By Alex Laurie, GTM CTO, Ping Identity Generative AI has made content creation effortless, but establishing where content originates – and whether it can be trusted – remains a critical security challenge. While AI vendors are introducing digital watermarking to improve visibility, provenance and trust are not the same thing. Knowing an image or document […] The post The trust gap that AI watermar
For millions of shoppers, Prime Big Deal Days on 6 and 7 October are about grabbing a bargain before the festive rush. For cybercriminals, it is harvest season, and they’ve laid the groundwork well in advance. Two separate studies published ahead of the event point in the same direction. KnowBe4‘s Threat Lab says Amazon impersonation […] The post Prime Big Deal Days: scammers stock up early as Ama
Attackers are abusing Microsoft Power BI to host phishing lures that slip past email security, before dropping multiple rogue ScreenConnect clients on victims’ machines to secure persistent remote access, according to new research from Huntress. The campaign, first observed on 10 September, uses public Power BI dashboards on Microsoft’s legitimate app.powerbi.com domain as the landing […] The post
ASOS customers were alarmed Tuesday morning after the retailer’s own mobile app sent a push notification claiming the company had been hacked and threatening to leak data unless it opened negotiations with the attackers. The notification, titled “ASOS HACKED” and sent out at around 10am BST on Tuesday, was addressed not to shoppers but to […] The post ASOS app turned into ransom note as hackers cl
A nationally representative survey of 2,000 UK adults, commissioned by cybersecurity PR agency Eskenzi PR and conducted by Censuswide, found that 84% would be comfortable giving an AI agent moderate, low or no control over their day-to-day lives. More than a third (34%) would not give one any control at all. AI agents can carry […] The post UK public sets limits on AI autonomy as security concerns
This year’s Cybersecurity Awareness Month theme, “Don’t Make It Easy for Them”, is usually read as advice for individuals. Cynthia Overby, director of strategic security solutions, ZCOE, at Rocket Software, says it should be read just as closely in the boardroom. “As Cybersecurity Awareness Month commences, the theme, ‘Don’t make it easy for them’ must […] The post Verify it, don’t assume it: why
Over the past few years, AI has gone from something understood and used by a select few to a cornerstone of almost every organisation. As businesses race to adopt new models, tools and autonomous agents, security and governance are struggling to keep up. Recent incidents involving AI agents behaving in unexpected ways have offered an […] The post Q&A With Oliver Simonnet at CultureAI: AI Security
Executives may be more relaxed about handing IT decisions to AI than the managers who answer to them, according to new research from TeamViewer. The study found that 46% of middle managers want a human involved when AI resolves IT issues that could affect security, data or business operations. Among executive leaders, the figure falls […] The post Middle managers want tighter human oversight of AI
Customer identity and access management (CIAM) provider FusionAuth has established its first dedicated European sales team, based in the UK, as enterprises across the region push for tighter control over where identity data lives and how it is isolated. The Colorado-based company said its European annual recurring revenue (ARR) has grown 72% over the past […] The post Tenant isolation becomes a bu
Personal details belonging to around 8.8 million people have been exposed in a breach of Denmark’s Central Person Register (CPR), after unauthorised parties abused a Danish company’s legitimate access to the national civil registration system, authorities confirmed on Monday. According to the Ministry of Research, Education and Digitalisation, the compromised information includes names, addresses
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.