Even security teams, the ones responsible for protecting the business, are adding to AI-related risk. A new survey by AI security company Mindgard, based on responses from over 500 cybersecurity professionals at RSAC 2025 Conference and Infosecurity Europe 2025, found that many security staff are using AI tools on the job without approval. This growing use of unapproved AI, often called shadow AI, is becoming a major blind spot inside the teams tasked with defending the organization. Similar to shadow IT, this kind of unofficial use goes around standard security checks. But the risks are higher with AI. These tools can process sensitive code, internal documents, and customer data, increasing the chances of leaks, privacy issues, and compliance violations.

“Here’s the reality: any upload of sensitive IP to third-party SaaS, whether a code repository, file-sharing tool, or AI assistant, introduces risk. But panic isn’t the solution; governance is. Policies, education on AI data handling, and consistent SaaS controls can make generative AI as secure as other enterprise cloud services we already trust,” Steve Wilson, Project Co-Chair of the OWASP GenAI Security Project, told Help Net Security.

[…]

Tagged:

• Artificial intelligence
• conferences
• Mindgard
• OWASP
• report
• survey

As you sift through all of those unwanted spam emails in your inbox, you may be tempted to click on the “Unsubscribe” button that appears on many of them. It turns out that may be the worst thing you can do, with cybersecurity experts now warning that responding to such a message or link may actually invite more correspondence and lead to future threats, reports the Wall Street Journal. According to DNSFilter, 1 in 644 clicks on “unsubscribe” links ends up directing the email recipient to possibly malicious websites. Selecting “unsubscribe” also lets whoever’s on the other end know “you’re a real person who interacts with spam, [which] can make you a bigger target in the future,” says Michael Bargury, co-founder of artificial-intelligence-agent security company Zenity.[…]

Final word of warning: No matter what, don’t enter your username or password for your email service provider—or for anywhere, for that matter—if you receive a prompt asking for those credentials while trying to unsubscribe from spam. (More spam stories.)

Filed: https://www.newser.com/tag/1683/1/spam.html

In early June, Ukraine scored its biggest win in months by launching drone attacks at Russian airfields, and in the process it laid bare the asymmetric vulnerabilities that cellular networks present to a major military power like the United States.

Ukrainian handlers operated the drones from thousands of miles away by connecting over Russian commercial cell networks. Because Russia cannot simply turn off its commercial cellular networks, given the enormous social and economic consequences, it was left scrambling for ways to mitigate the threat.

There is a lesson in this for us. We cannot turn back time to a world where strategic, essential communication only happens in a sensitive, compartmentalized information facility, or over private, dedicated networks. Rather than doubling down on outdated protocols, we need to fix the broken network on which the world runs — commercial cellular.

Volt Typhoon, a China-backed hacking operation, was designed to burrow into U.S. telecom infrastructure to cripple it during a future crisis. Salt Typhoon, a sweeping Chinese espionage campaign, breached at least nine U.S. telecoms and monitored the communications of both the Trump and Harris campaigns.

The FBI told Americans to stop using SMS messages. Congressmen called it the worst telecom hack in history. Yet, we’re still carrying on like nothing happened.

The core of the problem is that our telecom infrastructure is old, stagnant and too comfortable with monopoly rents.

Modernizing U.S. telecom is no small task — the industry has invested roughly $2 trillion in communications infrastructure since 1996. We can’t rip and replace the plumbing of the digital world overnight, but we can innovate on top of it.

[…]

Subject: US Official Claims DeepSeek Aids China’s Military, Evaded Controls
Source: Android Headlines
https://www.androidheadlines.com/2025/06/us-official-deepseek-aids-chinas-military-evade-export-controls.html

Filed: https://www.androidheadlines.com/category/tech-news/artificial-intelligence

June 24 (UPI) — A judge ruled the Anthropic artificial intelligence company didn’t violate copyright laws when it used millions of copyrighted books to train its AI.According to his ruling, U.S. District Judge William Alsup concluded Monday “that the training use was a fair use.”

However, that doesn’t mean Anthropic is out of the woods legally, as it’s still potentially on the hook for allegedly having pirated books.
Alsup wrote in his conclusion that although it was not legally wrong for Anthropic to train its AI with the unlawfully downloaded materials.

It was only after Maloney went to Chase to investigate that he was able to piece together at least part of the explanation. It turned out that Chase had allowed an unknown individual, who applied online with no identification, to open an account under Middlesex’s name, according to information Chase provided to Maloney. The account was then used to solicit hundreds of thousands of dollars from fraud victims, including the $133,565 from the man who was now trying to reclaim his funds.

Middlesex’s experience, as bizarre as it seems, is part of a global problem that plagues the banking industry. The account falsely opened in Middlesex’s name, and many others like it, are way stations in a sophisticated multistep money laundering process that transports cash from U.S. scam victims to crime syndicate bosses in Asia.

A huge portion of such fraud is transacted in cryptocurrency. But given that the typical consumer doesn’t own crypto, many scams unfold with a victim tapping a traditional bank account to wire dollars to swindlers, who receive the funds in their own accounts, then convert them into crypto to move across borders. Later in the process, the scammers will typically transfer their crypto back into standard currency.

The huge demand for accounts used for misbehavior gives banks a crucial, and not always welcome, role as gatekeepers — a responsibility required by U.S. law — to prevent criminals from opening accounts or engaging in money laundering. Yet from the U.S. to Singapore, Australia and Hong Kong, banks have consistently failed at that responsibility, according to experts who have investigated money laundering, as well as reviews of fraudulent account details shared by victims and court cases reviewed by ProPublica. The list of financial institutions whose accounts pig-butchering scammers have made use of includes global behemoths like Bank of America, Chase, Citibank, HSBC and Wells Fargo and many other U.S. and foreign lenders.

It doesn’t help that there are “no real standards as to what a bank has to do for detecting fraud or money laundering,” said Lester Joseph, a financial compliance consultant who used to oversee money laundering cases at the Department of Justice and later worked at Wells Fargo. The main law governing U.S. compliance regimes, the Bank Secrecy Act, requires financial institutions to maintain programs to know their customers and to detect and report suspicious activity to the government. That might mean noticing, say, that a newly opened account is suddenly receiving and sending hundreds of thousands of dollars of wire payments each month.

[…]

Filed: https://www.propublica.org/topics/technology

—

Abstracted from beSpacific
Copyright © 2025 beSpacific, All rights reserved.