Bedrijven moeten vanaf 2 augustus laten weten dat AI-systemen AI zijn
Bedrijven die van chatbots of andere AI-systemen gebruikmaken moeten vanaf 2 augustus duidelijk laten weten dat het om AI gaat. ...
Kaynakta oku
Siber Güvenlik Haberleri
Güvenilir yayınlardan canlı haberler, DayBreach CVE verileriyle eşleştirilmiş olarak.
Tüm kaynaklarArs Technica · 62BleepingComputer · 144CERT Polska · 76Cisco Talos · 46CrowdStrike · 32Dark Reading · 56DataBreaches.net · 22Krebs on Security · 12Microsoft Security Blog · 36Proofpoint · 35Rapid7 · 62SANS Internet Storm Center · 51Security.NL · 278SecurityWeek · 48SentinelOne · 30The Cyber Express · 65TheCyberThrone · 48The Hacker News · 268The Record · 29Unit 42 · 44
Onderzoekers waarschuwen voor vooraf besmette Android tv-sticks
Onderzoekers waarschuwen voor Android tv-sticks die ook in Nederland worden verkocht en vooraf met malware zijn geïnfecteerd. ...
Kaynakta oku
The Cyber Express Weekly Roundup: AI Fraud, Data Leaks, Malware Campaigns, and Critical Infrastructure Threats
This weekly roundup highlights the growing complexity of digital threats affecting governments, businesses, developers, and consumers. From artificial intelligence being misused for financial fraud to large-scale customer data exposures, malicious software targeting developer ecosystems, and cyberattacks against critical infrastructure, recent incidents demonstrate how attackers are exploiting both emerging technologies and existing security weaknesses. The latest developments show that cyber risks are expanding beyond traditional network attacks. Threat actors are targeting identities, truste
Kaynakta oku
Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw
An academic study has disclosed a "widespread class" of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service (DoS) attacks and even session hijacking, allowing an attacker to seize control of a user's network session. The findings have been released by a group of researchers from Singapore's Nanyang Technological University
Kaynakta oku
.png){kind=logo}
Rapid7 at Black Hat USA 2026: See preemptive security in action
Black Hat USA returns to Mandalay Bay in Las Vegas this August, bringing together security practitioners, researchers, and leaders from around the world. Rapid7 will be there in the Business Hall, with new capabilities, live demonstrations, expert-led sessions, and two days of activities at the Border Grill.This year, our focus is preemptive security: helping security teams anticipate credible risk, respond at machine speed, and maintain an accurate view of their security and compliance posture as their environment changes.Visit the Rapid7 booth at Black Hat USAYou can find Rapid7 at booth #24
Kaynakta oku
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
Device code phishing - the abuse of the OAuth 2.0 device authorization grant to steal access tokens - has evolved from a niche red-team technique to an industrial-scale threat in under six months. Designed for input-constrained devices like smart TVs, printers, and so on, the device authorization login flow has been adopted by a wide range of apps and use-cases that it wasn't originally
Kaynakta oku
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further operator input in the session. The operator, tracked through the aliases knaithe and KnYuan,
Kaynakta oku
Anthropic Discloses Claude AI Internet Access During Security Evaluation
Anthropic has disclosed the findings of an Anthropic cybersecurity evaluation that uncovered three incidents in which Claude AI models unintentionally accessed the public internet during controlled cybersecurity testing. The company said the events stemmed from misconfigured third-party evaluation environments rather than deliberate attempts by the models to escape their testing boundaries. The review began after OpenAI announced on July 21 that several of its AI models had escaped an isolated testing environment by exploiting an unknown vulnerability and reached Hugging Face’s production infr
Kaynakta oku
Bits of Freedom 'superteleurgesteld' in Autoriteit Persoonsgegevens
Digitale burgerrechtenbeweging Bits of Freedom is 'superteleurgesteld' in de Autoriteit Persoonsgegevens (AP) en vindt dat de ...
Kaynakta oku
The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version
Analysis of XCSSET v40 reveals a macOS malware targeting developers via Xcode. Unit 42 used advanced pattern matching and AI to decode its logic. The post The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version appeared first on Unit 42.
Kaynakta oku
1141-1150 / 1370 haber gösteriliyor