2024

How to use artificial intelligence to keep financial data safe 2024-11-04 at 19:03 By For any company storing sensitive financial data, security is paramount.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Microsoft has reached $1M giveaway levels of desperation to attract users to Bing 2024-11-04 at 18:33 By Brandon Vigliarolo Stuffing it full of AI hasn’t helped, so let’s try financial incentives We’re not saying Microsoft is desperate for people to use Bing, but a $1 million sweepstakes that grants entries to users of the search

Bitwarden switches password manager and SDK to GPL3 after FOSS-iness drama 2024-11-04 at 17:18 By Liam Proven Open source tool chooses to become more open than ever Fear not, FOSS fans. Bitwarden isn’t going proprietary after all. The company has changed its license terms once again – but this time, it has switched the license

Buckle up admins – Windows Server 2025 officially hits GA 2024-11-04 at 17:04 By Richard Speed Thank you, vNext… and yes, there are plenty of updates to keep you busy Windows Server 2025 is officially generally available with some substantial changes for administrators including useful Active Directory Domain tweaks, plus the disappearance of some familiar

Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning 2024-11-04 at 16:47 By Cybersecurity researchers have disclosed six security flaws in the Ollama artificial intelligence (AI) framework that could be exploited by a malicious actor to perform various actions, including denial-of-service, model poisoning, and model theft. “Collectively, the vulnerabilities could allow

Amazon’s nuclear datacenter dreams stall as regulators reject power deal 2024-11-04 at 16:04 By Dan Robinson Federal Energy Regulatory Commission cites grid stability concerns Amazon has hit a roadblock in its plans for nuclear-powered US datacenters. Federal regulators rejected a deal that would let it draw more power from a Susquehanna plant to supply new

German Police Disrupt DDoS-for-Hire Platform dstat[.]cc; Suspects Arrested 2024-11-04 at 14:33 By German law enforcement authorities have announced the disruption of a criminal service called dstat[.]cc that made it possible for other threat actors to easily mount distributed denial-of-service (DDoS) attacks. “The platform made such DDoS attacks accessible to a wide range of users, even

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Oct 28 – Nov 03) 2024-11-04 at 14:33 By This week was a total digital dumpster fire! Hackers were like, “Let’s cause some chaos!” and went after everything from our browsers to those fancy cameras that zoom and spin. (You know, the ones they use in spy

Why the long name? Okta discloses auth bypass bug affecting 52-character usernames 2024-11-04 at 13:33 By Connor Jones Mondays are for checking months of logs, apparently, if MFA’s not enabled In potentially bad news for those with long names and/or employers with verbose domain names, Okta spotted a security hole that could have allowed crims

Cyber Threats That Could Impact the Retail Industry This Holiday Season (and What to Do About It) 2024-11-04 at 13:33 By As the holiday season approaches, retail businesses are gearing up for their annual surge in online (and in-store) traffic. Unfortunately, this increase in activity also attracts cybercriminals looking to exploit vulnerabilities for their gain. 

Google’s AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine 2024-11-04 at 13:33 By Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large language model (LLM) assisted framework called Big Sleep (formerly Project Naptime). The tech giant described the development as the “first real-world vulnerability” uncovered

Public sector cyber break-ins: Our money, our lives, our right to know 2024-11-04 at 12:33 By Rupert Goodwins Is that a walrus in your server logs, or aren’t you pleased to see me? Opinion  At the start of September, Transport for London was hit by a major cyber attack. TfL is the public body that

GlobalFoundries fined $500,000 for violating US sanctions 2024-11-04 at 11:48 By Laura Dobberstein Company fessed up, got off light, says US Commerce Department The US Department of Commerce is issuing a half a million dollar penalty against US-based semiconductor wafer manufacturer GlobalFoundries for violating sanctions and sending chips to SJ Semiconductor (SJS), an affiliate of

New FakeCall Malware Variant Hijacks Android Devices for Fraudulent Banking Calls 2024-11-04 at 08:48 By Cybersecurity researchers have discovered a new version of a well-known Android malware family dubbed FakeCall that employs voice phishing (aka vishing) techniques to trick users into parting with their personal information. “FakeCall is an extremely sophisticated Vishing attack that leverages