redai

RedAI 一个用于AI驱动漏洞发现及实时验证 的终端工作台。 大多数“AI安全”工具停在标记 看起来 有漏洞的代码上。RedAI更进一步：在扫描代理生成候选发现后，验证代理在实时环境内工作 ——即目标正在运行的实例，加上它们与之交互所需的任何工具——并尝试在报告中出现之前证实或驳斥每个发现。它们点击UI、访问端点、编写PoC脚本、托管辅助服务器，并保存证据。 环境是一个插件。RedAI附带两个——一个真实的Chrome浏览器和一个iOS模拟器——您可以通过实现一个小接口来编写自己的环境（例如Linux虚拟机、Android模拟器、Kubernetes集群、嵌入式设备模拟器）。...

CiclopeClic

CiclopeClic 受控的 AI 驱动安全意识工具 欢迎使用 CiclopeClic！🔐 想象一下，只需动动手指，就能生成用于道德钓鱼演练的安全个性化链接。这就是 CiclopeClic！我们的工具借助人工智能，正在彻底改变安全团队进行受控钓鱼测试、教育用户以及保护数字资产的方式。💡 令人惊叹的功能： 安全链接生成 ： 通过 CiclopeClic，您可以生成完全安全的 URL，非常适合在受控环境中模拟钓鱼攻击。这使您能够评估用户的反应并改进数字防御。 AI 驱动的钓鱼内容生成 ： 借助 AI，您可以访问一个包含钓鱼短语和脚本的库，帮助教育用户并强化您的网络安全策略。 直观且专业的界...

DECEIVE

DECEIVE DECEIVE, el DECeption with Evaluative Integrated Validation Engine , es un sistema honeypot de alta interacción y bajo esfuerzo. A diferencia de la mayoría de los honeypots de alta interacción, DECEIVE no proporciona a los atacantes acceso a ningún sistema real. La IA hace todo el trabajo...

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve. The operation has been attributed to a cyber espionage group it calls GTG-20006 where "GTG" stand...

Nexora

Nexora Nexora 是一个由 AI 驱动的企业端点治理与安全智能系统，可跨机器监控软件使用情况、实施基于策略的风险分类，并生成结构化的行为与安全报告。 它专为需要以下能力的组织而设计：掌握应用程序使用情况、执行软件治理规则，以及通过确定性策略规则结合 AI 辅助分析，检测风险或未经授权的工具行为。 当 AI 成为攻击者时，Nexora 就是防御者。 概述 Nexora 以轻量级端点代理结合策略引擎与 AI 推理层的方式运行。它将原始进程与应用程序活动转化为结构化安全智能，但不会赋予 AI 直接执行权限。 核心设计原则： 确定性策略执行（非 AI 驱动的风险决策） 透明遥测采集 仅...

AISA-Scanner

AISA-Scanner — Agente Autónomo de Seguridad con IA AISA-Scanner es un kit de herramientas de análisis de ciberseguridad autoevolutivo e impulsado por IA/ML que combina NLP, enriquecimiento de CVE, escaneo autónomo, modelado de riesgos y generación de informes de nivel empresarial en un solo marco...

AI is accelerating cyberattacks—here’s how to stay ahead

In March, we wrote that identity security has become the new pressure point for modern cyberattacks. Since then, AI has only increased that pressure. AI helps cyberattackers move faster across the attack chain: personalizing social engineering at scale, automating reconnaissance, analyzing leaked...

Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection

As threats become more coordinated and faster to execute, endpoint protection has become the proving ground for modern defense. For the seventh consecutive time, Microsoft has been named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. We believe this reflects both the...

Why AI Bot Protection and Control Are Essential for Application Security

AI-driven automation is no longer emerging. It is already integrated and accepted as internet traffic. From AI assistants and crawlers to enterprise automation tools, websites are now routinely accessed by non-human actors operating at scale. Vulnerabilities or weaknesses in your application...

TrendAI™ Research at RSAC 2026: Advancing Defense Across AI‑Driven and Cyber‑Physical Threats

TrendAI™ Research explored agentic AI cybercrime and EV infrastructure security through two research sessions at RSAC 2026...

The State of Secrets Sprawl 2026: 9 Takeaways for CISOs

Secrets sprawl isn't slowing down: in 2025, it accelerated faster than most security teams anticipated.GitGuardian's State of Secrets Sprawl 2026 report analyzed billions of commits across public GitHub and uncovered 29 million new hardcoded secrets in 2025 alone, a 34% increase year over year an...

Open-Source CyberStrikeAI Deployed in AI-Driven FortiGate Attacks Across 55 Countries

The threat actor behind the recently disclosed artificial intelligence AI-assisted campaign targeting Fortinet FortiGate appliances leveraged an open-source, AI-native security testing platform called CyberStrikeAI to execute the attacks. The new findings come from Team Cymru, which detected its...

Pentora

Pentora v1.0 Pentora is a terminal-first web vulnerability...

15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign

Cybersecurity researchers have lifted the veil on a widespread malicious campaign that's targeting TikTok Shop users globally with an aim to steal credentials and distribute trojanized apps. "Threat actors are exploiting the official in-app e-commerce platform through a dual attack strategy that...

Deepfakes. Fake Recruiters. Cloned CFOs — Learn How to Stop AI-Driven Attacks in Real Time

Social engineering attacks have entered a new era—and they're coming fast, smart, and deeply personalized. It's no longer just suspicious emails in your spam folder. Today's attackers use generative AI, stolen branding assets, and deepfake tools to mimic your executives, hijack your social...

Demo: Secure Edge Server for Network Slicing and Resource Allocation in Open RAN

Next-Generation Radio Access Networks NGRAN aim to support diverse vertical applications with strict security, latency, and Service-Level Agreement SLA requirements. These demands introduce challenges in securing the infrastructure, allocating resources dynamically, and enabling real-time...

AI and collaboration tools: how cyberattackers are targeting SMBs in 2025

Cyberattackers often view small and medium-sized businesses SMBs as easier targets, assuming their security measures are less robust than those of larger enterprises. In fact, attacks through contractors, also known as trusted relationship attacks, remain one of the top three methods used to brea...

Deepfakes, Scams, and the Age of Paranoia

As AI-driven fraud becomes increasingly common, more people feel the need to verify every interaction they have online...

AI-Powered SaaS Security: Keeping Pace with an Expanding Attack Surface

Organizations now use an average of 112 SaaS applications —a number that keeps growing. In a 2024 study, 49% of 644 respondents who frequently used Microsoft 365 believed that they had less than 10 apps connected to the platform, despite the fact that aggregated data indicated over 1,000+ Microso...

Silk Typhoon targeting IT supply chain

Executive summary: Microsoft Threat Intelligence identified a shift in tactics by Silk Typhoon, a Chinese espionage group, now targeting common IT solutions like remote management tools and cloud applications to gain initial access. While they haven't been observed directly targeting Microsoft...