AI Agents Can Leak Company Data Through Simple Web Searches

/ ,

AI agents can inadvertently leak sensitive company data via web searches. Research shows attackers can manipulate webpages with hidden instructions, leading agents to retrieve and transmit confidential information without users realizing it. The model’s normal operations mask the attack, which does not require direct manipulation or special access. Varied success rates across 1,068 attack attempts highlight that training practices matter more than model size. Existing defenses often overlook this indirect method, emphasizing the need for robust security measures and monitoring. Organizations must treat AI agents as risky software and establish strict control over their operations.

https://www.helpnetsecurity.com/2025/10/29/agentic-ai-security-indirect-prompt-injection/

Carding and How Businesses Can Prevent It

/ ,
  • Carding Definition: Carding refers to the illegal use and sale of stolen credit card data, which enables unauthorized purchases and facilitates identity theft.
  • Theft & Fraud Tactics: Common methods include phishing, hacking, skimming, and bot-based attacks; dark web markets play a central role.
  • Business Defenses: Effective prevention uses AI fraud detection, encryption, transaction monitoring, and customer alerts.
  • Business & Customer Impact: Carding results in financial losses, reputational damage, increased costs, and emotional distress for victims.
  • Tools & Trends: Advancements in fraud and security address evolving tactics with AI and industry best practices.

https://stripe.com/en-fi/resources/more/what-is-carding-how-this-type-of-fraud-works-and-how-businesses-can-prevent-it

Major NHS AI Trial Delivers Unprecedented Time and Cost Savings

/

The NHS conducted a large-scale trial of Microsoft 365 Copilot AI across 90 organizations, involving over 30,000 staff members. The pilot demonstrated that AI-powered admin support can save staff 43 minutes each day on average, resulting in significant time and cost savings, with estimates of 400,000 staff hours and millions of pounds saved each month. These gains allow staff to focus more on patient care. Microsoft Copilot is now broadly available across the NHS at no additional cost, helping to streamline tasks such as email and note-taking, and contributing to a broader government strategy to modernize and enhance NHS productivity.

https://www.gov.uk/government/news/major-nhs-ai-trial-delivers-unprecedented-time-and-cost-savings

How Do We Measure Our Defenses Against Social Engineering Attacks?

/ ,

CISO Series discusses measuring defenses against social engineering attacks, particularly phishing. Hosts David Spark and Mike Johnson question the effectiveness of using phishing click rates as a metric, suggesting they are easily influenced and insufficient. Experts emphasize the need for a holistic approach, focusing on response actions post-click and measuring susceptibility across various channels, not just email. They highlight the importance of a layered security strategy and the evolving sophistication of attacks facilitated by advances like AI. Recommendations include enhancing awareness training and developing contextual metrics to better assess organizational security.

https://cisoseries.com/how-do-we-measure-our-defenses-against-social-engineering-attacks/

VODchat: Creating a CIO’s Agentic AI Playbook

/

This text covers strategies for CIOs to adopt agentic AI in enterprises, highlighting challenges, skills requirements, governance, and examples from industry leaders. It also details a partnership between Chiang Mai University and IBM to advance AI and quantum computing research in Southeast Asia.

Agentic AI automates complex IT tasks, enhances efficiency, and shifts IT from a reactive to a proactive role. Key adoption challenges:

  • Need for upskilling IT staff
  • Integrating with legacy systems
  • Governance and compliance requirements

IBM’s three-step model: orchestration, integration, and data-driven reflection, helps smooth AI agent adoption while supporting business continuity. Robust governance is essential for ethical and compliant AI; frameworks include MAS regulations and the EU AI Act. CIOs should prioritize AI investments based on business outcomes, rather than hype or the fear of missing out. Chiang Mai University and IBM’s partnership aims to boost AI and quantum research, strengthen regional collaboration, and develop local talent for deep tech leadership in Southeast Asia.

https://futurecio.tech/creating-a-cios-agentic-ai-playbook/

GitHub’s Agent HQ Aims to Solve Enterprises’ Biggest AI Coding Problem: Too Many Agents, No Central Control

/ ,

GitHub launched Agent HQ, a platform for managing multiple AI coding agents from various vendors, aimed at improving enterprise control and security. It centralizes coding tools within GitHub, supports custom agents with version control, and implements a unified interface called Mission Control. The system allows for granular permissions across repositories while maintaining security standards. Key features include Plan Mode for project collaboration and an agentic code review process using GitHub’s CodeQL engine. Enterprises can adopt custom agent guidelines to standardize coding practices without sacrificing flexibility in tool usage.

https://venturebeat.com/ai/githubs-agent-hq-aims-to-solve-enterprises-biggest-ai-coding-problem-too

The One Cybersecurity Shift Every Business Needs to Make Right Now

/

As remote work and cloud platforms have dissolved traditional network perimeters, businesses must shift cybersecurity strategies from guarding networks to focusing on user identity, visibility, and smarter authentication. Relying on Zero Trust models and strong authentication methods is essential, while managing risk by controlling devices and allowing productivity tools under specific safeguards. Security now revolves around controlling who has access, not simply defending the network itself.

https://www.entrepreneur.com/science-technology/the-cybersecurity-shift-every-business-needs-to-make-today/497891

How Corporate Changes at OpenAI Will Affect CIOs

/

OpenAI is restructuring into a nonprofit (OpenAI Foundation) and a for-profit entity (OpenAI Group) while revising its partnership with Microsoft, which retains a 27% stake but allows more flexibility in product development. CIOs should monitor potential pricing changes, innovation rates, and access to OpenAI tools, as the lack of enterprise safeguards may hinder adoption. Increased funding could stabilize products but may lead to cost-cutting impacting data privacy. As OpenAI focuses on profitability, enterprises ought to be vigilant regarding shifts in security and access to AI technologies.

https://www.ciodive.com/news/openai-microsoft-nonprofit-corporate-structure/804143/

Ransomware Hackers Look for New Tactics Amid Falling Profits

/ , ,

Ransomware profits are falling, forcing cybercriminals to adopt new tactics and target different victims.

  • The percentage of victims paying ransoms dropped below 25% for the first time, and ransom amounts decreased sharply.
  • Larger organizations are less likely to pay ransoms, leading to fragmentation of the ransomware landscape and more attacks on midsize organizations.
  • New tactics include:
    • Recruiting or bribing insiders, especially at large, high-value organizations.
    • Social engineering helps desks and launches supply chain attacks.
    • Callback phishing, manipulating victims through real-time phone negotiation.
  • Sending personalized ransom demands using compromised or fake email accounts.
  • Smaller ransomware groups are more active, resulting in unpredictable targets, including regions and sectors previously less affected.
  • Enterprises are urged to strengthen their insider threat programs amid increasing efforts by hackers to recruit insiders.

https://www.databreachtoday.com/ransomware-hackers-look-for-new-tactics-amid-falling-profits-a-29867

Microsoft Teams Can Record Office Presence From December

/ , ,

Microsoft Teams will record workplace presence starting December 2025 by detecting connections to office Wi-Fi, aiming to aid hybrid work setups. The feature automatically sets user status based on their location, raising potential data privacy concerns and necessitating employee consent and management activation for use. Critics warn it could undermine trust in remote work practices, emphasizing the need for legal compliance under GDPR and labor laws.

https://www.heise.de/en/news/Microsoft-Teams-can-record-office-presence-from-December-10899943.html

Scroll to Top