PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

AI security in 2024: What’s new?

bugcrowd.com | blog | #ai-security | #risk-management | #social-engineering | #llm | #threat-landscape | #security-strategy | #deepfake | #fraud
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Recaps a $25M deepfake video-call scam in Hong Kong, framing AI as tool, target, and threat in cybersecurity, and urging organizations to build an AI security strategy against evolving risks.
Published
Collected

Related coverage

blog · bugcrowd.com
The Most Significant AI-related Risks in 2024
A Bugcrowd architect forecasts 2024's top AI risks: deepfake scams eroding digital trust, AI-assisted attacks, and privacy loss—dangers that go beyond classic application vulnerabilities.
blog · hackerone.com
The Risk of AI Voice Cloning: Q&A With an AI Hacker
HackerOne's Dane Sherrets explains how scammers clone a voice from under 30 seconds of public audio, why executive impersonation is trivial today, and which signs can expose synthetic speech.
blog · netspi.com
Verifying the Verifier – Assessing Identity Verification Services
Details how to assess identity verification services: gather authentic control data, craft spoofed documents and biometrics, and test whether AI-driven IDV separates real users from fraud.
blog · netspi.com
The Rapid Evolution of AI Voice Cloning and its Implications for Cybersecurity
Modern AI voice cloning needs only a minute or two of audio to produce realistic replicas. The article examines real-time impersonation risks, NetSPI's cloner testing tool, and mitigations.
blog · netspi.com
The Biggest Risks in Cyber: Curious Teenager Edition
Curious teenagers are a growing cyber risk: teens linked to Lapsus$ attacked Microsoft, Nvidia, Uber and Rockstar. The piece calls for guidance and legitimate outlets for young hacking talent.
blog · netspi.com
Fake It Until You Make It: Using Deep Fakes to Bypass Voice Biometrics
A red team engagement against a bank's voice biometric helpdesk: collecting training data, training an AI model and generating synthetic audio to bypass voice authentication with a deep fake.
Back