Explore the intersection of AI and cybersecurity. Stay informed on AI-driven security trends, tools, and threats in the ever-evolving digital landscape.
Search across headline titles and summaries.
Background for this topic.
Artificial intelligence (AI) describes computer systems that perform tasks such as recognizing patterns, making predictions, understanding language, or generating content. In security reporting, the term commonly includes machine-learning models used for detection and analysis, as well as generative AI applications that produce text, code, images, or other outputs.
AI can help analyze security telemetry, prioritize vulnerabilities, and support investigations, but its outputs can be wrong or manipulated. Important attack surfaces include prompt injection that steers an application into unintended actions, sensitive data being exposed through prompts or model outputs, and excessive permissions granted to AI systems that use external tools. Models can also be degraded by poisoned training data or evaded with carefully crafted inputs. Practitioners should protect training and operational data, limit model access and tool permissions, test for adversarial behavior, and require appropriate human validation before high-impact decisions.
AI and Governance Expert Stresses Importance of Training for All EmployeesAccording to a recent pulse poll from ISACA on generative AI, only 6% of respondents' organizations are providing training to all staff on AI, and more than half - 54% - say that no AI training is provided at all, even to teams directly affected by AI.
Also: ChatGPT Turns 1 Year Old; Police Nab Ransomware Gang Chief in UkraineIn the latest weekly update, four editors at Information Security Media Group discuss Sam Altman and OpenAI's brief leadership nightmare, the state of generative AI one year after the general release of ChatGPT, and how police nabbed a suspected ransomware group ringleader in Ukraine.
Data Protection and Digital Information Bill Heads to the House of LordsBritish Conservative lawmakers are pushing ahead with legislation modifying the U.K. codification of European privacy law despite objections from privacy advocates and concerns about the legislation's impact on European trade. Government backers say the bill will bolster the domestic AI industry.
Microsoft has started rolling out its Copilot AI assistant to Windows 10 with the KB5032278 November 2023 non-security preview update for systems running Windows 10, version 22H2. [...]
Apparently all it takes to get a chatbot to start spilling its secrets is prompting it to repeat certain words like "poem" forever.
AI tools can deliver quick and easy results and offer huge business benefits — but they also bring hidden risks.
Welcome to a world where Generative AI revolutionizes the field of cybersecurity
New research has found that AI is significantly more accurate than traditional techniques at detecting malicious malware
Anyscale has dismissed the vulnerabilities as non-issues, according to researchers who reported the bugs to the company.
AI-powered tools are among the top fraud techniques used by threat actors in 2023, according to Sumsub’s third annual Identity Fraud Report
Varonis introduces Athena AI to transform data security and incident response Partner Content Athena AI, the new generative AI layer that spans across the entire Varonis Data Security Platform, redefines how security teams protect data - from visibility to action.…
An analysis of dark web forums revealed many threat actors are skeptical about using tools like ChatGPT to launch attacks
Zscaler Brings Generative AI to Data Protection Bundles, Debuts Standalone AI ToolsZscaler infused generative AI features into its data protection bundles and is introducing AI-powered products that quantify risk and predict breaches, said CEO Jay Chaudhry. The cloud security firm enhanced its data protection policies for AI/ML apps and tools to lower the likelihood of data loss.
Global Cybersecurity Agencies Say 'Secure by Design' Is Key to AI Threat MitigationNearly two dozen national cybersecurity organizations on Sunday urged AI developers to embrace "secure by design" and other preventive measures aimed at keeping hackers out from the mushrooming world of AI systems. The United Kingdom and United States spearheaded its development.
US and UK authorities issued new recommendations for companies that build and rely on AI, but they stop short of laying down the law.
US and UK authorities issued new recommendations for companies that build and rely on AI, but they stop short of laying down the law.
Weapons systems data, AI research, and other classified information may be up for sale, not to mention access to other government agencies.
Wipro Americas 2 CEO Suzanne Dann on How Generative AI Can Address Risk, ComplianceGenerative AI can improve operational efficiencies, enhance risk and compliance and elevate the client experience for financial services firms, said Wipro's Suzanne Dann. Wipro embraced generative AI to reduce fraud by spotting anomalous behavior and used synthetic data to test deep learning models.
President Joe Biden's recent executive order for artificial intelligence encourages investment in AI while setting a vision for a regulatory framework to address issues involving AI technology safety, bias and other concerns in healthcare, said attorney Wendell Bartnick of the law firm Reed Smith.
NCSC and CISA effort endorsed by 18 countries