Agentic AI: How Autonomous Agents are Changing the Game

...

Webinar: What the Next Wave of AI Cyberattacks Will Look Like — And How to Survive

The AI revolution isn't coming. It's already here. From copilots that write our emails to autonomous agents that can take action without us lifting a finger, AI is transforming how we work. But here's the uncomfortable truth: Attackers are evolving just as fast. Every leap forward in AI gives bad...

New trends in phishing and scams: how AI and social media are changing the game

Introduction Phishing and scams are dynamic types of online fraud that primarily target individuals, with cybercriminals constantly adapting their tactics to deceive people. Scammers invent new methods and improve old ones, adjusting them to fit current news, trends, and major world events:...

BIT-GITLAB-2025-2867 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. A specifically crafted issue could manipulate AI-assisted development features to potentially expose sensitive project data to unauthorized...

Amazon Nova AI Challenge -- Trusted AI: Advancing Secure, AI-Assisted Software Development

AI systems for software development are rapidly gaining prominence, yet significant challenges remain in ensuring their safety. To address this, Amazon launched the Trusted AI track of the Amazon Nova AI Challenge, a global competition among 10 university teams to drive advances in secure AI. In...

CVE-2025-24923

Uncontrolled search path in some IntelR AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-27559

The CVE-2025-27559 entry documents a privilege escalation risk in Intel AI Playground software prior to version v2.3.0 alpha due to incorrect default permissions. The vulnerability can be triggered by an authenticated user with local access, enabling elevation of privileges and impacting confiden...

CVE-2025-27559

Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-27559

Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel AI Playground 安全漏洞

Intel AI Playground is an open source application based on AI acceleration technology launched by Intel, which is mainly used to simplify the threshold of AI development, supporting features such as image generation, enhancement and chatbots. Intel AI Playground suffers from a privilege improprie...

PT-2025-32683 · Servicenow · Servicenow

Name of the Vulnerable Software and Affected Versions: ServiceNow affected versions not specified Description: A Broken Access Control vulnerability was identified in the ServiceNow AI Platform. This vulnerability could allow a low privileged user to bypass access controls and perform actions...

Never Compromise to Vulnerabilities: a Comprehensive Survey on AI Governance

The rapid advancement of AI has expanded its capabilities across domains, yet introduced critical technical vulnerabilities, such as algorithmic bias and adversarial sensitivity, that pose significant societal risks, including misinformation, inequity, security breaches, physical harm, and eroded...

PT-2025-32752 · Unknown · Ai Playground

Name of the Vulnerable Software and Affected Versions: AI Playground versions prior to 2.3.0 alpha Description: Incorrect default permissions in some AI Playground software versions prior to v2.3.0 alpha may allow an authenticated user to potentially escalate privileges via local access...

PT-2025-32738 · Intel · Intel(R) Ai For Enterprise Retrieval-Augmented Generation

Name of the Vulnerable Software and Affected Versions: IntelR AI for Enterprise Retrieval-augmented Generation affected versions not specified Description: An uncontrolled search path exists in some IntelR AI for Enterprise Retrieval-augmented Generation software. This may allow an authenticated...

NVIDIA Triton Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible NVIDIA Triton instance on the target application. NVIDIA Triton provides an optimized cloud and edge inferencing solution. This detection is included in the AI and LLM category. No source data...

Generative AI for Cybersecurity of Energy Management Systems: Methods, Challenges, and Future Directions

This paper elaborates on an extensive security framework specifically designed for energy management systems EMSs, which effectively tackles the dynamic environment of cybersecurity vulnerabilities and/or system problems SPs, accomplished through the incorporation of novel methodologies. A...

ClearML Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible ClearML instance on the target application. ClearML is an infrastructure platform for AI builders. This detection is included in the AI and LLM category. No source data...

Generative AI for Critical Infrastructure in Smart Grids: a Unified Framework for Synthetic Data Generation and Anomaly Detection

In digital substations, security events pose significant challenges to the sustained operation of power systems. To mitigate these challenges, the implementation of robust defense strategies is critically important. A thorough process of anomaly identification and detection in information and...

The vulnerability of the FortiMail email security system, a software-hardware solution for information protection based on AI and deep neural networks from Fortinet’s FortiNDR (Network Detection and Response), arises from the possibility of copying buffers without checking the size of the input data. This allows attackers to execute arbitrary code.

The vulnerability of the FortiMail email security system, a software-hardware solution for information protection based on AI and deep neural networks from Fortinet, is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker...

China Accuses Nvidia of Putting Backdoors into Their Chips

The government of China has accused Nvidia of inserting a backdoor into their H20 chips: China's cyber regulator on Thursday said it had held a meeting with Nvidia over what it called "serious security issues" with the company's artificial intelligence chips. It said US AI experts had "revealed...