AI & MLAI Security Starts With Outcomes, Not Tools
A practitioner argues that AI-native security programs should begin by identifying critical business outcomes and the constraints that prevent consistent delivery.
30 results for “soc”
AI & MLA practitioner argues that AI-native security programs should begin by identifying critical business outcomes and the constraints that prevent consistent delivery.
ASOS says an employee's stolen credentials, obtained through social engineering, exposed names and contact details held on third-party platforms.
Meta is testing a full-screen video default for some Facebook users in India, with an opt-out and a planned U.S. look next year.
A new BioCatch report claims 90% of scams now happen on phones, with banking scam attempts up 35% in the past year.
Edtech vendor Frontline Education says attackers exploited a third-party software flaw to access employee data including Social Security numbers.
Mimecast's Rob Juncker reflects on a childhood that mixed curiosity and crime, and the warning that steered him to security.
Hackers accessed DMDC personnel records for nearly nine months, exposing Social Security numbers and military data of over 3 million people.
Microsoft says phishing emails hid a legitimate MSP360 installer behind meeting and PDF lures, then used it to install ScreenConnect as a redundant remote-access channel.
Swimlane study finds AI boosts analyst capacity, but a quarter say it limits skill development and nearly half expect a steeper path into the profession.
Huntress found attackers using custom GPTs and Google Sites to deliver a ClickFix RAT called @input, impacting dozens of users.
Rust team members and crate owners are being targeted by attackers who pose as recruiters to hijack credentials and push malicious packages.
Trump posted a poll on renaming AI and said he is forming an AI Force, as the AI safety debate continues.
Startup bets AI agents will handle security audits and policies, with humans still holding approval power.
A joint advisory from the UK, FBI, and Netherlands warns that Iranian hackers use social engineering and messaging apps to spy on and wipe victims' systems.
Experts say AI will transform security operations, vulnerability triage, and roles, but reproducibility and governance remain hurdles.
FBI, UK NCSC, and Dutch AIVD warn that Iranian actors use social messaging apps to deploy Chosen Brick data-stealing malware.
Exaforce extends its AI security tool beyond Claude to monitor OpenAI, Gemini and Copilot agents using existing SOC telemetry.
AI & MLChina's state security minister warns AI poses risks to social order, as Beijing rolls out a new governance framework.
A webinar will examine two attacks that used malicious OAuth apps and social engineering to breach Google Workspace environments.
A cross-store Twitch extension sent OAuth tokens for roughly 31,000 users to operator proxies, Socket reports.
A fintech breach via fake government emails exposes sensitive customer data, raising questions about verification controls.
Microsoft ties passkey-themed social engineering to extortion gangs that blend into Microsoft 365 traffic to steal files and email.
ClickFix attacks have spread from exotic to mainstream, infecting Windows and macOS users via fake CAPTCHAs and terminal commands.
Young scammers' lavish purchases led FBI to suspects in $240M bitcoin theft.
Defense contracts in LA County doubled in 10 years as startups and venture capital reshape aerospace.
A phishing campaign spanning 46 countries uses fake documents to push RMM tools, with 45% of activity aimed at the US.
Can SOC 2 compliance and a subscription model differentiate Ollie in a crowded AI assistant market?
Citizen Lab finds NSO Group spyware on an activist's iPhone via a zero-click exploit, highlighting ongoing surveillance of Serbian civil society.
Attackers buy legitimate Chrome, Edge extensions and push malware via updates, Socket reports.
Microsoft warns of TerminalFix ClickFix variant that tricks users into running malicious PowerShell commands via fake Cloudflare checks.