Tag: code

Source URL: https://www.theregister.com/2025/02/27/llm_emergent_misalignment_study/ Source: The Register Title: Does terrible code drive you mad? Wait until you see what it does to OpenAI’s GPT-4o Feedly Summary: Model was fine-tuned to write vulnerable software – then suggested enslaving humanity Computer scientists have found that fine-tuning notionally safe large language models to do one thing badly can negatively…

Hacker News: A Comprehensive Formal Security Analysis of OAuth 2.0

Feb 27, 2025

—

by

Source URL: https://arxiv.org/abs/1601.01229 Source: Hacker News Title: A Comprehensive Formal Security Analysis of OAuth 2.0 Feedly Summary: Comments AI Summary and Description: Yes Summary: The paper presents a comprehensive formal security analysis of the OAuth 2.0 protocol, a widely used authorization standard essential for secure single sign-on (SSO) applications. It highlights vulnerabilities discovered during analysis…

The Register: Bybit declares war on North Korea’s Lazarus crime-ring to regain $1.5B stolen from wallet

—

by

Source URL: https://www.theregister.com/2025/02/26/bybit_lazarus_bounty/ Source: The Register Title: Bybit declares war on North Korea’s Lazarus crime-ring to regain $1.5B stolen from wallet Feedly Summary: Up to $140M in bounty rewards for return of Ethereum allegedly pilfered by hermit nation Cryptocurrency exchange Bybit, just days after suspected North Korean operatives stole $1.5 billion in Ethereum from it,…

Slashdot: ExpressVPN Gets Faster and More Secure, Thanks To Rust

—

by

Source URL: https://developers.slashdot.org/story/25/02/26/2133246/expressvpn-gets-faster-and-more-secure-thanks-to-rust Source: Slashdot Title: ExpressVPN Gets Faster and More Secure, Thanks To Rust Feedly Summary: AI Summary and Description: Yes Summary: The text discusses significant updates to ExpressVPN’s Lightway codebase, which has transitioned from C to Rust, enhancing both speed and security. Notably, the updated protocol utilizes ML-KEM for post-quantum encryption, addressing emerging…

Hacker News: Securing tomorrow’s software: the need for memory safety standards

—

by

Source URL: https://security.googleblog.com/2025/02/securing-tomorrows-software-need-for.html Source: Hacker News Title: Securing tomorrow’s software: the need for memory safety standards Feedly Summary: Comments AI Summary and Description: Yes Summary: The text outlines a call for standardization in memory safety practices within the software industry. It highlights the urgency of addressing memory safety vulnerabilities, which have significant implications for security…

Hacker News: ForeverVM: Run AI-generated code in stateful sandboxes that run forever

—

by

Source URL: https://forevervm.com/ Source: Hacker News Title: ForeverVM: Run AI-generated code in stateful sandboxes that run forever Feedly Summary: Comments AI Summary and Description: Yes Short Summary with Insight: The text describes ForeverVM, a code execution API that enables secure execution of Python code in a persistent, stateful sandbox environment. This innovation has significant implications…

Anchore: Effortless SBOM Analysis: How Anchore Enterprise Simplifies Integration

—

by

Source URL: https://anchore.com/blog/effortless-sbom-analysis-how-anchore-enterprise-simplifies-integration/ Source: Anchore Title: Effortless SBOM Analysis: How Anchore Enterprise Simplifies Integration Feedly Summary: As software supply chain security becomes a top priority, organizations are turning to Software Bill of Materials (SBOM) generation and analysis to gain visibility into the composition of their software and supply chain dependencies in order to reduce risk.…

The Register: 200-plus impressively convincing GitHub repos are serving up malware

—

by

Source URL: https://www.theregister.com/2025/02/26/infosec_bytes/ Source: The Register Title: 200-plus impressively convincing GitHub repos are serving up malware Feedly Summary: Plus: DOGE staff quit; LastPass PC, Mac gasp; and CISA warns Oracle and Adobe flaws under attack Infosec bytes Kaspersky says it has found more than 200 GitHub repos hosting fairly convincing-looking fake projects laced with malicious…

Hacker News: Evaluating modular RAG with reasoning models

—

by