%term

The Hidden Risk in Enterprise AI, and the Smarter Way to Safeguard Data

Sep 5, 2025 By Cyberhaven In Cyberhaven

AI exploded into the workplace overnight, reshaping how we work. Today, nearly every employee is experimenting with tools to move faster and think bigger. However, that acceleration comes with risk. According to Cyberhaven Labs’ latest research, nearly three-quarters of AI apps in use pose high or critical risks, and only 16% of enterprise data sent to AI ends up in enterprise-ready apps. The rest flows to personal or unvetted tools.

Read Post

Cyberhaven

Read more about The Hidden Risk in Enterprise AI, and the Smarter Way to Safeguard Data

The Double-Edged Sword: Benefits and Risks of AI Transformations

Sep 5, 2025 By Lookout In Lookout

Over the past few years, artificial intelligence (AI) has transformed millions of organizations worldwide. AI can automate rote tasks, facilitate natural-language interfaces, and pick up subtle patterns in huge data sets. It can also hallucinate wrong answers, reinforce societal biases, and even introduce cybersecurity risks. Before incorporating the technology into their workflows, responsible organizations must weigh the benefits and risks of AI.

Read Post

Lookout

Read more about The Double-Edged Sword: Benefits and Risks of AI Transformations

How Nightfall Brings AI-Native Context-Aware DLP to Microsoft 365

Sep 5, 2025 By Chris Martinez In Nightfall

It's 8:47 AM. Your phone buzzes with another "urgent" DLP alert. You've already ignored three this morning. This one screams "SENSITIVE DATA DETECTED" in all caps. But it’s just a lunch menu with a credit card number for catering. You silence the notification and grab your coffee. What you don't know? While you're dismissing false alarms, your VP of Finance just dropped next quarter's earnings in a public Teams channel. Your DLP system? Completely silent.

Read Post

Nightfall

Read more about How Nightfall Brings AI-Native Context-Aware DLP to Microsoft 365

What Happens When AI Gives Dangerous Medical Advice?

Sep 5, 2025 By Razorthorn Security In Razorthorn

AI chatbots are already answering medical queries. But what happens when the advice is wrong—and someone gets hurt? From liability to hallucinations, we’re on shaky ground.

View Video

Razorthorn

Read more about What Happens When AI Gives Dangerous Medical Advice?

The WinINet.dll Red Flag Moment #cybersecurity #ai

Sep 5, 2025 By LimaCharlie In LimaCharlie

Our recent webinar showed how our MCP server enables AI to apply the same technical analysis that expert threat hunters use by providing structured API access to security data and tools. In the demo, Claude identified WinINet.dll loaded in a suspicious process - a discovery that Eric Capuano, founder of Digital Defense Institute, called "a pretty smart move." This moment highlighted how AI can move beyond basic data collection to understand investigative context and connect technical findings to broader threat hypotheses.

View Video

LimaCharlie

Read more about The WinINet.dll Red Flag Moment #cybersecurity #ai

Hospitals Need to Prepare for AI-Powered Phishing Attacks

Sep 4, 2025 By KnowBe4 Team In KnowBe4

Healthcare organizations need to be prepared for an increase in AI-assisted phishing attacks, according to Zack Martin, Senior Policy Advisor at Venable. In an article for HIT Consultant, Martin explained that AI has made phishing attacks more convincing and easier to launch, posing a heightened risk to healthcare organizations.

Read Post

KnowBe4

Read more about Hospitals Need to Prepare for AI-Powered Phishing Attacks

Report: AI Can Now Automate Entire Attack Chains

Sep 4, 2025 By KnowBe4 Team In KnowBe4

Threat actors can now use AI tools to automate entire attack operations, according to a new report from Anthropic. The company says an attacker abused its Claude AI tool to create a hacking and extortion campaign that compromised at least seventeen organizations. The attacker used Claude to conduct reconnaissance, initial access, malware development, data exfiltration, and extortion analysis.

Read Post

KnowBe4

Read more about Report: AI Can Now Automate Entire Attack Chains

New Invisible Attack Creates Parallel Poisoned Web Only for AI Agents

Sep 4, 2025 By Shaked Zychlinski In JFrog

AI agents are rapidly evolving from simple text generators into powerful autonomous assistants that can browse the web, book travel, and extract complex data on our behalf. This new “agentic” AI, which operates in a “sense-plan-act” loop, promises to revolutionize how we interact with the digital world.

Read Post

JFrog

Read more about New Invisible Attack Creates Parallel Poisoned Web Only for AI Agents

What an 'Aha' Moment with an Org Admin Token Taught One DevSecCon Speaker About AI Security

Sep 4, 2025 By Alysa Turner In Snyk

As the summer winds down and conversation around AI Security heats up, the Snyk team is in full swing planning mode for a double-header this October—with the return of DevSecCon’s Flagship conference, focusing this year on Securing the Shift to AI Native, and serving as the founding partner of the inaugural AI Security Summit.

Read Post

Snyk

Read more about What an 'Aha' Moment with an Org Admin Token Taught One DevSecCon Speaker About AI Security

Cato CTRL Threat Research: Threat Actors Abuse Simplified AI to Steal Microsoft 365 Credentials

Sep 4, 2025 By Guy Waizel In Cato Networks

AI marketing platforms have exploded in popularity, becoming everyday tools for creative teams in enterprises worldwide. Platforms like Simplified AI offer marketers the ability to generate content, clips, and campaigns at scale. For CISOs and IT leaders, approving such services often seems straightforward: allow access, whitelist the domain, and enable the marketing team to innovate.

Read Post