Uncategorized

GenAI: A New Headache for SaaS Security Teams 2024-04-17 at 15:01 By The introduction of Open AI’s ChatGPT was a defining moment for the software industry, touching off a GenAI race with its November 2022 release. SaaS vendors are now rushing to upgrade tools with enhanced productivity capabilities that are driven by generative AI. Among […]

Logitech intros free tool for ChatGPT prompts… plus a mouse with an AI button 2024-04-17 at 14:16 By Richard Speed For when the AI service cannot grok what it’s being asked Logitech has launched a free software tool to help existing users of its kit with ChatGPT prompts, but those that splash out on the

Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign 2024-04-17 at 14:16 By Cybersecurity researchers have discovered a new campaign that’s exploiting a recently disclosed security flaw in Fortinet FortiClient EMS devices to deliver ScreenConnect and Metasploit Powerfun payloads. The activity entails the exploitation of CVE-2023-48788 (CVSS score: 9.3), a critical SQL injection flaw that could

Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware 2024-04-17 at 14:16 By Threat actors are exploiting unpatched Atlassian servers to deploy a Linux variant of Cerber (aka C3RB3R) ransomware. The attacks leverage CVE-2023-22518 (CVSS score: 9.1), a critical security vulnerability impacting the Atlassian Confluence Data Center and Server that allows an unauthenticated attacker to

OpenAI’s GPT-4 can exploit real vulnerabilities by reading security advisories 2024-04-17 at 13:31 By Thomas Claburn While some other LLMs appear to flat-out suck AI agents, which combine large language models with automation software, can successfully exploit real world security vulnerabilities by reading security advisories, academics have claimed.… This article is an excerpt from The

NetBSD 10 proves old tech can still kick apps and take names three decades later 2024-04-17 at 12:31 By Liam Proven Proper old-school Unix, not like those lazy, decadent Linux types FOSDEM 2024  NetBSD 10 marks a new level of maturity for this venerable open source Unix system, which somehow manages to be both modern

Devaluing content created by AI is lazy and ignores history 2024-04-17 at 11:46 By Mark Pesce The answer is not to hide from AI, but to be honest about it It’s taken less than eighteen months for human- and AI-generated media to become impossibly intermixed. Some find this utterly unconscionable, and refuse to have anything

Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services 2024-04-17 at 11:46 By Cisco is warning about a global surge in brute-force attacks targeting various devices, including Virtual Private Network (VPN) services, web application authentication interfaces, and SSH services, since at least March 18, 2024. “These attacks all appear to be

Global IT spending forecast to reach $5.06 trillion this year 2024-04-17 at 10:47 By Lindsay Clark Comms services and AI contributing to increase, but vendors are taking ‘risks’ Gartner expects global IT spending to grow 8 percent in 2024 to $5.06 trillion in a revised forecast from the 6.8 percent uptick which the analyst predicted

Google will pump more than $100B into AI, says DeepMind boss 2024-04-17 at 09:47 By Matthew Connatser Not all at once, of course Google will eventually invest $100 billion in AI, according to DeepMind CEO Demis Hassabis.… This article is an excerpt from The Register View Original Source

Japanese government rejects Yahoo! infosec improvement plan 2024-04-17 at 08:46 By Simon Sharwood Just doesn’t believe it will sort out the mess that saw data leak from LINE messaging app Japan’s government has considered the proposed security improvements developed by Yahoo!, found them wanting, and ordered the onetime web giant to take new measures.… This

AI security for CISOs: A dynamic and practical framework 2024-04-17 at 07:16 By Without the proper foundation or understanding of how to secure their AI systems and address key security concerns, innovation slows or gets stuck.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Tencent Cloud to revisit design after circular dependencies slowed emergency API fix 2024-04-17 at 07:01 By Simon Sharwood Almost 2,000 customers experienced outages Tencent Cloud has apologized for an outage that impacted customers last week – an unusual act by a Chinese cloud – and signalled it will review some aspects of its ops in

Indian PM’s 25-year roadmap laid out with help from AI 2024-04-17 at 05:16 By Laura Dobberstein AI is so good at drawing pictures and driving cars, why not let it govern a country? India’s prime minister, Narendra Modi, used AI to help develop the nation’s 25-year development roadmap, according to comments made during a live-streamed

RISC-V AI chip upstart Rivos plans to undercut Nvidia, helped by a quarter-billion in VC lucre 2024-04-17 at 04:01 By Tobias Mann With Apple lawsuit behind it, focussed on finalizing its designs RISC-V chip designer Rivos has raised $250 million in series-A funding to bankroll production of its first accelerator for generative AI and data

Fire in the Cisco! Networking giant’s Duo MFA leaks message logs 2024-04-17 at 03:16 By Jessica Lyons Also warns of brute force attacks targeting its own VPNs, Check Point, Fortinet, SonicWall and more Cisco is fighting fires on a couple fronts this week after security incidents involving its Duo multi-factor authentication (MFA) service and its

FYI: This site claims to have harvested 4B+ Discord chats, today all on sale for a price 2024-04-17 at 01:17 By Matthew Connatser Of course there’s an enterprise plan for the Feds and AI trainers Internet-scraping outfit Spy.pet claims to have harvested more than four billion public messages made by nearly 620 million users on

MGM says FTC can’t possibly probe its ransomware downfall – watchdog chief Lina Khan was a guest at the time 2024-04-16 at 23:46 By Jessica Lyons What a twist! MGM Resorts wants the FTC to halt a probe into last year’s ransomware infection of the mega casino chain – because the watchdog’s boss Lina Khan

YouTube now sabotages ad-blocking apps that stream its vids 2024-04-16 at 23:01 By Thomas Claburn EFF lambastes latest ‘lazy and deliberately malicious move’ YouTube says it will intentionally cripple the playback of its videos in third-party apps that block its ads.… This article is an excerpt from The Register View Original Source

China scientists talk of powering hypersonic weapon with cheap Nvidia chip 2024-04-16 at 22:31 By Dan Robinson Jetson module can efficiently process computational fluid dynamics models Analysis  Researchers in China have reportedly demonstrated how a low-cost Nvidia Jetson module could theoretically be used to direct a hypersonic weapon.… This article is an excerpt from The