Tag: ai
-
CISA boasts AI automation improvements to threat analysis, mission support
Cybersecurity and Infrastructure Security Agency officials said it’s proven a boon in numerous areas, but there are some hurdles to adoption, still. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-ai-automation-security-operations-efficiency-uipath-fusion-event/
-
GPT-5.5, Mythos Reach Hacking Parity, But Reasoning Falters
Benchmarks Shows Matched Capability, Brittle Reasoning. Two artificial intelligence models from competing labs have essentially the same offensive cyber capability level, with consistent reasoning failures that the cyber scores alone do not capture. OpenAI’s GPT-5.5 and Anthropic’s Mythos Preview now deliver near-identical offensive cyber performance. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/gpt-55-mythos-reach-hacking-parity-but-reasoning-falters-a-31594
-
Meta’s AI will scan height and bone structure to detect under-13 users
Tags: aiMeta is deploying AI that scans photos and videos for physical cues to assess whether a user is under 13 on Instagram and Facebook. Teen Account on Instagram (Source: Meta) … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/05/05/meta-ai-age-detection-instagram-facebook/
-
European MEPs Push for Stronger Post-Mythos Cybersecurity
Mythos a Turning Point, Say Lawmakers in Missive to European Commission. Dozens of European lawmakers are pressing the European Commission to act quickly to protect the continent’s cybersecurity, due to the advent of new AI models that have considerable hacking prowess. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/european-meps-push-for-stronger-post-mythos-cybersecurity-a-31599
-
‘Think before sharing,’ Giorgia Meloni says as AI-made lingerie image of her goes viral
Italian prime minister had received wave of criticism from people who believed deepfake pictures of her were realItaly’s prime minister, Giorgia Meloni, has criticised the circulation of AI-generated deepfake images of her, including one depicting her in lingerie, after they were widely shared online.Meloni <a href=”https://www.facebook.com/share/1Ccr5Sx9iV/?mibextid=wwXIfr”>wrote on Facebook on Tuesday: “In recent days, several fake…
-
GPT-5.4-Cyber & Mythos: Wie KI die Schwachstellenerkennung radikal beschleunigt
Der Wettbewerbsvorteil verschiebt sich: Nicht wer Schwachstellen zuerst entdeckt, gewinnt sondern wer ihre Behebung lückenlos nachweisen kann. Angriffe operieren in Maschinen-Geschwindigkeit. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/gpt-5-4-cyber-mythos-wie-ki-die-schwachstellenerkennung-radikal-beschleunigt/a44991/
-
CrowdStrike Promotes Amanda Adams To Global Alliances Leader Amid AI Push
Amanda Adams, a longtime channel executive at CrowdStrike, has been promoted to serve as the new global channel chief at the cybersecurity giant as it sees massive opportunities ahead in AI and services for solution and service provider partners, the company told CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2026/crowdstrike-promotes-amanda-adams-to-global-alliances-leader-amid-ai-push
-
Download: Secure Foundations for AI Workloads on AWS
Center for Internet Security helps organizations deploy AI and high-performance compute environments from a trusted, hardened operating system baseline. CIS Hardened Images … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/05/05/cis-download-secure-foundations-for-ai-workloads-on-aws/
-
The Back Door Attackers Know About, and Most Security Teams Still Haven’t Closed
Every AI tool, workflow automation, and productivity app your employees connected to Google or Microsoft this year left something behind: a persistent OAuth token with no expiration date, no automatic cleanup, and in most organizations, no one watching it. Your perimeter controls don’t see it. Your MFA doesn’t stop it. And when an attacker gets…
-
Cisco Acquisition of Astrix Security Signals to Strengthen on Non-Human Identity Security
Networking and security leader Cisco has announced its intent to acquire Astrix Security, a pioneer in Non-Human Identity (NHI) management. Announced in May 2026, this acquisition is designed to help enterprises secure the rapidly expanding >>agentic workforce<<, the growing ecosystem of autonomous AI agents that operate alongside human employees. As organizations integrate AI into their…
-
Vimeo-Daten nach Angriff auf KI-Dienstleister erbeutet – Hacker fordern von Vimeo Lösegeld für Nutzerdaten
First seen on security-insider.de Jump to article: www.security-insider.de/shiny-hunters-datenleck-vimeo-anodot-a-0bc433776c1e797ffe967ac46011a87c/
-
Copy Fail und die KI: Forscher patzen bei Offenlegung von Linux-Lücke
Copy Fail ist eine der gefährlichsten Linux-Lücken der vergangenen Jahre. Die Offenlegung verlief aber alles andere als vorbildlich – unter anderem wegen KI. First seen on golem.de Jump to article: www.golem.de/news/copy-fail-und-die-ki-forscher-patzen-bei-offenlegung-von-linux-luecke-2605-208331.html
-
AI finds 20-year-old bugs in PostgreSQL and MariaDB
Tags: ai, breach, credentials, cve, exploit, flaw, github, injection, nist, rce, remote-code-execution, sql, vulnerabilityInadequate JSON parsing allowed RCE on the MariaDB server: In MariaDB, a buffer overflow bug, tracked as CVE-2026-32710, was found in the JSON_SCHEMA_VALID() function using Xint Code. The vulnerability allows an authenticated user to trigger a crash, which, under controlled conditions, could be escalated into remote code execution.Compared to the PostgreSQL flaws, exploitation here is…
-
Google now offers up to $1.5 million for some Android exploits
Google overhauls its Android and Chrome vulnerability rewards programs, offering bounties of up to $1.5 million for the most difficult exploits while scaling back payouts for flaws that artificial intelligence (AI) has made easier to find. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-now-offers-up-to-15-million-for-some-android-exploits/
-
Weniger Microsoft-Schwachstellen, aber mehr kritische Sicherheitslücken
Die diesjährigen Zahlen des neuesten Microsoft Vulnerabilities Reports zeigen eine deutliche Verlagerung bei den ermittelten Sicherheitsrisiken: Einerseits hat sich die Gesamtzahl identifizierter Schwachstellen stabilisiert, aber andererseits haben die kritischen Anfälligkeiten stark zugenommen, wodurch Schweregrad und Auswirkungen der Sicherheitslücken rapide steigen [1]. Insgesamt gibt es 2025 ein verändertes Risikoprofil, das durch KI-beschleunigte Schwachstellenerkennung, eine wachsende Cloud-Akzeptanz……
-
We Scanned 1 Million Exposed AI Services. Here’s How Bad the Security Actually Is
While the software industry has made genuine strides over the past few decades to deliver products securely, the furious pace of AI adoption is putting that progress at risk. Businesses are moving fast to self-host LLM infrastructure, drawn by the promise of AI as a force multiplier and the pressure to deliver more value faster.…
-
AI Adoption Outpaces Safety Policies, Leaving Organizations Exposed to Cyber Risk
ISACA report warns that while AI has become the norm, many organizations are yet to formally apply safety or security policies around its use First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ai-adoption-outpaces-safety-policy/
-
NCSC Warns of an AI-Fuelled “Vulnerability Patch Wave”
The UK’s National Cyber Security Centre is urging organizations to prepare for glut of new software updates First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ncsc-warns-aifuelled-vulnerability/
-
KI außer Kontrolle? 90 % der Unternehmen fehlt die Sicherheitsstrategie für autonome Agenten
Die Botschaft ist eindeutig: Unternehmen stehen an einem Wendepunkt. Wer KI-Agenten produktiv einsetzen will, braucht zwingend eine robuste IAM-Strategie. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/ki-ausser-kontrolle-90-der-unternehmen-fehlt-die-sicherheitsstrategie-fuer-autonome-agenten/a44987/
-
CISOs step up to the security workforce challenge
Tags: ai, attack, automation, ciso, conference, control, cyber, cyberattack, cybersecurity, jobs, malicious, risk, skills, strategy, technology, threat, tool, trainingGomez-Sanchez and Turpin are speaking at the CSO Cybersecurity Awards & Conference, May 11-13. Reserve your place. And then there’s AI. When it comes to security, AI may help partially offset cyber skills shortages by automating certain tasks, but it also ramps up cyberattack volumes and expands the organizational attack surface, without fixing CISOs’ ongoing talent…
-
NHS to close-source hundreds of GitHub repos over AI, security concerns
Healthcare giant’s maintainers handed May deadline to enact the change First seen on theregister.com Jump to article: www.theregister.com/2026/05/05/nhs_to_closesource_hundreds_of_repos/
-
CSA: Take AI cyber threats to the boardroom
Current cyber risk assumptions may no longer be valid given the speed of advanced AI, warns the chief executive of Singapore’s Cyber Security Agency First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366642800/CSA-Take-AI-cyber-threats-to-the-boardroom
-
Was KI-Systeme deutschen IT-Verantwortlichen empfehlen
Tags: aiDie Spitze führt SoSafe mit einem Visibility Score von 63,6 Prozent über alle Plattformen hinweg, gefolgt von KnowBe4 (48,0 Prozent) und Proofpoint (35,8 Prozent). First seen on infopoint-security.de Jump to article: www.infopoint-security.de/was-ki-systeme-deutschen-it-verantwortlichen-empfehlen/a44855/
-
KI treibt Phishing in neue Dimensionen: 86 % aller Angriffe jetzt automatisiert
Phishing ist 2026 kein einzelner Angriff mehr, sondern ein orchestriertes Zusammenspiel aus Technologie, Psychologie und KI. Wer sich schützen will, muss genau dort ansetzen. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/ki-treibt-phishing-in-neue-dimensionen-86-aller-angriffe-jetzt-automatisiert/a44982/
-
One in four MCP servers opens AI agent security to code execution risk
Enterprise deployments of AI agents lean on two extension mechanisms that introduce risk at different layers of the stack. MCP servers expose deterministic code functions with … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/05/05/ai-agent-security-skills-blind-spots/
-
Anthropic Mythos spurs White House to weigh pre-release reviews for high-risk AI models
Tags: access, ai, cybersecurity, exploit, framework, government, group, infrastructure, malicious, openai, risk, software, technology, update, vulnerabilityThe Mythos factor: The discussion follows Anthropic’s recent introduction of Mythos, a model the company has described as representing a watershed moment for cybersecurity.Anthropic has said Mythos Preview has found thousands of high-severity vulnerabilities, including some in every major operating system and web browser, and that AI models have reached a level of coding capability…
-
‘Copy Fail’ is a real Linux security crisis wrapped in AI slop
The actively exploited defect could affect every mainstream Linux distribution built since 2017, but some researchers found Theori’s AI-generated disclosure unhelpful and lacking. First seen on cyberscoop.com Jump to article: cyberscoop.com/copy-fail-linux-vulnerability-artificial-intelligence/
-
Five Eyes Sound Alarm on Autonomous AI Security Risks
Guidance Warns Autonomous Systems Expand Enterprise Exposure. Federal and Five Eyes cyber agencies warn that agentic AI systems – capable of autonomous action across enterprise environments – are introducing identity, visibility and control risks that could outpace existing defenses without continuous monitoring, zero trust enforcement and human oversight. First seen on govinfosecurity.com Jump to article:…
-
prompted 2026 1.8M Prompts, 30 Alerts: Hunting Abuse In A User-Defined Agent Ecosystem
[un]prompted 2026 – 1.8M Prompts, 30 Alerts: Hunting Abuse In A User-Defined Agent Ecosystem Authors, Creators & Presenters: Matt Rittinghouse, Lead Security Data Scientist At Salesforce & Millie Huang, Staff Security Data Scientist At Salesforce Our thanks to [un]prompted for publishing their Creators, Authors and Presenter’s outstanding [un]prompted 2026 AI Security Practitioner content on the…
-
prompted 2026 1.8M Prompts, 30 Alerts: Hunting Abuse In A User-Defined Agent Ecosystem
[un]prompted 2026 – 1.8M Prompts, 30 Alerts: Hunting Abuse In A User-Defined Agent Ecosystem Authors, Creators & Presenters: Matt Rittinghouse, Lead Security Data Scientist At Salesforce & Millie Huang, Staff Security Data Scientist At Salesforce Our thanks to [un]prompted for publishing their Creators, Authors and Presenter’s outstanding [un]prompted 2026 AI Security Practitioner content on the…