Tag: closed

  • Simon Willison’s Weblog: Security ProbLLMs in xAI’s Grok: A Deep Dive

    Source URL: https://simonwillison.net/2024/Dec/16/security-probllms-in-xais-grok/#atom-everything Source: Simon Willison’s Weblog Title: Security ProbLLMs in xAI’s Grok: A Deep Dive Feedly Summary: Security ProbLLMs in xAI’s Grok: A Deep Dive Adding xAI to the growing list of AI labs that shipped feature vulnerable to data exfiltration prompt injection attacks, but with the unfortunate addendum that they don’t seem to…

  • The Register: Ransomware scum blow holes in Cleo software patches, Cl0p (sort of ) claims responsibility

    Source URL: https://www.theregister.com/2024/12/16/ransomware_attacks_exploit_cleo_bug/ Source: The Register Title: Ransomware scum blow holes in Cleo software patches, Cl0p (sort of ) claims responsibility Feedly Summary: But can you really take crims at their word? Supply chain integration vendor Cleo has urged its customers to upgrade three of its products after an October patch was circumvented, leading to…

  • The Register: Trump administration wants to go on cyber offensive against China

    Source URL: https://www.theregister.com/2024/12/16/trump_administration_china_offensive/ Source: The Register Title: Trump administration wants to go on cyber offensive against China Feedly Summary: The US has never attacked Chinese critical infrastructure before, right? President-elect Donald Trump’s team wants to go on the offensive against America’s cyber adversaries, though it isn’t clear how the incoming administration plans to achieve this. ……

  • The Register: Apache issues patches for critical Struts 2 RCE bug

    Source URL: https://www.theregister.com/2024/12/12/apache_struts_2_vuln/ Source: The Register Title: Apache issues patches for critical Struts 2 RCE bug Feedly Summary: More details released after devs allowed weeks to apply fixes We now know the remote code execution vulnerability in Apache Struts 2 disclosed back in November carries a near-maximum severity rating following the publication of the CVE.……

  • Cloud Blog: Announcing the general availability of Trillium, our sixth-generation TPU

    Source URL: https://cloud.google.com/blog/products/compute/trillium-tpu-is-ga/ Source: Cloud Blog Title: Announcing the general availability of Trillium, our sixth-generation TPU Feedly Summary: The rise of large-scale AI models capable of processing diverse modalities like text and images presents a unique infrastructural challenge. These models require immense computational power and specialized hardware to efficiently handle training, fine-tuning, and inference. Over…

  • Cisco Talos Blog: Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities

    Source URL: https://blog.talosintelligence.com/december-patch-tuesday-release/ Source: Cisco Talos Blog Title: Microsoft Patch Tuesday for December 2024 contains four critical vulnerabilities Feedly Summary: The Patch Tuesday for December of 2024 includes 72 vulnerabilities, including four that Microsoft marked as “critical.” The remaining vulnerabilities listed are classified as “important.”  AI Summary and Description: Yes **Summary:** The December 2024 Patch…

  • Schneier on Security: Trust Issues in AI

    Source URL: https://www.schneier.com/blog/archives/2024/12/trust-issues-in-ai.html Source: Schneier on Security Title: Trust Issues in AI Feedly Summary: For a technology that seems startling in its modernity, AI sure has a long history. Google Translate, OpenAI chatbots, and Meta AI image generators are built on decades of advancements in linguistics, signal processing, statistics, and other fields going back to…

  • Schneier on Security: Trust Issues

    Source URL: https://www.schneier.com/blog/archives/2024/12/trust-issues.html Source: Schneier on Security Title: Trust Issues Feedly Summary: For a technology that seems startling in its modernity, AI sure has a long history. Google Translate, OpenAI chatbots, and Meta AI image generators are built on decades of advancements in linguistics, signal processing, statistics, and other fields going back to the early…

  • Simon Willison’s Weblog: Quoting Menlo Ventures

    Source URL: https://simonwillison.net/2024/Nov/29/menlo-ventures/#atom-everything Source: Simon Willison’s Weblog Title: Quoting Menlo Ventures Feedly Summary: Among closed-source models, OpenAI’s early mover advantage has eroded somewhat, with enterprise market share dropping from 50% to 34%. The primary beneficiary has been Anthropic,* which doubled its enterprise presence from 12% to 24% as some enterprises switched from GPT-4 to Claude…