Validated topics from research, threat analysis, law and case law – explained for practitioners and decision-makers.
The Arup case in Hong Kong (Jan./Feb. 2024). A finance employee transferred USD 25 million after a video conference in which the CFO and several colleagues appeared to be present…
Fraudsters use AI tools (ElevenLabs and others) to clone the exact voice of children or relatives from a few seconds of audio on social media and fake emergencies.
Security analyses by Protect AI and Wiz uncovered hundreds of open-source models on Hugging Face that contained manipulated Python pickle files. Loading the model immediately…
Became known through incidents such as Samsung 2023, where developers pasted confidential source code into public chatbots for debugging, which then ended up in cloud logs and…
Developers use AI coding assistants. AIs sometimes invent plausible but non-existent package names (e.g. on npm or PyPI). Criminals register exactly those fake packages and load…
Attackers combine AI-generated emotional cover letters with QR codes. Because mail security filters scan text but do not decode QR codes, the emails land in the inbox.
With protocols such as MCP (Model Context Protocol) or OpenAI Function Calling, AIs gain access to terminals, databases, and files. Through prompt injection, the AI can be made to…
Criminals use AI face generators and virtual webcams to successfully complete online account openings at neobanks and crypto exchanges with stolen ID data.
If a chatbot is manipulated through prompt injection, it can encode sensitive data in the link of an invisible image (``). When the chat…
Companies use Retrieval Augmented Generation (RAG) so AIs can access internal manuals and intranets. Attackers inject manipulated text snippets that falsify internal search…
Models such as GPT-4 Vision solve complex image and logic CAPTCHAs ('Find all traffic lights') with over 90 percent accuracy and beat humans in speed and precision.
Concepts such as BlackMamba show how malware constantly rewrites its code at runtime via an AI API. Function and payload stay the same, but the hash and signature keep changing.
Fraudsters send employees short voice messages in messengers: 'I'm on the plane right now — please urgently approve the invoice!'. The voice comes from YouTube interviews of the…
Machine unlearning is mathematically unsolved. Once a phone number or address is baked into a model's billions of parameters, you cannot delete it at the push of a button like in…
Security researchers (including the DARPA AI Cyber Challenge) show that AI systems can automatically scan software repositories, find logic flaws, and write working exploits in…