Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Hacking LLMs using LinkedIn #aisecurity #ai #llm

Mend.io, formerly known as Whitesource, has over a decade of experience helping global organizations build world-class AppSec programs that reduce risk and accelerate development -– using tools built into the technologies that software and security teams already love. Our automated technology protects organizations from supply chain and malicious package attacks, vulnerabilities in open source and custom code, and open-source license risks.

How Fidelis Deception Helps Defend Against AI-Accelerated Intrusions

AI-powered attackers are faster and more systematic than ever. But they still trust what they see. Deception technology controls what they see. 87% of security leaders say AI-related vulnerabilities grew faster than any other risk in 2025 44% year-over-year rise in exploitation of public-facing applications in 2025 300K+ AI platform credentials exposed via infostealer malware on dark web in 2025.

Skygen AI for Agencies: How It Handles the Work That's Quietly Killing Your Margins

Agency margins are a math problem nobody wants to talk about openly. You win a client. You scope the work. You staff it. Then somewhere between the kickoff call and the first deliverable, hours start disappearing into tasks that weren't in the scope - or were, but not at the volume they actually take. Brief prep. Report assembly. Keyword research before the SEO strategy can begin. Social drafts that follow a template so consistent a junior could do it, except the junior is already maxed out.

Smart Facility Safety Trends at Work

Modern facility safety is moving beyond static checklists. Workplaces now use connected systems, real-time monitoring, predictive maintenance, and environmental sensors to reduce risk before incidents happen. This shift matters because workplace hazards remain common. The U.S. Bureau of Labor Statistics reported that private industry employers recorded 2.6 million nonfatal workplace injuries and illnesses in 2023. Of those, 946,500 involved days away from work.

Why You Shouldn't Use LLMs to Generate SQL (Security Risks)

“Just let the LLM write the SQL.” It sounds powerful. A user types a question in plain English, the model generates a query, the system runs it against the database, and the answer comes back. No SQL knowledge required. No BI tools. No waiting for the data team. It works beautifully in demos. And it is a serious engineering mistake in production. Direct SQL generation from LLMs combines two things that should never be combined: untrusted code generation and privileged execution.

GPT-5.5-Cyber is here. What it means for defenders operating at the frontier.

GPT-5.5-Cyber is here. What it means for defenders operating at the frontier. OpenAI’s May 7 release of GPT-5.5 and the limited preview of GPT-5.5-Cyber put frontier AI in verified defenders’ hands. As a member of the Trusted Access for Cyber program, Sophos is using these models to sharpen what we already operate: an agentic SOC that resolves more than half of cases without a human, and an endpoint architecture purpose-built to stop AI-generated zero-days.

Ransomware: AI changes the writer. It doesn't change the math.

Ransomware: AI changes the writer. It doesn't change the math. Why most endpoint protection still treats ransomware as just another piece of malware, and what changes when you watch the data instead of the attacker. In 2013, CryptoLocker introduced the modern ransomware playbook. It also introduced something most of the industry has still not come to terms with: remote encryption.