Explore the intersection of AI and cybersecurity. Stay informed on AI-driven security trends, tools, and threats in the ever-evolving digital landscape.
Search across headline titles and summaries.
Background for this topic.
Artificial intelligence (AI) describes computer systems that perform tasks such as recognizing patterns, making predictions, understanding language, or generating content. In security reporting, the term commonly includes machine-learning models used for detection and analysis, as well as generative AI applications that produce text, code, images, or other outputs.
AI can help analyze security telemetry, prioritize vulnerabilities, and support investigations, but its outputs can be wrong or manipulated. Important attack surfaces include prompt injection that steers an application into unintended actions, sensitive data being exposed through prompts or model outputs, and excessive permissions granted to AI systems that use external tools. Models can also be degraded by poisoned training data or evaded with carefully crafted inputs. Practitioners should protect training and operational data, limit model access and tool permissions, test for adversarial behavior, and require appropriate human validation before high-impact decisions.
Information Security Media group CTO and CISO Dan Grosu discusses the challenges of realistically implementing the directives in President Joe Biden's executive order on artificial intelligence. Hint: He thinks it's going to be "a madhouse" if enterprises don't get more educated about AI.
While attackers have targeted AI systems, failures in AI design and implementation are far more likely to cause headaches, so companies need to prepare.
The AI security startup’s platform will allow organizations to define appropriate AI usage and enforce security policies.
Threat actors have been increasingly weaponizing Microsoft Graph API for malicious purposes with the aim of evading detection
New CEO Brian Roche on Application Management and the Role of AI in Managing RiskNew Veracode CEO Brian Roche discusses the importance of artificial intelligence in managing application risk, the integration of startup Longbow Security into Veracode's ecosystem, and the convergence of traditional application security with cloud security.
Dynatrace research claims global CISOs are concerned AI is driving advanced app security threats and poor developer practices
All Dropbox Sign Users' Emails Stolen, Plus Some MFA and OAuth Tokens, API KeysDropbox said hackers breached its infrastructure and stole swaths of customer data for its legally binding electronic signature service, Dropbox Sign, including names, emails, hashed passwords and authentication tokens. The company has begun forcing password resets and API key rotation.
Weaponizing Microsoft's own services for command-and-control is simple and costless, and it helps attackers better avoid detection.
Cheap and easy access to AI makes it harder to detect state-sponsored and homegrown campaigns during this election year
Unmanaged and unknown Web services endpoints are just some of the challenges organizations must address to improve API security.
New Report Says Global Threat Actors May Use AI to Enhance Physical Attacks on USThe U.S. Department of Homeland Security is warning that known limitations for nuclear and chemical security regulations in the United States could lead to global threat actors taking advantage of artificial intelligence tools to launch catastrophic attacks against the country.
Modern Treasury's Ani Narayan on Why RFP on New Rails Won't Replace ACH Just YetAs ACH continues to dominate U.S. transactions, newer payment rails, including FedNow, are working to make their platforms more secure. One of the ways they are doing this is by implementing a request for payment or RFP. Ani Narayan at Modern Treasury discussed the implications of this move.
The US Department of Homeland Security has released new guidelines for securing critical infrastructure and CBRN from AI threats
Themed "The Art of Possible," this year's conference celebrates new challenges and opportunities in the age of AI.
The U.S. government has unveiled new security guidelines aimed at bolstering critical infrastructure against artificial intelligence (AI)-related threats
High Demand for Experts Who Know Law Plus AI, Blockchain and Internet of ThingsAdvancements in AI, blockchain and the internet of things have caused the demand for professionals who have expertise in those fields as well as in law to skyrocket. There simply are not enough experts equipped with this knowledge, and the gap presents a unique and lucrative career opportunity.
Cisco Cybersecurity Readiness Index Shows Only 3% of Companies Are Cyber ResilientCisco's 2024 Cybersecurity Readiness Index showed a concerning gap - while 80% of organizations felt confident in their cybersecurity readiness, only 3% had a "Mature" level of readiness. This suggests companies must plan cybersecurity budgets, upgrade infrastructure and adopt AI for resilience.
Red teaming is a crucial part of proactive GenAI security that helps map and measure AI risks.
European non-profit Noyb has filed a complaint to the Austrian data protection authority (DSB) over OpenAI’s ChatGPT providing false personal information