Are CISOs Prepared For LLMJacking And Other New External Risks?

Cybersecurity News. PHOTO: Cybercrime Magazine.

28 Feb Are CISOs Prepared For LLMJacking And Other New External Risks?

Posted at 08:53h in Blogs by Taylor Fox

This week in cybersecurity from the editors at Cybercrime Magazine

Sausalito, Calif. – Feb. 28, 2025

The recent new term “LLMjacking” is now part of the cybersecurity language, with sophisticated hackers obtaining stolen access to LLMs from OpenAI, Anthropic, etc. to generate images, circumvent national bans, and more. It is the secret use of other company’s generative AI platforms, wherein hijackers gain unauthorized access to an LLM while someone else foots the bill.

This increased exposure presents a further need to proactively secure the attack surface — but what should CISOs, and security teams be looking for, so they are not blind sighted? What view of a hacker are they missing in this new modern threat landscape?

BreachLock explores 7 new ways external assets are at risk today and why external attack surface management (EASM) has become an integral part of an enterprise’s security strategy:

1. Supply Chain and AI-Driven Attacks

2. API and Serverless Exploits

3. Dark Web Credential Resale & Initial Access Brokers (IABs)

4. Edge & IoT Device Exposure

5. Emerging Identity & Authentication Threats

6. Zero-Day Vulnerabilities in SaaS Platforms

7. Decentralized & Blockchain-Based Services Exploits

BreachLock breaks down each of these risks in detail for CISOs and security leaders.

Read the full story

Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:

SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.

NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.

HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.

VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.

M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.

BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).

PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.

PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.

RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.

Print page