Explore the intersection of AI and cybersecurity. Stay informed on AI-driven security trends, tools, and threats in the ever-evolving digital landscape.
Search across headline titles and summaries.
Background for this topic.
Artificial intelligence (AI) describes computer systems that perform tasks such as recognizing patterns, making predictions, understanding language, or generating content. In security reporting, the term commonly includes machine-learning models used for detection and analysis, as well as generative AI applications that produce text, code, images, or other outputs.
AI can help analyze security telemetry, prioritize vulnerabilities, and support investigations, but its outputs can be wrong or manipulated. Important attack surfaces include prompt injection that steers an application into unintended actions, sensitive data being exposed through prompts or model outputs, and excessive permissions granted to AI systems that use external tools. Models can also be degraded by poisoned training data or evaded with carefully crafted inputs. Practitioners should protect training and operational data, limit model access and tool permissions, test for adversarial behavior, and require appropriate human validation before high-impact decisions.
Barclays' Becky Pinkard on Regulation, Containment, Leadership and AIRegulatory pressure has made cyber resilience an operational necessity. Becky Pinkard, managing director, global cyber operations at Barclays, discusses how social engineering, containment strategies, leadership practices and automation shape stronger defenses.
Apate.ai CEO Dali Kaafar on Turning the Tables on Fraudsters With AI-Powered BotsMajor banks in Australia are now using bots to foil scammers. The bots are designed to pose as potential victims, extract real-time intelligence and waste scammers' resources. The data is then pushed directly into fraud detection systems used by banks, telecom providers and government agencies.
From MechaHitler to Islamic Chatbots, AI Engines Are Writing the Script for RealityAI sovereignty is the new data sovereignty, except now we’re arguing not just about who owns your data, but who gets to define reality. From MechaHitler to Islamic chatbots, AI is less about objective truth and more about who gets to write the script.
Why CISOs Must Rethink Access, Behavioral Analytics and AI Governance at ScaleZero trust is evolving beyond static controls and network segmentation. CISOs must prepare for dynamic, behavior-driven security models that incorporate real-time intelligence, enforce identity and data safeguards, and manage AI as both a threat vector and a security tool.
Why do AI agents require new identity governance approaches and the current controls not enough?
Also: AI Pilot Project Purgatory, Agentic AI Commerce Fraud ConcernsIn this week's update, four ISMG editors discussed cybersecurity risks for small and medium-sized businesses, why so many enterprise artificial intelligence projects stall in pilot mode and concerns over fraud with the rise of agentic commerce in payments.
Apate.ai CEO Dali Kaafar on Turning the Tables on Fraudsters With AI-Powered BotsMajor banks in Australia are now using bots to foil scammers. The bots are designed to pose as potential victims, extract real-time intelligence and waste scammers' resources. The data is then pushed directly into fraud detection systems used by banks, telecom providers and government agencies.
Also: AI Pilot Project Purgatory, Agentic AI Commerce Fraud ConcernsIn this week's update, four ISMG editors discussed cybersecurity risks for small and medium-sized businesses, why so many enterprise artificial intelligence projects stall in pilot mode and concerns over fraud with the rise of agentic commerce in payments.
A security weakness has been disclosed in the artificial intelligence (AI)-powered code editor Cursor that could trigger code execution when a maliciously crafted repository is opened using the program
Calypso’s Red-Teaming and Agentic Threat Tools Boost F5’s Application Security EdgeF5’s latest acquisition brings Dublin, Ireland-based CalypsoAI’s unique AI security stack into its platform to secure application traffic against LLM misuse, data leakage and shadow AI, enhancing protection for hybrid and multi-cloud environments and helping secure apps and APIs.
The data leak underscores the larger issue of proprietary or sensitive data being shared with GenAI by users who should know better.
Persistent Security's Marcus Vervier on Microsoft Flaws, Pitfalls of AI CodingA newly discovered vulnerability present in Microsoft's Copilot and Visual Studio has brought a fresh batch of concerns around the security of artificial intelligence-powered coding tools to the forefront. It has the potential to turn AI models into a new attack vector.
F5 plans to use CalypsoAI's platform to provide real-time threat defense against attacks and help enterprises safeguard themselves as they adopt the latest AI technologies.
With legit sounding names, EvilAI's "productivity" apps are reviving classic threats like Trojans while adding new evasion capabilities against modern antivirus defenses.
Shady, China-based company, all the apps needed for a fully automated attack - sounds totally legit Villager, a new penetration-testing tool linked to a suspicious China-based company and described by researchers as "Cobalt Strike's AI successor," has been downloaded about 10,000 times since its release in July.…
GitLab's Joern Schneeweisz on Prompt Injections and Old AppSec IssuesLarge language models pose systemic risks, and the rush to release AI products revives old security flaws. Prompt injections and familiar application vulnerabilities expose gaps created when speed outweighs safety, said Joern Schneeweisz, principal security engineer at GitLab.
Google on Tuesday announced that its new Google Pixel 10 phones support the Coalition for Content Provenance and Authenticity (C2PA) standard out of the box to verify the origin and history of digital content
Researchers discovered that measures designed to make AI more transparent to users and regulators can also make it easier for bad actors to abuse.
Combining AI-generated code and social engineering, EvilAI operators are executing a rapidly expanding campaign, disguising their malware as legitimate applications to bypass security, steal credentials, and persistently compromise organizations worldwide.
Company Targets Non-Binary Software Blind Spots Left by Endpoint Security ToolsWith $48 million in funding, Koi is scaling up efforts to help enterprises secure browser extensions, AI models and package code often missed by legacy tools. CEO Amit Assaraf says Koi is the only firm offering centralized governance for this fast-growing risk category.