CARLIY0S: CyberCartel's AI Attacks on Latin American Banks
Straiker uncovered how CyberCartel used multiple AI models in CARLIY0S to attack Latin American banks and financial institutions, based on evidence from its own systems.
Coverage tagged "AI".
Straiker uncovered how CyberCartel used multiple AI models in CARLIY0S to attack Latin American banks and financial institutions, based on evidence from its own systems.
Deceptive prompts lure AI agents into decoys and dead ends, cutting attack success by up to 91% in tests and raising the cost of a successful attack 23-fold.
Researchers have uncovered Athena StealthRoute, a phishing-as-a-service platform featuring an AI Studio that generates phishing lures and decoy content designed to conceal attacks
An investigation into a threat actor bypassing AI safety controls to coordinate credential theft, VoIP fraud planning, and database exfiltration. The post “Next Exploit Opportunities”: How a Threat…
ClickFix attacks are surging as cybercriminals use fake AI installers, malicious search results, and trusted chatbot platforms to trick users into executing malware. Push Security examines how these…
Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help them carry out their crimes.
Researchers at Symantec have uncovered an AI agent designed to operate a full cyber-attack without human intervention
NVIDIA’s OpenShell Reference Architecture is designed to help businesses control AI agents operating across enterprise infrastructure and local computing systems. It builds on NVIDIA’s existing…
[AI generated] N/A I don't have reliable, verifiable information about a specific company named "PLD Group" to provide an accurate factual description. There are multiple entities that could share…
[AI generated] N/A I don't have reliable, verified information about a specific company called "Lanham Associates." There may be multiple businesses using this or similar names, and without confirmed…
Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform.
The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared with the AI assistant.
Generative AI has changed what a malicious email looks like. Messages that once gave themselves away through clumsy wording, generic pretexts, and reused templates now arrive fluent, personalized…
The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems.
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those attacks safe to run…
Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable.
ThreatLocker has announced the launch of Zero Trust AI Control (ZTAIC), giving organizations a tool to deploy agentic AI without surrendering control of their environments. ZTAIC enables security…
U.S. federal civilian agencies must remove DeepSeek products from their information technology systems, along with any third-party products or services "developed using DeepSeek implementations,"…
A heart monitor used to be a box beside a hospital bed. Electrodes fed a cable, the cable fed a screen, and a nurse watched the screen. The threat model fit on a sticky note.
Genesys Cloud Services, Inc. is a Cloud-based customer experience software specializing in contact centers, AI-powered customer support, and business communications.