Tag: risk
-
US government says it got hacked, again
A top Democrat on the Senate’s Intelligence Committee warned that the information accessed on a Homeland Security intelligence-sharing network may risk national security. First seen on techcrunch.com Jump to article: techcrunch.com/2026/07/02/us-government-says-it-got-hacked-again/
-
When Too Much Security Data Became the Risk
Rapid growth turned routine firewall logs into a security and budget liability. One CISO used artificial intelligence to filter what data truly belongs in the SIEM. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/too-much-security-data-risk
-
When Too Much Security Data Became the Risk
Rapid growth turned routine firewall logs into a security and budget liability. One CISO used artificial intelligence to filter what data truly belongs in the SIEM. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/too-much-security-data-risk
-
CISA Adds Actively Exploited Microsoft SharePoint Vulnerability to KEV Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has recently added a newly discovered vulnerability in Microsoft SharePoint Server, tracked as CVE-2026-45659, to its Known Exploited Vulnerabilities (KEV) Catalog. This addition highlights the active exploitation risks present in enterprise environments. The vulnerability falls under the CWE-502 (Deserialization of Untrusted Data) category, allowing an authenticated attacker to…
-
DORA und die Grenzen formaler Compliance: Digitale Resilienz ist eine Architekturfrage
Management Summary Formale Compliance schafft keine Sicherheit: DORA definiert einen verbindlichen Rahmen, doch echte digitale Resilienz entsteht erst, wenn Governance, Technologie und Betrieb architektonisch verzahnt sind Checklisten allein reichen nicht. Komplexe, historisch gewachsene IT”‘Landschaften erhöhen das Risiko: Fragmentierte Zertifikate, dezentrale Schlüsselverwaltung und inkonsistente Identity”‘Konzepte erschweren operative Steuerbarkeit und machen Institute anfällig für Angriffe. Identitäten… First…
-
FTC-Entscheidung bringt EU-US Data Privacy Framework unter Druck
Mit der aktuellen US-Entscheidung zur Unabhängigkeit der Federal Trade Commission wackelt eine zentrale Grundlage des EU-US Data Privacy Framework: die Annahme, dass Datenschutzverstöße in den USA unabhängig kontrolliert und überprüft werden können [1]. Damit wird aus einer vermeintlichen juristischen Detailfrage ein handfestes Risiko für Unternehmen, Behörden und Betreiber kritischer Infrastrukturen in Europa. Dazu sagt… First…
-
Shadow AI: Governing What You Can’t See
Why Shadow AI Is Becoming a Security Challenge for Modern Organizations Shadow AI is fast becoming a critical enterprise blind spot, with Gartner predicting 40% of organizations will face security or compliance incidents by 2030. As employees adopt unapproved tools, CIOs must close visibility gaps and align AI governance with innovation before risks escalate. First…
-
Wenn KI theoretische Risiken in reale Angriffe verwandelt
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/ki-theoretische-risiken-reale-angriffe
-
The Cost of Non-Compliance: Why AI Governance Is the New Enterprise Imperative
AI governance helps enterprises control tool use, reduce compliance risk, protect customer data, and avoid fines as teams adopt AI faster than policy. First seen on hackread.com Jump to article: hackread.com/non-compliance-ai-governance-enterprise-imperative/
-
Aflac Data Breach: Over 4M Customers in Japan May Be at Risk
Aflac says a data breach in Japan may affect 4.38 million customers and agents, exposing personal, policy, and some banking information. The post Aflac Data Breach: Over 4M Customers in Japan May Be at Risk appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-aflac-japan-data-breach-insurance-records/
-
Fake “Google Notes” Browser Extension Caught Swapping Crypto Wallet Addresses
McAfee says a Google Notes browser extension is replacing copied crypto payment details, putting wallet transfers at risk for Chrome, Brave, and Microsoft Edge users. First seen on hackread.com Jump to article: hackread.com/fake-google-notes-browser-extension-swap-crypto-wallets/
-
Turning Indicators into Intelligence in OpenCTI with Criminal IP
Threat intelligence is only as useful as the context behind it. Criminal IP explains how its integration enriches threat indicators in OpenCTI with risk scoring, infrastructure intelligence, and phishing analysis. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/turning-indicators-into-intelligence-in-opencti-with-criminal-ip/
-
Check Point Research warnt vor browser-nativer Ransomware durch KI-generierte Angriffstechnik
Der Fall ist deshalb relevant, weil die KI offenbar eine Lücke zwischen einem bekannten theoretischen Risiko und einer praktisch funktionierenden Angriffstechnik geschlossen hat. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/check-point-research-warnt-vor-browser-nativer-ransomware-durch-ki-generierte-angriffstechnik/a45644/
-
Cybersecurity-Assessment-Report von Bitdefender deckt KI-Risiken auf
Nicht nur die sich erweiternde Angriffsfläche ist für die dieses Jahr erneut von Bitdefender befragten professionellen IT-Sicherheitsverantwortlichen ein zunehmendes Risiko für die Datensicherheit. KI-Risiken, das Verschweigen von unberechtigten Zugriffen und Datensouveränität sind Trendthemen der aktuellen Neuauflage der Bitdefender-Studie zu Cybersecurity-Assessment. Im Rahmen einer unabhängigen Studie befragte Bitdefender über 1.200 IT- und IT-Sicherheitsprofis in den USA,…
-
Wenn KI den Angriff erfindet Browser-native Ransomware
Keine App. Kein Exploit. Keine technischen Kenntnisse erforderlich schon ein einziger Klick zur Erteilung einer Browserberechtigung könnte Jahre an Handyfotos, Ausweisdaten und Wiederherstellungscodes gefährden. Die Sicherheitsforscher von Check Point Research haben ein von Deepseek generiertes Malware-Sample aufgedeckt. Dabei hat ein KI-Modell eigenständig ein theoretisches Browser-Risiko mit einer funktionierenden Ransomware-Technik verknüpft. Diese wird vollständig im […]…
-
FCC Bans Chinese-Produced Network Equipment Linked to Cyber and Espionage Risks
The U.S. Federal Communications Commission (FCC) has implemented comprehensive new restrictions banning the import and marketing of Chinese-produced telecommunications and surveillance equipment identified as posing significant cybersecurity and espionage risks. Announced on June 26, 2026, this updated regulation addresses a longstanding loophole that previously allowed companies on the FCC’s “Covered List” to continue selling older,…
-
Microsoft Accelerates Post-Quantum Cryptography Shift to 2029
Microsoft on Tuesday said it’s accelerating its quantum safe security roadmap, stating technology advances in quantum computing are making it essential to replace existing encryption standards sooner than previously expected.”Advances in quantum research and development have shifted the risk horizon,” Mark Russinovich, chief technology officer of Microsoft Azure, said. “We believe First seen on thehackernews.com…
-
Self-harm and cyberflashing added to online safety offences list
The Online Safety Act has been updated to include ‘self-harm’ and ‘cyberflashing’ as ‘priority offences’, meaning online service providers will need to update their risk assessments of both categories First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366645166/Self-harm-and-cyberflashing-added-to-online-safety-offences-list
-
AI-generated code risks reach security, legal, and compliance teams
Most engineering organizations write code with AI, and a good number of them keep that code away from customers. A Flux survey of engineering leaders and practitioners found … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/01/ai-generated-code-risks-security/
-
Getting boards to fund ERM means speaking their currency
In this Help Net Security video, Greg Young, VP Cybersecurity and Corporate Development at TrendAI, explains how to build Enterprise Risk Management that a board will pay for. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/07/01/erm-the-board-funds-video/
-
New websites referencing Venezuela earthquake pose online risks
Tags: riskFirst seen on scworld.com Jump to article: www.scworld.com/brief/new-websites-referencing-venezuela-earthquake-pose-online-risks
-
SOC modernization can’t wait as Anthropic’s Mythos preview raises new security risks
First seen on scworld.com Jump to article: www.scworld.com/native/soc-modernization-cant-wait-as-anthropics-mythos-preview-raises-new-security-risks
-
AI adoption outpaces governance, creating risks for businesses
First seen on scworld.com Jump to article: www.scworld.com/brief/ai-adoption-outpaces-governance-creating-risks-for-businesses
-
Secret Service lax phone security puts leaders at risk, report finds
First seen on scworld.com Jump to article: www.scworld.com/brief/secret-service-lax-phone-security-puts-leaders-at-risk-report-finds
-
Microsoft accelerates quantum-safe roadmap as risks grow
Microsoft announced today that it is accelerating its quantum-safe security roadmap, saying advances in quantum computing are bringing the need to replace today’s encryption standards sooner than previously expected. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-accelerates-quantum-safe-roadmap-as-risks-grow/
-
DICOM Toolkit Bugs Raise Medical Imaging Security Risks
Common AI Tools Helped Researcher Discover Hidden Flaws. Several newly identified vulnerabilities in a DICOM toolkit used in medical-imaging software could expose patient information, crash imaging services offline and pose other serious problems if exploited, said the researcher who discovered the flaws using commonly used artificial intelligence tools. First seen on govinfosecurity.com Jump to article:…
-
Smart Glasses: Die Überwachung trägt Brille
Tags: riskSmart Glasses filmen, hören mit und analysieren per KI. Datenschützer warnen vor Überwachung und Risiken für die Privatsphäre. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/datenschutz/smart-glasses-ueberwachung-privatsphaere-330982.html
-
Singpass to roll out passkeys in fight against phishing scams
The passwordless feature will launch for iPhone users on 1 July 2026 with a device-bound model to avoid the security risks of cloud-synced passkeys First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366645129/Singpass-to-roll-out-passkeys-in-fight-against-phishing-scams
-
DOJ Seizes 400 Illegal FIFA World Cup Streaming Domains
Officials from the US Department of Justice seized nearly 400 domains linked to illegal World Cup streams and warned viewers about the risks of malware, phishing, and data theft. The post DOJ Seizes 400 Illegal FIFA World Cup Streaming Domains appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-doj-illegal-world-cup-streaming-domains/