CVE-2024-2912: Critical ‘BentoML’ Flaw Opens AI Systems to Remote Takeover
Penetration Testing
APRIL 30, 2024
A significant security flaw has been unveiled in BentoML, a popular Python-based framework used for building and deploying AI applications.
security-testing ai-penetration-testing 
GUEST ESSAY: Everything you should know about the cybersecurity vulnerabilities of AI chatbots
The Last Watchdog
FEBRUARY 20, 2024
AI chatbots are computer programs that talk like humans, gaining popularity for quick responses. Related: The security case for AR, VR AI chatbots use natural language processing, which enables them to understand and respond to human language and machine learning algorithms. These tools saved 2.5 per interaction.
Cybersecurity 
274
274 Join 29,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
CVE-2024-0087: NVIDIA Releases Security Patch for Critical Flaw in Triton Inference Server
Penetration Testing
MAY 3, 2024
Nvidia has released a security advisory addressing critical vulnerabilities in its Triton Inference Server, a widely-used platform that streamlines AI inferencing across various environments, including cloud, data centers, and edge devices.
V’ger: AI/ML Security in Your Arsenal
Penetration Testing
MAY 4, 2024
V’ger V’ger is an interactive command-line application for post-exploitation of authenticated Jupyter instances with a focus on AI/ML security operations.
GUEST ESSAY: Leveraging DevSecOps to quell cyber risks in a teeming threat landscape
The Last Watchdog
JANUARY 2, 2024
Related: How AI is transforming DevOps The constant evolution of technology, increased connectivity, and sophisticated cyber threats pose significant challenges to organizations of all sizes and industries. Often, employees within organizations lack sufficient security awareness and education. Inadequate security testing.
Cyber Risk 203
203 
CVE-2023-51409: The Severe Vulnerability Threatening 50,000 WordPress Sites
Penetration Testing
JANUARY 9, 2024
The AI Engine plugin, a popular AI-related WordPress plugin with over 50,000 active installations, recently experienced a significant security vulnerability.
Black Hat Fireside Chat: Taking the fight to the adversaries — with continuous, proactive ‘pen tests’
The Last Watchdog
AUGUST 29, 2022
Penetration testing – pen tests – traditionally have been something companies might do once or twice a year. Pen testing has limitations, of course. ai , a San Francisco-based startup, which launched in 2020. ai , a San Francisco-based startup, which launched in 2020. Bad news is always anticipated.
As an AI Language Model, Please Have Mercy on Me
Zigrin Security
SEPTEMBER 13, 2023
This article is not about “How to use the benefits of AI language models while conducting penetration test”. This article is about “How to conduct a penetration test towards AI language models”. Is hacking AI models legal? Why Should You Arrange a Penetration Test for Your AI Model as an Executive?
Black Hat Fireside Chat: Horizon3.ai makes a strong case for continuous, self-service pentesting
The Last Watchdog
AUGUST 7, 2023
LAS VEGAS — Penetration testing, traditionally, gave businesses a nice, pretty picture of their network security posture — at a given point in time. Related: Going on the security offensive Such snapshots proved useful for building audit trails, particularly for companies in heavily regulated industries.
AI Exploits: A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities
Penetration Testing
JANUARY 29, 2024
AI Exploits The AI world has a security problem and it’s not just in the inputs given to LLMs such as ChatGPT.
Ask These 5 AI Cybersecurity Questions for a More Secure Approach to Adversarial Machine Learning
NetSpi Executives
FEBRUARY 21, 2024
Artificial Intelligence (AI) and Machine Learning (ML) present limitless possibilities for enhancing business processes, but they also expand the potential for malicious actors to exploit security risks. Like many technologies that came before it, AI is advancing faster than security standards can keep up with.
Securing the Future of AI: Collaborative Guidelines for Safe Development
Penetration Testing
NOVEMBER 26, 2023
Cybersecurity and Infrastructure Security Agency (CISA) and the UK National Cyber Security Centre (NCSC) have joined forces to unveil the “Guidelines for Secure AI System Development.”
Darktrace launches new PREVENT AI security products to pre-empt cyberthreats
CSO Magazine
JULY 19, 2022
Darktrace has announced a new set of AI products designed to deliver proactive security to help organizations pre-empt cyberthreats. PREVENT products use AI to “think like an attacker”. To read this article in full, please click here
Striking a Balance: Senator Wyden's Act and AI in Healthcare
SecureWorld News
FEBRUARY 21, 2024
This includes artificial intelligence (AI) and machine learning (ML) systems that are increasingly used in healthcare. For example, AI can analyze medical images to detect cancer or other diseases. AI can free doctors to focus on patients rather than paperwork, lower costs, and even save lives by detecting diseases early.
Healthcare 77
77 GUEST ESSAY: How and why ‘pen testing’ will continue to play a key role in cybersecurity
The Last Watchdog
MARCH 15, 2021
Since we are quickly putting out large technologies, security risks always come with this. Related: Integrating ‘pen tests’ into firewalls. Microsoft has had several security vulnerabilities including Zero Logon. Penetration tests can be defined as the testing of a system to find security flaws in it.
Ignite Innovation with NetSPI’s New AI/ML Penetration Testing
NetSpi Executives
SEPTEMBER 5, 2023
AI/ML is being rapidly adopted into many aspects of businesses. As the adoption and use cases continue to grow, it is critical that organizations understand the unique threats that AI/ML brings along with it, along with identifying weak spots and building more resilient models.
How hackers might be exploiting ChatGPT
Security Affairs
JANUARY 5, 2023
The popular AI chatbot ChatGPT might be used by threat actors to hack easily hack into target networks. Cybernews research team discovered that the AI-based chatbot ChatGPT – a recently launched platform that caught the online community’s attention – could provide hackers with step-by-step instructions on how to hack websites.
Remote code execution exploit chain available for VMware vRealize Log Insight
CSO Magazine
FEBRUARY 2, 2023
This week, a proof-of-concept exploit chain has been released by security researchers, along with detailed explanations for each vulnerability, meaning in-the-wild attacks could soon follow. ai said in their analysis of the flaws.
Ask These 5 AI Cybersecurity Questions for a More Secure Approach to Adversarial Machine Learning
NetSpi Executives
FEBRUARY 21, 2024
Artificial Intelligence (AI) and Machine Learning (ML) present limitless possibilities for enhancing business processes, but they also expand the potential for malicious actors to exploit security risks. Like many technologies that came before it, AI is advancing faster than security standards can keep up with.
Crimeware and financial cyberthreats in 2024
SecureList
NOVEMBER 21, 2023
As part of our Kaspersky Security Bulletin, we try to predict how these cyberthreats will evolve in the coming year to help individuals and businesses to be prepared to face them. Increase in red team penetration testing frameworks: False. Ransomware payment methods: False.
Mainframe Mania: Highlights from SHARE Orlando 2024
NetSpi Executives
MARCH 26, 2024
I had the pleasure of attending this year’s SHARE Orlando 2024 where I learned about the state of mainframe security today and the in-demand skills needed to protect these critical systems. Mainframe Security Is Mission-Critical I have a soft spot for mission-critical operations, legacy systems, and critical infrastructure.
Mainframe Mania: Highlights from SHARE Orlando 2024
NetSpi Executives
MARCH 26, 2024
I had the pleasure of attending this year’s SHARE Orlando 2024 where I learned about the state of mainframe security today and the in-demand skills needed to protect these critical systems. Mainframe Security Is Mission-Critical I have a soft spot for mission-critical operations, legacy systems, and critical infrastructure.
Looking at a penetration test through the eyes of a target
CyberSecurity Insiders
MAY 3, 2023
Analyzing an organization’s security posture through the prism of a potential intruder’s tactics, techniques, and procedures (TTPs) provides actionable insights into the exploitable attack surface. Penetration testing (pentesting) is one of the fundamental mechanisms in this area.
The High-Stakes Game of Ensuring IoMT Device Security
SecureWorld News
FEBRUARY 17, 2024
New security solutions are now aiding healthcare organizations' IT teams in promptly resolving issues, even with devices from various manufacturers. Let's examine common security challenges in connected healthcare equipment and discuss some effective protection strategies and recommendations.
Healthcare 96
96 
Unravelling the Web: AI’s Tangled Web of Prompt Injection Woes
LRQA Nettitude Labs
DECEMBER 14, 2023
Ah, the marvels of technology – where Artificial Intelligence (AI) emerges as the golden child, promising solutions to problems we didn’t know we had. What is AI and what are its uses? What is AI and what are its uses? So, AI, or as I like to call it, spicy autocomplete, is about making machines act smart.
CIO in the Age of AI: A Title Under Threat?
SecureWorld News
NOVEMBER 30, 2023
With the advent of artificial intelligence (AI), machine learning (ML), and generative AI, questions have arisen regarding the continued relevance of the CIO title and whether it accurately reflects the evolving nature of the job. That is a huge conflict of interest. Is the CIO title obsolete?
CISO 97
97 
Shaping the Future of AI and Cybersecurity
NetSpi Executives
SEPTEMBER 28, 2023
2023 is sure to be remembered as the year of artificial intelligence (AI). With the rapid adoption of ChatGPT, the rise of new job titles like “Prompt Engineer,” and nearly every workforce researching how the technology could be applied to their industry — AI entered the scene as a force to be reckoned with. Read our show recap here.
A New Era of Proactive Security Begins: The Evolution of NetSPI
NetSpi Executives
MAY 1, 2024
Organizations require visibility into assets that need to be protected, prioritization of issues to remediate first, and easy-to-understand reporting on proactive security measures. NetSPI has been tackling these issues head on and is prepared to lead the path forward with proactive security.
SHARED INTEL Q&A: My thoughts and opinions about cyber threats — as discussed with OneRep
The Last Watchdog
OCTOBER 5, 2023
Acohido to share his ideas about the current cyber threat landscape, the biggest threats for businesses today, the role of AI and machine learning in cyberattacks and cyberdefence, and the most effective methods for companies to protect themselves. Byron is the founder and editor-in-chief of The Last Watchdog on Privacy & Security.
Cyber threats 204
204 
AI in Cybersecurity: How to Cut Through the Overhype and Maximize the Potential
CyberSecurity Insiders
DECEMBER 4, 2021
–( BUSINESS WIRE )–Artificial intelligence (AI), machine learning (ML), and deep learning (DL) are often applied in cybersecurity, but their applications may not always work as intended. AI Uses in Blue Team Security is available as a free download at www.isaca.org/ai-blue-team-security. About ISACA.
Analysis: Will ChatGPT’s Perfect English Change the Game For Phishing Attacks?
CyberSecurity Insiders
MARCH 24, 2023
Dunn Nobody predicted how rapidly AI chatbots would change perceptions of what is possible. This type of AI looks like a big opportunity for attackers. In theory, malevolence should be limited by security guardrails, which limit an AI’s responses when asked certain questions.
Phishing 105
105 
Malware Training Sets: FollowUP
Security Affairs
MAY 14, 2019
One of the first difficulties I met was on finding classified testing set in order to run new algorithms and to test specified features. you can convert your JSON object into ARFF which would be very useful to be imported into WEKA for testing your favorite algorithms. By using the second script named fromMongoToARFF.py
Malware 74
74 
Implementing and Managing Your SIEM Securely: A Checklist
eSecurity Planet
DECEMBER 17, 2021
Some companies use cloud-based security information and event management (SIEM) , and others use SIEM that has been installed in a local data center. Following the checklist will help focus your team on the ways in which the security of your company’s SIEM implementation could be undermined. Integrations. Data Sources. Configurations.
Software 132
132 
Common Techniques Hackers Use to Penetrate Systems and How to Protect Your Organization
ForAllSecure
APRIL 26, 2023
In this blog post, we'll explore common techniques used to penetrate systems and how organizations can defend against each type of attack. Common Types of Cyber Attacks Common techniques that criminal hackers use to penetrate systems include social engineering, password attacks, malware, and exploitation of software vulnerabilities.
Digital Resilience is the New Digital Transformation KPI
Security Boulevard
APRIL 14, 2021
Digital resilience is more than just security. Building in security through automated data privacy compliance and zero trust access . Building security into every application and process. Consolidate, rationalize, and migrate legacy applications to the cloud, while building in zero trust security, such as multi-factor login.
7 Best Penetration Testing Service Providers in 2023
eSecurity Planet
OCTOBER 13, 2023
Penetration testing is a critically important cybersecurity practice, but one that many organizations lack the on-staff skills to do themselves. Fortunately, there are many pentesting services out there that can do the job for them across a range of budgets and needs.
The Evolving Role of Cyber Insurance in Mitigating Ransomware Attacks
SecureWorld News
MARCH 20, 2024
As these incidents grow in sophistication, they exploit vulnerabilities in security systems, often outpacing the ability of organizations to respond effectively. You need to have a comprehensive, sober overview of your security standing here, otherwise, you're at a disadvantage.
"In our modern world, countless applications rely on radio frequency elements" - an Interview with Larbi Ouiyzme
Pen Test
OCTOBER 12, 2023
Detection and Prevention: Security professionals and organizations are developing technologies to detect and mitigate drone signal hijacking, including RF signal analysis and drone detection systems. It offers strong encryption and is considered secure for most applications.
Encryption 52
52 
The Case for Autonomous Security Testing
ForAllSecure
MAY 25, 2021
The AI Movies Were (Kind Of) Right. I hold on tightly to my hyperbolic belief that all hacker and AI movies are destined to be horrible (Sorry Chris Hemsworth!). In 2015, two renowned security researchers uncovered a critical vulnerability that allowed remote control of the then latest Jeep Chrysler. The culprit?
Software 52
52 
Probing restrictions may stilt Pentagon’s vulnerability disclosure program for contractors
SC Magazine
APRIL 5, 2021
The Department of Defense is putting the systems and networks of defense contractors to the test in a new pilot vulnerability disclosure program, the latest indicator of the government’s desire to expand upon its previous ventures crowdsourcing cybersecurity. Photo by Suhaimi Abdullah/Getty Images).
Government 60
60 
Email Security Recommendations You Should Consider from 2021
Cisco Security
AUGUST 17, 2021
With contributions from Jamal “Jay” Bethea, Cisco Secure Email Product Marketing Manager. Think email security is not complicated; think again. Now mix in architectural changes that support cloud productivity suites like Microsoft 365 and Google’s G-Suite to accelerate your business to cloud-based email security services.
Phishing 122
122 
Giving Smaller Businesses The Critical Power Of Large Community Threat Intelligence: A High-Level Look at CrowdSec
Joseph Steinberg
FEBRUARY 9, 2021
As I discussed last month, smaller businesses continue to suffer a disproportionate share of severe cyber-breaches , and a significant percentage of those organizations that are successfully penetrated go out-of-business within a year as a result. Others have offered poor reporting and integration with reporting tools.
Firewall 152
152 
The Case for Autonomous Security Testing
ForAllSecure
MAY 25, 2021
The AI Movies Were (Kind Of) Right. I hold on tightly to my hyperbolic belief that all hacker and AI movies are destined to be horrible (Sorry Chris Hemsworth!). In 2015, two renowned security researchers uncovered a critical vulnerability that allowed remote control of the then latest Jeep Chrysler. The culprit?
Software 52
52 
From a tech explosion to accidental cyberattacks, researchers offer a glimpse into 2030
SC Magazine
MAY 17, 2021
5G is among the technologies that researchers predict will have a big impact on the security landscape in the next decade. But what might they offer the front-facing information security officer – someone with a ten-year plan, wondering what to prepare for down the line? AI could impact more than just social engineering.
Let's personalize your content