Tag: artificial intelligence
1912 articles
AI Worm Uses Open-Weight Models to Spread, Evade Defenses
Imagine a self-navigating AI worm that can identify vulnerabilities and gain access to over 70% of a network's hosts - in a test, it found 31.3 vulnerabilities and elevated access on 23.1 hosts in just 15 isolated runs. Researchers at the University of Toronto and elsewhere have now created a proof-of-concept AI-driven worm to demonstrate this unsettling possibility.
US Directs Agencies to Accelerate AI Adoption in National Security
The White House is pushing to supercharge national security with AI, directing agencies to rapidly adopt cutting-edge technology while protecting it from theft and manipulation. President Trump signed a memo that tasks top security offices, including the FBI and the ODNI, with harnessing AI to boost government operations and intelligence analysis.
US Lawmakers Probe A-10 Revitalization with AI, Electronic Warfare Gear
US lawmakers are exploring ways to breathe new life into the A-10 Thunderbolt II with cutting-edge tech, including artificial intelligence and electronic warfare gear, to boost its performance and relevance. The fate of the Warthog and its critical missions hangs in the balance, making this potential upgrade a high-stakes endeavor.
Trump Memo Targets AI Contractors With New Security Rules
The US is set to supercharge its AI capabilities in intelligence and warfighting domains, with a new presidential memo directing the federal government to accelerate AI adoption while prioritizing speed, security, and responsible innovation. The move aims to harness AI's potential in line with American values, with rigorous oversight to ensure safe and effective deployment.
Defense Teams Face AI-Driven Data Protection Challenges
The explosive growth of AI in the Department of Defense - a 1,775% surge in just one year - is putting intense pressure on defense teams to safeguard sensitive mission data. As AI empowers warfighters to make faster, more precise decisions, the challenge of protecting data at rest has never been more urgent.
AI Governance Must Balance Innovation with Accountability
As AI models like Anthropic's Claude Mythos and OpenAI's Daybreak reach new heights, we face a crucial choice: foster an ecosystem that balances innovation with accountability, or risk stifling progress. By prioritizing responsible leadership, like Anthropic's deliberate delay of Mythos' deployment to surface vulnerabilities, we can pave the way for a safer and more reliable future.
Apple Unveils AI-Powered Tool to Automatically Secure Compromised Passwords
Say goodbye to password anxiety with Apple's latest innovation - an AI-powered tool that automatically secures compromised passwords, giving you peace of mind with just a few clicks. This game-changing feature, part of Apple Intelligence, uses AI to update weak and vulnerable credentials to strong, unguessable passwords.
OpenAI Bolsters ChatGPT Security With New Controls
OpenAI has introduced Lockdown Mode for ChatGPT, a game-changing security control that limits the model's access to the web and external services, giving users and organizations handling sensitive data an added layer of protection. This new feature is now available to personal and self-serve business accounts, following its initial rollout for enterprise plans in February.
Open Source Faces Hard Fork Amid AI-Fueled Security Crisis
The open source community is facing a daunting security crisis fueled by AI, giving rise to a new category of threat dubbed "Mythos" - a complex chain of low-level issues that can be combined to create devastating attacks. This emerging threat is not just a single bug or false positive, but a game-changing phenomenon that demands immediate attention.
AI Phishing Overwhelms SOCs, Exposing Gaps in Alert Triage
AI has transformed phishing from a numbers game into a volume machine, allowing attackers to churn out convincing lures in minutes and flood security teams with a tidal wave of alerts to sift through. This overwhelming surge is exposing gaps in alert triage, putting Tier 1 analysts to the test.
OWASP Researcher Warns of Unsolved Prompt Injection Risk in AI Development
Ariel Fogel, an AI security researcher, warns that organizations are rapidly deploying AI agents without proper governance, leaving a critical vulnerability - prompt injection - unsolved. This architectural flaw in large language models allows inputs to be processed as a single token sequence, with no reliable way to enforce privilege boundaries.
Microsoft Unveils Intelligent Terminal, AI-Powered Windows Tool
Meet Intelligent Terminal, your new coding sidekick that helps you squash errors, craft commands, and troubleshoot issues without ever leaving Windows Terminal. This AI-powered assistant is like having a expert developer by your side, always aware of what's happening and ready to lend a hand.
OpenAI Bolsters ChatGPT with Lockdown Mode to Curb Data Exfiltration Risks
OpenAI is stepping up ChatGPT's security game with Lockdown Mode, a powerful setting that limits connections to the web and external services to prevent data exfiltration - a game-changer for those handling sensitive information. This advanced feature is now rolling out to eligible accounts, offering stricter protection guarantees.
AI Agents Expose Security Risks in 93% of Organizations
Most organizations are unwittingly rolling out AI agents with access to sensitive tasks, leaving them vulnerable to security breaches. In fact, only 32% of teams feel very confident they could recover from exposed admin credentials, highlighting a disturbing gap in control and preparedness.
Researchers Prototype Self-Contained AI Worm
Imagine a computer worm that's not just a malicious piece of code, but a self-contained AI entity that can spread and operate on its own - researchers have just prototyped one, and it's as fascinating as it is unsettling. This AI-powered worm is equipped with its own Large Language Model (LLM), making it a reality that's eerily close to sci-fi concepts.
SOCs Struggle to Unlock AI Value Amid Fragmented Architecture
Despite aggressive AI adoption, with surging growth in tools like large language models and AI co-pilots, a mere 10% of Security Operations Centers (SOCs) report that AI has delivered excellent value to their operations. Most SOCs are left wondering if their AI investments are truly paying off.
Lloyds Banking Group Unveils Hands-On Approach to Securing Agentic AI
Lloyds Banking Group is taking a proactive approach to securing agentic AI, recognizing that understanding AI itself is crucial to embedding security into its adoption. The bank has made security a top priority, framing it as a deliberate technical strategy that spans the entire AI lifecycle.
OWASP Unveils Framework to Gauge Agentic AI Security Maturity
As organizations rapidly deploy AI agents, governance often lags behind - but a new framework from OWASP aims to change that. The Enterprise Adoption Maturity Model provides a practical roadmap for gauging and improving agentic AI security maturity.
AI Coding Tools Require Embedded Security to Counter Emerging Risks
Security can't keep pace with AI coding tools unless it's embedded from the start - after all, with hundreds of daily code changes, it can't be a bolt-on activity that happens after the fact. It needs to be a fundamental part of the creation process itself.
Healthcare Sector Targets Urgent Shift to AI-Powered Cybersecurity
The healthcare sector is on high alert: with a toxic mix of outdated infrastructure, hyper-connectivity, and human fatigue creating a perfect storm of risk, reactive cybersecurity approaches are no longer cutting it. It's time for healthcare organizations to urgently shift to AI-powered cybersecurity to stay ahead of rapidly evolving threats.
Cybersecurity Industry Scrambles to Adapt to AI-Powered Vulnerability Discovery
In a flash, an AI-powered tool uncovered a vulnerability that took down Moderna's development environment, leaving security teams scrambling to keep up with the lightning-fast capabilities of emerging tech. This game-changing incident highlights the incredible potential of AI-driven testing to expose weaknesses that human testers might miss.
Secure Infrastructure Unlocks AI's Defense Potential
As Dave Wajsgras, chairman and CEO of Everfox, aptly puts it, AI's trustworthiness is only as strong as the security of its underlying data, networks, and access controls. A recent incident involving Anthropic's Claude Mythos model serves as a stark reminder of the risks, with an unauthorized group reportedly gaining access in mere hours.
Microsoft Warns AI Adoption Exposes Organizations to New Malware Threats
Microsoft's senior security researcher warns that the AI tools making our jobs easier can also be exploited by threat actors, highlighting a new and urgent risk for organizations to manage. As AI adoption grows, companies must recognize it as both a valuable asset and a potential attack surface that requires careful protection.
Free AI Models Enable Low-Cost, Sophisticated Cyberattacks
Experts warn that free AI models are making sophisticated cyberattacks more accessible and affordable, posing a vastly underestimated threat to security. Even relatively simple AI models can be used to launch devastating attacks, according to University of Toronto computer engineering professor Nicolas Papernot.