Cyber Attack | Breaking Cybersecurity News | The Hacker News

The SalesBleed findings in Salesforce Agentforce show that an AI agent's real authority is decided by whoever can put words in front of it. Enterprises need to govern agent actions by the trust level of their inputs, and treat an agent's voice in internal channels as a credential. Many enterprises accept text from anyone on the internet and store it inside a trusted system. A sales lead form is one of the oldest. Someone types a name, a company, and a note, and the record lands in the CRM. For years, the security concern with those fields was script injection. With AI agents reading the same records, the concern has changed shape. The risk is now malicious instructions. An agent's effective authority in any given moment is not the authority in its role definition. It is whatever its tools permit, directed by whoever authored the least-trusted text in its context.  A Web Form Becomes a Requester Researchers at Zenity Labs disclosed three vulnerabilities in Salesf...

Cyberattacks are already the most significant operational and financial threat to almost every type of business. Surveys of CISOs consistently reveal phishing attacks, identity security, social engineering, and the resulting data breaches and ransomware attacks are the top concerns.  These fears are well founded. Each new day brings fresh headlines of another major breach or successful ransomware attack. The Cybersecurity and Infrastructure Security Agency (CISA), an agency of the DHS reports that 90% of ransomware attacks begin with phishing. Last quarter witnessed the first individual ransomware loss that exceeded a billion dollars of damages, and a leading news media reported nine new major breaches in a single week.  What is driving this epidemic and how much worse will it get?  The answers are both simple and complex. The simple answer is that this next generation of cyberattacks is being driven by the incredible power and innovation of generative AI, while the ...