Biztonsági szemle

Here's why CISOs must include Ai in the company's GRC program.

There are four kinds of AI agents, and each must be handled differently, Ping executives said.

Coding agents expand application risk beyond AI models to the tools, context and systems around them.

From creating lab environments for staging and testing agentic attacks to reconnaissance to lateral movement and exfiltration, the most innovative attackers are widely incorporating AI.

I identified an attacker using a semi-autonomous coding agent to run an offensive operation: finding poorly secured LLM resale gateways, acquiring API access through ordinary web flaws and account farming, validating the resulting inference capacity...

Cisco IT's Wi-Fi 7 upgrade delivered more than faster connectivity — it transformed enterprise security. Discover how Zero Trust Access, AI agents, and secure-by-design infrastructure are redefining what a modern network can do.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

The GoldFactory threat group exploits the Android Work Profile feature to deliver the Gigabud Trojan, while Mantax Otax spreads separately.

Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.

A harmless-looking sentence can influence an agent's choices once it enters a model's context.

Ransomware gangs are exploiting a WatchGuard Firebox flaw that CISA flagged nine months ago.