Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

April 2024

synopsys

Accelerate application code fixes with AI-powered Polaris Assist

Apr 30, 2024 By Corey Hamilton In Synopsys
We're excited to announce the availability of Polaris Assist, our AI-powered application security assistant that combines decades of real-world insights with a powerful large language model (LLM). Polaris Assist gives security and development teams easy-to-understand summaries of detected vulnerabilities and code fix recommendations to help them build secure software faster.
Read Post
Corelight

Fuel for Security AI

Apr 30, 2024 By Brian Dye In Corelight
The big idea behind Corelight has always been simple: ground truth is priceless. What really happened, both now and looking back in time. Whether it is used to detect attacks, investigate routine alerts, respond to new vulnerabilities or a full scale incident response, the constant is that ground truth makes everything in security better. We have no claim of authorship here. By contrast, we learn from the world’s most accomplished defenders through their use of Zeek® and Suricata®.
Read Post
sysdig

Accelerating AI Adoption: AI Workload Security for CNAPP

Apr 30, 2024 By Matt Kim In Sysdig
When it comes to securing applications in the cloud, adaptation is not just a strategy but a necessity. We’re currently experiencing a monumental shift driven by the mass adoption of AI, fundamentally changing the way companies operate. From optimizing efficiency through automation to transforming the customer experience with speed and personalization, AI has empowered developers with exciting new capabilities.
Read Post
trustcloud

TrustCloud Product Updates: April 2024

Apr 30, 2024 By Tejas Ranade In TrustCloud
You know us: Every month we’re cooking up something new! Here are the updates that hit TrustCloud this month. TrustShare GraphAI will answer questionnaires for you with accurate, high-quality responses. TrustShare is getting a huge AI glow up. GraphAI’s generative AI capabilities will now fill in answers that are more context aware, more natural, and more accurate than ever before.
Read Post
bluevoyant

Enhancing Cybersecurity with BlueVoyant's AI Technology for Emerging Vulnerabilities

Apr 29, 2024 By George Aquila In BlueVoyant
After a new zero-day vulnerability is announced, the National Vulnerability Database (NVD) publishes a measure of its severity under the Common Vulnerability Scoring System (CVSS). CVSS scores are a crucial tool for organizations as they give an approximation of the severity of disclosed vulnerabilities.
Read Post
elastic

Elastic Security evolves into the first and only AI-driven security analytics solution

Apr 26, 2024 By Mike Nichols In Elastic
In our previous installation, we discussed the history of security information and event management (SIEM) solutions — from collection to organizational detections and finally to response and orchestration. Now, we are firmly in the SIEM 3.0 revolution and focused on applying generative AI to every applicable process in the security operations center with tremendous success.
Read Post
netwrix

Navigating Security Concerns: Microsoft Copilot's Integration with Microsoft 365

Apr 26, 2024 By Farrah Gamboa In Netwrix
There are so many exciting things happening in the AI space currently. One of them is the integration of Microsoft Copilot, a generative AI, with Microsoft 365 applications. This fusion brings Copilot’s capabilities into the suite’s comprehensive office productivity tools to transform daily workloads and enhance productivity efficiency through the automation of mundane tasks, alongside offering insights and analyzing data. Key features include.
Read Post
knowbe4

AI-Assisted Phishing Attacks Are on the Rise

Apr 25, 2024 By Stu Sjouwerman In KnowBe4
Threat actors are increasingly using generative AI tools to improve their phishing campaigns, according to a new report from Zscaler. “AI represents a paradigm shift in the realm of cybercrime, particularly for phishing scams,” the researchers write. “With the aid of generative AI, cybercriminals can rapidly construct highly convincing phishing campaigns that surpass previous benchmarks of complexity and effectiveness.
Read Post
netacea

AI-driven cyber attacks to be the norm within a year, say security leaders

Apr 24, 2024 By Netacea In Netacea
New research from Netacea reveals 93% of security leaders expect to face daily AI-driven attacks by the end of this year. Ransomware and phishing attacks are expected to be enhanced by offensive AI, but bots remain an underestimated threat. All respondents are benefiting from AI in their security stack, but adoption of bot management is lagging behind.
Read Post

AI Revolution in Access Control: Transforming Security with Brivo

Apr 24, 2024 By Brivo In Brivo
Dive into the future of security with Brivo as we explore the transformative power of Artificial Intelligence in access control systems. 🔒💡 In this video, Steve Van Till, a pioneer in smart spaces technology, unveils how AI equips us with advanced toolsets, enabling more efficient and effective security solutions. Discover how Brivo is leading the charge in integrating AI into commercial real estate, multifamily residential, and large enterprises, ensuring unparalleled security automation. 🤖🔑
View Video
protecto

Safeguarding Your LLM-Powered Applications: A Comprehensive Approach

Apr 24, 2024 By Rahul Sharma In Protecto
The rapid advancements in large language models (LLMs) have revolutionized the manner in which we interact with technology. These powerful AI systems have found their way into a wide range of applications, from conversational assistants and content generation tools to more complex decision-making systems. As the adoption of LLM-powered applications continues to grow, it has become increasingly crucial to prioritize the security and safety of these technologies.
Read Post
Snyk

Snyk Code's autofixing feature, DeepCode AI Fix, just got better

Apr 23, 2024 By Liqian Lim () In Snyk
DeepCode AI Fix is an AI-powered feature that provides one-click, security-checked fixes within Snyk Code, a developer-focused, real-time SAST tool. Amongst the first semi-automated, in-IDE security fix features on the market, DeepCode AI Fix’s public beta was announced as part of Snyk Launch in April 2023. It delivered fixes to security issues detected by Snyk Code in real-time, in-line, and within the IDE.
Read Post
veracode

Enhancing Developer Efficiency With AI-Powered Remediation

Apr 23, 2024 By Natalie Tischler In Veracode
Traditional methods of flaw remediation are not equipped with the technology to keep pace with the rapid evolution of code generation practices, leaving developers incapable of managing burdensome and overwhelming security debt. Code security is still a critical concern in software development. For instance, when GitHub Copilot generated 435 code snippets, almost 36% of them had security weaknesses, regardless of the programming language.
Read Post

Unlocking the Future: Brivo's AI-Driven Security Solutions

Apr 23, 2024 By Brivo In Brivo
Dive into the world of advanced security with Brivo! In this video, we explore how Brivo, the pioneer in cloud-based access control and smart spaces technology, is revolutionizing security solutions. With over two decades of innovation, Brivo's open platform allows businesses to seamlessly integrate AI features for unparalleled access control and more. 🏠🔑
View Video
protecto

What is the Use of LLMs in Generative AI?

Apr 22, 2024 By Rahul Sharma In Protecto
Generative AI is a rapidly maturing field that has captured the imagination of researchers, developers, and industries alike. Generative AI refers to artificial intelligence systems adept at concocting new and original content, such as text, images, audio, or code, based on the patterns and relationships learned from training data. This revolutionary technology can transform various sectors, from creative industries to scientific research and product development.
Read Post

Revolutionizing Daily Tech: AI's Role in Our Everyday Lives

Apr 22, 2024 By Brivo In Brivo
Dive into the fascinating world of how artificial intelligence is seamlessly woven into the fabric of our daily technology, transforming the mundane into the extraordinary. At Brivo, we've been at the forefront of integrating generative AI into cloud-based solutions, redefining what's possible in commercial real estate, multifamily residential, and large distributed enterprises. Join us as we explore the endless possibilities that AI brings to everyday technology, making our lives more secure, efficient, and connected.
View Video
bluevoyant

Microsoft Copilot for Security - Use Cases for Data Governance Teams Working with Auditors and Consultants

Apr 22, 2024 By Micah Heaton In BlueVoyant
This is the final installment of our Microsoft Copilot for Security blog series. Over the past eight weeks, our weekly blog helped various cyber security groups see possible use cases for Microsoft Copilot for Security. This final blog explores how AI and Microsoft Copilot for Security can assist external auditors and consultants in interacting with Microsoft Purview. Azure Policy and Microsoft Purview work together to ensure the proper governance and compliance of data assets.
Read Post
obrela

Generative AI and Cyber Security

Apr 19, 2024 By Michael Shaw In Obrela
There has been a lot of talk about Artificial Intelligence (AI) in recent years. It is certainly a polarizing subject. While it raises hopes about the future of technology and what humanity is capable of, it also raises questions around human control and technological determination. There are those who worry that Artificial Intelligence is going to ‘take people’s jobs’, or even take over the world, and that the world will end up like a dystopian ‘Terminator’ style film.
Read Post

Empowering Customers & Partners: Unveiling the Transformative Impact of Brivo AI

Apr 18, 2024 By Brivo In Brivo
Explore the future of security and smart technology with Brivo. Our content delves into innovative solutions that empower businesses and individuals to create safer, more connected environments. Don't forget to like, share, and subscribe to stay updated on the latest trends in access control and smart space management. Connect with us for a smarter, more secure tomorrow.
View Video
knowbe4

AI Voice Cloning and Bank Voice Authentication: A Recipe for Disaster?

Apr 18, 2024 By Stu Sjouwerman In KnowBe4
New advancements in generative AI voice cloning come at a time when banks are looking for additional ways to authenticate their customers – and they’re choosing your voice. Banks adopted the principles of multi-factor authentication years ago. But continued cyber attacks aimed at providing SIM swapping services have increased the risk of assuming the credential owner actually possesses the mobile device. So, where do they go next to prove you’re you? Voiceprint.
Read Post
tripwire

Navigating AI and Cybersecurity: Insights from the World Economic Forum (WEF)

Apr 17, 2024 By Josh Breaker-Rolfe In Tripwire
Cybersecurity has always been a complex field. Its adversarial nature means the margins between failure and success are much finer than in other sectors. As technology evolves, those margins get even finer, with attackers and defenders scrambling to exploit them and gain a competitive edge. This is especially true for AI.
Read Post
cyberark

EP 50 - Adversarial AI's Advance

Apr 17, 2024 By CyberArk In CyberArk
In the 50th episode of the Trust Issues podcast, host David Puner interviews Justin Hutchens, an innovation principal at Trace3 and co-host of the Cyber Cognition podcast (along with CyberArk’s resident Technical Evangelist, White Hat Hacker and Transhuman Len Noe). They discuss the emergence and potential misuse of generative AI, especially natural language processing, for social engineering and adversarial hacking.
Read Post
veracode

Speed vs Security: Striking the Right Balance in Software Development with AI

Apr 17, 2024 By Brian Roche In Veracode
Software development teams face a constant dilemma: striking the right balance between speed and security. How is artificial intelligence (AI) impacting this dilemma? With the increasing use of AI in the development process, it's essential to understand the risks involved and how we can maintain a secure environment without compromising on speed. Let’s dive in.
Read Post
protecto

Protecto - AI Regulations and Governance Monthly Update - March 2024

Apr 17, 2024 By Rahul Sharma In Protecto
In a landmark development, the U.S. Department of Homeland Security (DHS) has unveiled its pioneering Artificial Intelligence Roadmap, marking a significant stride towards incorporating generative AI models into federal agencies' operations. Under the leadership of Secretary Alejandro N. Mayorkas and Chief Information Officer Eric Hysen, DHS aims to harness AI technologies to bolster national security while safeguarding individual privacy and civil liberties.
Read Post

Understanding AI Package Hallucination: The latest dependency security threat

Apr 16, 2024 By GitGuardian In GitGuardian
In this video, we explore AI package Hallucination. This threat is a result of AI generation tools hallucinating open-source packages or libraries that don't exist. In this video, we explore why this happens and show a demo of ChatGPT creating multiple packages that don't exist. We also explain why this is a prominent threat and how malicious hackers could harness this new vulnerability for evil. It is the next evolution of Typo Squatting.
View Video
Snyk

An investigation into code injection vulnerabilities caused by generative AI

Apr 16, 2024 By Jack Hair In Snyk
Generative AI is an exciting technology that is now easily available through cloud APIs provided by companies such as Google and OpenAI. While it’s a powerful tool, the use of generative AI within code opens up additional security considerations that developers must take into account to ensure that their applications remain secure. In this article, we look at the potential security implications of large language models (LLMs), a text-producing form of generative AI.
Read Post
tripwire

Casting a Cybersecurity Net to Secure Generative AI in Manufacturing

Apr 16, 2024 By Emily Newton In Tripwire
Generative AI has exploded in popularity across many industries. While this technology has many benefits, it also raises some unique cybersecurity concerns. Securing AI must be a top priority for organizations as they rush to implement these tools. The use of generative AI in manufacturing poses particular challenges. Over one-third of manufacturers plan to invest in this technology, making it the industry's fourth most common strategic business change.
Read Post
sumologic

How AI will impact cybersecurity: the beginning of fifth-gen SIEM

Apr 16, 2024 By Christopher Beier In Sumo Logic
The power of artificial intelligence (AI) and machine learning (ML) is a double-edged sword — empowering cybercriminals and cybersecurity professionals alike. AI, particularly generative AI’s ability to automate tasks, extract information from vast amounts of data, and generate communications and media indistinguishable from the real thing, can all be used to enhance cyberattacks and campaigns.
Read Post
upguard

The NIST AI Risk Management Framework: Building Trust in AI

Apr 15, 2024 By Kyle Chin In UpGuard
The NIST Artificial Intelligence Risk Management Framework (AI RMF) is a recent framework developed by The National Institute of Standards and Technology (NIST) to guide organizations across all sectors in the use of artificial intelligence (AI) and its systems. As AI continues to become implemented in nearly every sector — from healthcare to finance to national defense — it also brings new risks and concerns with it.
Read Post

Nightfall AI: The First AI-Native Enterprise DLP Platform

Apr 15, 2024 By Nightfall In Nightfall
Legacy DLP solutions never worked. They're point solutions that generate an overwhelming number of false positive alerts, and block the business in the process. But no longer. Enter: Nightfall AI, the first AI-native enterprise DLP platform that protects sensitive data across SaaS, generative AI (GenAI), email, and endpoints, all from the convenience of a unified console.
View Video
protecto

Best LLM Security Tools of 2024: Safeguarding Your Large Language Models

Apr 12, 2024 By Rahul Sharma In Protecto
As large language models (LLMs) continue to push the boundaries of natural language processing, their widespread adoption across various industries has highlighted the critical need for robust security measures. These powerful AI systems, while immensely beneficial, are not immune to potential risks and vulnerabilities. In 2024, the landscape of LLM security tools has evolved to address the unique challenges posed by these advanced models, ensuring their safe and responsible deployment.
Read Post

Elastic Security | AI Assistant Demo

Apr 11, 2024 By Elastic In Elastic
Elastic AI Assistant can provide real-time, personalized alert insights — empowering security teams to stay one step ahead in the ever-evolving threat landscape. With the power of large language models (LLMs), the AI Assistant can process multiple alerts simultaneously, offering an unprecedented level of insight and customization. You can interact with your data by asking complex questions and receiving context-aware responses tailored to your needs. Watch this demo from James Spiteri, Director of Product Management at Elastic to see what's new in the Elastic AI Assistant in Elastic Security 8.12.
View Video
mend

OWASP Top 10 for LLM Applications: A Quick Guide

Apr 10, 2024 By AJ Starita In Mend
Published in 2023, the OWASP Top 10 for LLM Applications is a monumental effort made possible by a large number of experts in the fields of AI, cybersecurity, cloud technology, and beyond. OWASP contributors came up with over 40 distinct threats and then voted and refined their list down to the ten most important vulnerabilities.
Read Post
alienvault

The Security Risks of Microsoft Bing AI Chat at this Time

Apr 10, 2024 By Shigraf Aijaz In AT&T Cybersecurity
AI has long since been an intriguing topic for every tech-savvy person, and the concept of AI chatbots is not entirely new. In 2023, AI chatbots will be all the world can talk about, especially after the release of ChatGPT by OpenAI. Still, there was a past when AI chatbots, specifically Bing’s AI chatbot, Sydney, managed to wreak havoc over the internet and had to be forcefully shut down.
Read Post

Unlocking Insights with AI: Introducing Data Explorer by Brivo

Apr 10, 2024 By Brivo In Brivo
Welcome to the future of data analysis! 🌟 In this video, we're diving deep into Brivo's latest innovation - the Data Explorer, an AI-powered tool designed to revolutionize the way we approach data analysis. With the power of artificial intelligence, Data Explorer simplifies complex data sets, allowing you to uncover insights with minimal effort. 🧠💡
View Video
elastic

Tracing history: The generative AI revolution in SIEM

Apr 9, 2024 By Mike Nichols, In Elastic
The cybersecurity domain mirrors the physical space, with the security operations center (SOC) acting as your digital police department. Cybersecurity analysts are like the police, working to deter cybercriminals from attempting attacks on their organization or stopping them in their tracks if they try it. When an attack occurs, incident responders, akin to digital detectives, piece together clues from many different sources to determine the order and details of events before building a remediation plan.
Read Post
securitysenses

AI in Web Development: The Capability and Effectiveness of ChatGPT

Apr 8, 2024 By SecuritySenses In SecuritySenses
The area of web development may be exhilarating and fascinating. Web developers build robust apps that support numerous users and fulfill a variety of functions by utilizing a variety of databases, frameworks, and programming languages. Even while it might be thrilling, developing a completely working website takes time and technical know-how.
Read Post
CrowdStrike

CrowdStrike, Intel and Dell: Clustering and Similarity Assessment for AI-driven Endpoint Security with Intel NPU Acceleration

Apr 8, 2024 By Greg Dalcher In CrowdStrike
CrowdStrike’s mission is to stop breaches. We continuously research and develop technologies to outpace new and sophisticated threats and stop adversaries from pursuing attacks. We also recognize that security is best when it’s a team sport. In today’s threat landscape, technology collaboration is essential to deploy novel methods of analysis and defense.
Read Post
protecto

LangFriend, SceneScript, and More - Monthly AI News

Apr 8, 2024 By Rahul Sharma In Protecto
Memory integration into Large Language Model (LLM) systems has emerged as a pivotal frontier in AI development, offering the potential to enhance user experiences through personalized interactions. Enter LangFriend, a groundbreaking journaling app that leverages long-term memory to craft tailored responses and elevate user engagement. Let's explore the innovative features of LangFriend, which is inspired by academic research and cutting-edge industry practices.
Read Post
knowbe4

IT Leaders Can't Stop AI and Deepfake Scams as They Top the List of Most Frequent Attacks

Apr 4, 2024 By Stu Sjouwerman In KnowBe4
New data shows that the attacks IT feels most inadequate to stop are the ones they’re experiencing the most. According to Keeper Security’s latest report, The Future of Defense: IT Leaders Brace for Unprecedented Cyber Threats, the most serious emerging types of technologies being used in modern cyber attacks lead with AI-powered attacks and deepfake technology. By itself, this information wouldn’t be that damning.
Read Post
salt security

Introducing Salt Security's New AI-Powered Knowledge Base Assistant: Pepper!

Apr 3, 2024 By Eric Schwake In Salt Security
Going to a vendor's Knowledge Base (KB) is often the first place practitioners go to get the product deployed or troubleshoot issues. Even with advanced search tools, historically, KBs have been challenging to find relevant content quickly, and navigating a KB can be frustrating. At Salt Security, not only do we want to make your job of securing APIs easier, but we also want to make getting the guidance you need easier, friendlier and more efficient.
Read Post
nightfall

Securing AI with Least Privilege

Apr 3, 2024 By Isaac Madan In Nightfall
In the rapidly evolving AI landscape, the principle of least privilege is a crucial security and compliance consideration. Least privilege dictates that any entity—user or system—should have only the minimum level of access permissions necessary to perform its intended functions. This principle is especially vital when it comes to AI models, as it applies to both the training and inference phases.
Read Post
cato networks

How Cato Uses Large Language Models to Improve Data Loss Prevention

Apr 2, 2024 By Asaf Fried In Cato Networks
Cato Networks has recently released a new data loss prevention (DLP) capability, enabling customers to detect and block documents being transferred over the network, based on sensitive categories, such as tax forms, financial transactions, patent filings, medical records, job applications, and more. Many modern DLP solutions rely heavily on pattern-based matching to detect sensitive information. However, they don’t enable full control over sensitive data loss.
Read Post
alienvault

AI - The Good, Bad, and Scary

Apr 1, 2024 By Matt Mui In AT&T Cybersecurity
AI and machine learning (ML) optimizes processes by making recommendations for optimizing productivity, reducing cycles, and maximizing efficiency. AI also optimizes human capital by performing mundane & repetitive tasks 24x7 without the need for rest and minimizing human errors. There are numerous benefits as to how AI can benefit society. As much as AI can propel human progress forward, it can be consequential to our own detriment without proper guidance.
Read Post
nightfall

Firewalls for AI: The Essential Guide

Apr 1, 2024 By Isaac Madan In Nightfall
As the adoption of AI models, particularly large language models (LLMs), continues to accelerate, enterprises are growing increasingly concerned about implementing proper security measures to protect these systems. Integrating LLMs into internet-connected applications exposes new attack surfaces that malicious actors could potentially exploit.
Read Post
Trustwave

Trustwave Embarks on an Extended Partnership with Microsoft Copilot for Security

Apr 1, 2024 By Trustwave In Trustwave
Trustwave today announced it will offer clients expert guidance on implementing and fully leveraging the just-released Microsoft Copilot for Security, a generative AI-powered security solution that helps increase the efficiency and capabilities of defenders to improve security outcomes.
Read Post

Copyright © 2024 OpsMatters™. All rights reserved.