Lightnews — Scholar-powered news

キタきつね

@kitafox.bsky.social

AI詐欺の規模により、従来の本人確認では不十分に

Scale of AI fraud makes legacy identity verification inadequate #BiometricUpdate (Jan 23)

www.biometricupdate.com/202601/scale...

Scale of AI fraud makes legacy identity verification inadequate | Biometric Update

Sometimes, you just have to tell yourself, “I’m good enough.” Then again, if you’re a digital identity security system, you’d be wrong.

www.biometricupdate.com

January 26, 2026 at 11:00 AM

キタきつね

@kitafox.bsky.social

AIエージェントとアイデンティティの可視性の欠如は組織に脅威をもたらすとペルミソ氏は言う

Lack of visibility into AI agents and identities brings threats to orgs, says Permiso #BiometricUpdate (Jan 23)

www.biometricupdate.com/202601/lack-...

Lack of visibility into AI agents and identities brings threats to orgs, says Permiso | Biometric Update

Organizations are already integrating non-human identities, such as AI agents, and the trend is likely to continue throughout 2026.

www.biometricupdate.com

January 26, 2026 at 10:30 AM

キタきつね

@kitafox.bsky.social

1PasswordはAIを活用したフィッシング対策を内蔵

1Password targets AI-driven phishing with built-in prevention #HelpNetSecurity (Jan 23)

www.helpnetsecurity.com/2026/01/23/1...

1Password targets AI-driven phishing with built-in prevention - Help Net Security

1Password’s phishing prevention feature adds protection against AI-powered scams by stopping users before they share passwords.

www.helpnetsecurity.com

January 26, 2026 at 10:00 AM

キタきつね

@kitafox.bsky.social

有効期限のないワンタイムSMSリンクは、何年も個人データを公開する可能性があります

One-time SMS links that never expire can expose personal data for years #HelpNetSecurity (Jan 23)

www.helpnetsecurity.com/2026/01/23/s...

One-time SMS links that never expire can expose personal data for years - Help Net Security

SMS delivery of private URLs leads to prolonged exposure of user data, often long after messages are sent.

www.helpnetsecurity.com

January 26, 2026 at 9:30 AM

キタきつね

@kitafox.bsky.social

AIツールを導入する従業員は増え、仕事でそれに依存する従業員は減少している

More employees get AI tools, fewer rely on them at work #HelpNetSecurity (Jan 23)

www.helpnetsecurity.com/2026/01/23/d...

More employees get AI tools, fewer rely on them at work - Help Net Security

Enterprise AI adoption is rising, but daily use, governance, and security controls lag as agentic systems spread across organizations.

www.helpnetsecurity.com

January 26, 2026 at 9:00 AM

キタきつね

@kitafox.bsky.social

エージェント型AIが日常的な生産現場に近づいている

Agentic AI edges closer to everyday production use #HelpNetSecurity (Jan 23)

www.helpnetsecurity.com/2026/01/23/c...

Agentic AI edges closer to everyday production use - Help Net Security

Agentic AI operations are moving into production as organizations focus on observability, human oversight, and control of autonomous systems.

www.helpnetsecurity.com

January 26, 2026 at 8:30 AM

キタきつね

@kitafox.bsky.social

スワイプ、プラグイン、乗っ取られる：研究者が車両をハッキングする新たな方法を発見

Swipe, Plug-in, Pwned: Researchers Find New Ways to Hack Vehicles #DarkReading (Jan 24)

www.darkreading.com/endpoint-sec...

Swipe, Plug-in, Pwned: Researchers Find New Ways to Hack Vehicles

Security researchers exploited dozens of vulnerabilities in vehicle infotainment systems and EV chargers in the latest Pwn2Own at Automotive World 2026.

www.darkreading.com

January 26, 2026 at 8:00 AM

キタきつね

@kitafox.bsky.social

詩による脱獄：詩がAIの舌を緩める方法

Jailbreaking in verse: how poetry loosens AI’s tongue #Kaspersky (Jan 23)

www.kaspersky.com/blog/poetry-...

AI jailbreaking via poetry: bypassing chatbot defenses with rhyme

A new study shows that verse-based prompts can slash the effectiveness of AI safety constraints. We're breaking down an experiment involving 25 language models and its key takeaways.

www.kaspersky.com

January 26, 2026 at 7:30 AM

キタきつね

@kitafox.bsky.social

AI搭載のサイバー攻撃キットは「時間の問題」とGoogle幹部が警告

AI-powered cyberattack kits are 'just a matter of time,' warns Google exec #Register (Jan 23)

www.theregister.com/2026/01/23/a...

AI-powered cyberattack kits are 'just a matter of time'

: Security chief says criminals are already automating workflows, with full end-to-end tools likely within years

www.theregister.com

January 26, 2026 at 7:00 AM

キタきつね

@kitafox.bsky.social

ShinyHuntersは、Oktaの顧客が3つの組織のデータを侵害し漏洩したと主張

ShinyHunters claims Okta customer breaches, leaks data belonging to 3 orgs #Register (Jan 23)

www.theregister.com/2026/01/23/s...

ShinyHunters claims Okta customer breaches, leaks data

: 'A lot more' victims to come, we're told

www.theregister.com

January 26, 2026 at 6:30 AM

キタきつね

@kitafox.bsky.social

CISAは今年の情報セキュリティ業界最大の会議には出席しない

CISA won't attend infosec industry's biggest conference this year #Register (Jan 24)

www.theregister.com/2026/01/24/c...

CISA won't attend infosec industry's biggest conference

exclusive: But ex-CISA boss and new RSAC CEO Jen Easterly will be there

www.theregister.com

January 26, 2026 at 6:00 AM

キタきつね

@kitafox.bsky.social

このエージェントを承認したのは誰か？ AIエージェント時代のアクセス、説明責任、リスクの再考

Who Approved This Agent? Rethinking Access, Accountability, and Risk in the Age of AI Agents #HackerNews (Jan 24)

thehackernews.com/2026/01/who-...

Who Approved This Agent? Rethinking Access, Accountability, and Risk in the Age of AI Agents

AI agents break traditional IAM by enabling delegated access, authorization bypass, and high-risk ownerless organizational automation.

thehackernews.com

January 26, 2026 at 5:30 AM

キタきつね

@kitafox.bsky.social

Amnesia RATとランサムウェアを使った多段階フィッシング攻撃がロシアを狙う

Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware #HackerNews (Jan 24)

thehackernews.com/2026/01/mult...

Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware

A multi-stage phishing campaign targeting Russia abuses GitHub and Dropbox to disable Microsoft Defender and deploy Amnesia RAT and ransomware.

thehackernews.com

January 26, 2026 at 5:00 AM

キタきつね

@kitafox.bsky.social

フィッシング詐欺師がエネルギー業界を狙った新たなキャンペーンでSharePointを悪用

Phishers Abuse SharePoint in New Campaign Targeting Energy Sector #SecurityWeek (Jan 23)

www.securityweek.com/phishers-abu...

Phishers Abuse SharePoint in New Campaign Targeting Energy Sector

Threat actors are leveraging the file-sharing service for payload delivery in AitM phishing and BEC attacks.

www.securityweek.com

January 26, 2026 at 4:30 AM

キタきつね

@kitafox.bsky.social

ハッカーがデータ漏洩の脅迫、ナイキがセキュリティインシデントの潜在を調査

Nike Probing Potential Security Incident as Hackers Threaten to Leak Data #SecurityWeek (Jan 24)

www.securityweek.com/nike-probing...