with a built-in AI-powered victim scoring…
-
New Dolphin X Stealer Employs AI Profiling to Prioritize Targets
Dolphin X is a new infostealer that uses AI to sort and rank victims, giving cybercriminals a faster way to identify lucrative targets First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/new-dolphin-x-stealer-ai-targets/
-
KI-Governance und Zugriffsrechte – Digitale Assistenten: Diese Regeln sollten Unternehmen aufstellen
First seen on security-insider.de Jump to article: www.security-insider.de/digitale-assistenten-diese-regeln-sollten-unternehmen-aufstellen-a-3301da0688cb1c78f38bb3e45b10008b/
-
Microsoft Adds Prompt Injection Protection to Defender for Office 365
Microsoft has introduced prompt injection protection in Defender for Office 365, representing a significant advancement in securing enterprise email environments against emerging AI-targeted threats. As organizations increasingly adopt AI assistants like Microsoft 365 Copilot to summarize, triage, and respond to emails, attackers are shifting their tactics from traditional phishing methods to manipulating AI systems directly.…
-
GitHub revamps bug bounty program with new VIP tier, payout changes
GitHub is changing its bug bounty program to reward higher-quality vulnerability reports and reduce low-effort submissions, including AI-generated reports. The changes will … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/23/github-bug-bounty-program-changes/
-
Two-Thirds of Ransomware Victims Say AI Boosted Attack Effectiveness
A new study of organizations which have fallen victim to ransomware suggests the rise of AI-tools being used by hackers is making life harder for defenders First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-boosts-ransomware-effectiveness/
-
Microsoft und Mistral erweitern Partnerschaft – Milliarden-Deal: Microsoft und Mistral AI stärken Europas KI
First seen on security-insider.de Jump to article: www.security-insider.de/milliarden-deal-microsoft-und-mistral-ai-staerken-europas-ki-a-1d59a04a7b78184a4ce93f544e9337a6/
-
Keiner KI-Aktion wird implizit vertraut – Versa bringt Zero-Trust-Architektur für KI-Agenten
First seen on security-insider.de Jump to article: www.security-insider.de/versa-bringt-zero-trust-architektur-fuer-ki-agenten-a-f6f2c6169f2345c472d4d6de7f33d12f/
-
Google Unveils CodeMender AI Agent for Automated Vulnerability Detection and Remediation
Google has unveiled CodeMender, a managed AI security agent designed to identify, validate, and remediate software vulnerabilities at machine speed. Announced in preview on July 22, 2023, the tool is available through the Gemini Enterprise Agent Platform and can also function as a core component of Google’s AI Threat Defense offering. This launch comes as…
-
Shadow AI is becoming enterprise security’s biggest blind spot
Artificial intelligence has moved from experimentation to everyday business operations with remarkable speed. Employees are using it to summarize documents, draft … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/23/shadow-ai-security-risks/
-
KI-Governance für Entwickler im Einklang mit deutscher Compliance
Auf dem Okta AI Identity Summit in Frankfurt am Main im Juni sprach die manage it mit Jan Brose, Area Sales Director Auth0 von Okta, über die Herausforderung der Identitätssicherheit in Zeiten von KI-Agenten und benutzerfreundlicher Customer Experience. Herr Brose, was tut Auth0, warum wurde die Firma von Okta im Jahr 2021 gekauft und… First…
-
Product Showcase: AppViewX Agent Identity Security
AI is multiplying enterprise identities as quantum computing reshapes the cryptographic trust that secures them, and enterprises need to solve both together. Traditional … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/23/product-showcase-appviewx-agent-identity-security/
-
Anthropic Launches Claude Security Plugin to Scan Codebases for Vulnerabilities Before Commit
Anthropic has launched the Claude Security plugin for Claude Code in beta, enhancing its AI-assisted development platform with security scanning capabilities designed to identify vulnerabilities earlier in the software development lifecycle. The company stated that developers can scan code changes before committing them or initiate comprehensive security reviews across an entire codebase directly from the…
-
Ausbruch aus Testumgebung – Autonomer KI-Agent dringt in Hugging-Face-Systeme ein
Tags: aiFirst seen on security-insider.de Jump to article: www.security-insider.de/openai-verantwortung-ki-angriff-hugging-face-a-987ee29bad8f77ce0efbe12c4c975053/
-
Wenn die Sandbox zur Falle wird: So können KI-Agenten unbemerkt ausbrechen
Tags: aiFirst seen on t3n.de Jump to article: t3n.de/news/wenn-die-sandbox-zur-falle-wird-so-koennen-ki-agenten-unbemerkt-ausbrechen-1753782/
-
The AI code vulnerabilities that grow with your app
Theori built 28 apps with AI coding agents and scanned each one through its pentesting platform. Five models did the building, split between Anthropic and OpenAI, across apps … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/23/report-ai-code-vulnerabilities/
-
Lawmakers simulate AI-backed cyberattack
First seen on scworld.com Jump to article: www.scworld.com/brief/lawmakers-simulate-ai-backed-cyberattack-during-taiwan-crisis
-
Vectra AI report highlights exposure risks in dynamic enterprise environments
First seen on scworld.com Jump to article: www.scworld.com/brief/vectra-ai-report-highlights-exposure-risks-in-dynamic-enterprise-environments
-
Arista Networks enhances SD-WAN with AI-infused edge threat management
First seen on scworld.com Jump to article: www.scworld.com/brief/arista-networks-enhances-sd-wan-with-ai-infused-edge-threat-management
-
AI models caught cheating in cybersecurity evaluations
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-models-caught-cheating-in-cybersecurity-evaluations
-
The next managed security service: Deciding which AI agents get in
First seen on scworld.com Jump to article: www.scworld.com/perspective/the-next-managed-security-service-deciding-which-ai-agents-get-in