Enterprises plan to increase AI investment
Enterprise IT and operations leaders are planning to significantly increase their AI investments over the next 18 months, according to an independent global survey announced today by Celigo.
The survey of 1,200 people finds businesses are realizing positive results from early AI deployments, including greater productivity and efficiency, enhanced customer experience and reduced costs. Consequently 97 percent say they will increase their AI expenditure through 2025 to accelerate AI transformations across corporate departments.
Online fraud is a growing problem but businesses are fighting back
Almost 87 percent of respondents to a new survey report an increase in online fraud in the year to April 2024. Just 1.19 percent of respondents saying they experience zero fraudulent IDV (identity and verification) attempts in a month.
The report from Veriff also finds that more than 86 percent of decision-makers say their customers are now more demanding of robust fraud prevention capabilities. This reflects the findings in Veriff's 2024 Fraud Index which found more than 75 percent of consumers consider a company's record on fraud prevention before signing up for a service.
Security problems driven by increased API usage
A new study reveals that 95 percent of respondents have experienced security problems in production APIs, with 23 percent suffering breaches as a result of API security inadequacies.
API security incidents have more than doubled within the past 12 months, with 37 percent of respondents experiencing an incident, compared to just 17 percent in 2023.
Exploited macOS vulnerabilities increase by 30 percent
macOS and iOS have showed an increased exploitation rate of seven percent and eight percent, respectively. Although macOS reduced its total vulnerability by 29 percent from 2023 to 2022, exploited vulnerabilities have increased by over 30 percent.
This is among the findings of the Software Vulnerability Ratings Report from Action1 Corporation which offers insights into vulnerability trends within commonly used enterprise software categories, focusing on exploitation rate and Remote Code Execution (RCE) vulnerabilities.
Enterprises struggle to detect hybrid cloud breaches
A new survey of over 1,000 Security and IT leaders across Australia, France, Germany, Singapore, UK, and the USA, shows a decline in detection and response capabilities year-on-year.
The Hybrid Cloud Security Report from Gigamon shows that as hybrid cloud environments grow in complexity and threat actors launch a barrage of concealed attacks, 65 percent of respondents believe their existing security tooling cannot effectively detect breaches.
Sysdig uses automation to cut cloud incident response times
Cloud security company Sysdig is launching a new, enhanced cloud-native investigation process designed to cut incident analysis time to just five minutes.
By visualizing a given incident in the Sysdig Cloud Attack Graph, security analysts can gain a dynamic view of the relationships between resources for a better understanding of the killchain and potential lateral movement across a cloud environment.
Adapting service and consultancy businesses to the boom in AI use [Q&A]
As more companies look to embrace AI technology, professional services and consultancy providers must make sure they're ready to help their customers respond to the opportunities that it presents. Indeed, professional services teams also need to look at how using AI in their own organizations can help them to adapt as well.
But how can they ensure that they take full advantage of what is on offer, and not just fall foul of the latest hyped technology trend? We spoke to Andy Campbell, director, solutions marketing at Certinia, to find out.
AI-generated code could increase developer workload and add to risk
Artificial intelligence is supposed to make things easier, right? Not for developers it seems as AI-generated code is set to triple developer work within the next 12 months according to software delivery platform Harness.
This could also mean that organizations are exposed to a bigger 'blast radius' from software flaws that escape to production systems.
Think you could spot a deepfaked politician?
Given the quality of many politicians at the moment you might be forgiven for thinking that sometimes a deepfake would be an improvement.
But to be serious, a new study from Jumio of over 2,000 adults from across the UK finds that 60 percent are worried about the potential for AI and deepfakes to influence upcoming elections, and only 33 percent think they could easily spot a deepfake of a politician.
Security pros struggle with too many tools
New research by Keeper Security shows nearly half of security professionals (48 percent) say they favor standalone security solutions for specific issues.
But, this has resulted in security pros grappling with an average of 32 different security solutions in their tech stacks, and some managing hundreds of different security tools.
How collaborative learning and conversational intelligence are changing AIOps [Q&A]
Artificial intelligence is changing the way that we work with computers and in particular collaborative learning (CL) and conversational intelligence (CI) are set to reshape AI-powered operations.
We talked to Dr. Maitreya Natu, chief data scientist at Digitate, to discover more about what this means both for businesses and for the role of operations professionals.
Ransomware up 33 percent in May as new groups emerge
The latest GRIT Ransomware Report from GuidePoint Security shows that May this year resulted in a 33 percent increase overall in ransomware activity compared to April 2024, indicating a degree of seasonality given a similar increase month-on-month in May 2023 relative to April 2023.
May 2024 closed with an increase in overall victim volume. However, a deep review reveals that the rise was driven disproportionately by LockBit's 175 posted victims, accounting for 37 percent of the month’s total publicly posted ransomware victims.
SIEMs cover less than 20 percent of attack techniques
Security information and event management (SIEM) systems used by enterprises only have detections for 38 (19 percent) of the 201 techniques covered in the MITRE ATT&CK v14 framework according to a new report.
CardinalOps analyzed more than 3,000 detection rules, 1.2 million log sources and hundreds of unique log source types from real-world SIEM instances across Splunk, Microsoft Sentinel, IBM QRadar, and Sumo Logic.
Almost a third of IT assets lack some security controls
New research shows that nearly 30 percent of enterprise IT assets are missing at least one critical security control, such as endpoint security or patch management.
The study from Sevco Security also shows more than six percent of all IT assets have reached the end-of-life stage, creating instances of known-but-unpatched vulnerabilities.
Lack of tech understanding at executive level hinders enterprise transformation
Aging, monolithic systems, and a lack of technological understanding at the executive level are limiting organizational agility and responsiveness to disruptions according to a new report.
The IDC InfoBrief, sponsored by IFS and Boomi polled over 1,000 C-level respondents across 12 countries and finds that legacy technology platforms and unfamiliarity with the essential role APIs and composability play in unlocking business data are combining to hamper insights and transformation.
Ian's Bio
Ian spent almost 20 years working with computers before he discovered that writing about them was easier than fixing them. Since then he's written for a number of computer magazines and is a former editor of PC Utilities. Follow him on Mastodon
© 1998-2025 BetaNews, Inc. All Rights Reserved. Privacy Policy - Cookie Policy.