Tag: corporate security
10 articles
Deepfakes Expose Verification Gaps in Corporate Security
Imagine receiving a call from your CFO on a Friday afternoon, urgently asking you to make a supplier payment before the weekend - only to discover it was a sophisticated deepfake designed to deceive you. With 62% of organizations already falling victim to deepfake attacks, it's clear that corporate security verification gaps are a pressing concern.
Network Segmentation Flaws Expose Corporate Attack Surface
Flat networks are a hacker's dream, allowing breaches to spread freely to critical systems that should be off-limits - and a recent analysis of 47,700 real-world network segments reveals that device mixing is a widespread problem. The average network segment contains 54 devices from four different categories, increasing the risk of a security breach.
AI Agents Exposed to Ghostjacking Attacks Bypassing Firewall Defenses
Imagine a stealthy attack that turns your own AI agents against you, routing sensitive email and web traffic around your firewall defenses - and it starts with just a single, seemingly harmless fake bug report. This sneaky technique, known as Ghostjacking, can leave even the biggest companies vulnerable to devastating breaches.
Shadow AI Agents Proliferate, Evading Corporate Controls
The alarming reality is that 48% of cybersecurity pros warn that AI agents with autonomous powers will be the most hazardous attack vector by 2026, and they're right - these rogue agents are no longer just chatbots, but persistent software secretly operating within corporate systems. Unlike harmless chatbots, shadow AI agents hold permanent permissions, connect to sensitive apps and data, and act independently, putting companies at risk.
ChatGPT Flaw Exposes Risk of Rogue AI Agents in Corporate Workspaces
Imagine a single, innocent-looking link being all it takes to create a rogue AI assistant inside your company's workspace, operating with your own accounts and permissions. A newly discovered ChatGPT vulnerability, dubbed AgentForger, makes this chilling scenario a harsh reality.
Red Teamer Exploits Trust to Steal Priceless Trophy
Imagine walking onto a secure campus with equipment in plain sight and a convincing story, and having employees roll out the red carpet - literally. A professional red teamer and his colleagues did just that, effortlessly gaining access to a Fortune 500 company's high-security site by exploiting one simple vulnerability: trust.
AI Skill Exploits Security Scanners, Reaches 26,000 Agents
In a shocking experiment, a security firm created a fake AI skill that evaded detection by security scanners and reached a staggering 26,000 agents, including those on corporate accounts. The skill, designed to be harmless, was able to bypass every scanner it was tested on, raising serious concerns about the safety of AI marketplaces.
UK Firms Bolster Cyber Defenses as AI Risks Mount
As uncertainty becomes the new normal, UK businesses are bolstering their cyber defenses, with 68% of leaders planning to boost cybersecurity investment over the next year. Despite this, many remain vulnerable, with fewer than three in 10 confident in their ability to respond to a major cyber incident.
UK Workers Sell Corporate Logins, Exposing Firms to Cybercrime
One in eight UK employees at large firms have sold or know someone who has sold corporate logins in the past year, a shocking trend that puts companies at risk of cybercrime. Alarming still, many justify this risky behaviour, with senior executives being more likely to think selling credentials is acceptable.
Password Resets Expose Vulnerability in Corporate Security
Did you know that password resets can cost companies a whopping $70 each, and with stolen credentials involved in nearly 45% of breaches, it's clear that corporate security is vulnerable to attack.