Experimental News Clipping Site

Tag: library

  • Bulletins: Vulnerability Summary for the Week of January 27, 2025

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/bulletins/sb25-034 Source: Bulletins Title: Vulnerability Summary for the Week of January 27, 2025 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 0xPolygonZero–plonky2  Plonky2 is a SNARK implementation based on techniques from PLONK and FRI. Lookup tables, whose length is not divisible by 26 = floor(num_routed_wires / 3) always…

  • Hacker News: ScatterBrain: Unmasking the Shadow of PoisonPlug’s Obfuscator

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/scatterbrain-unmasking-poisonplug-obfuscator Source: Hacker News Title: ScatterBrain: Unmasking the Shadow of PoisonPlug’s Obfuscator Feedly Summary: Comments AI Summary and Description: Yes **Summary**: The text provides a comprehensive analysis of the ScatterBrain obfuscating compiler, a sophisticated tool used in cyber espionage by China-nexus actors, particularly with the POISONPLUG.SHADOW malware. It highlights the advanced obfuscation techniques…

  • Hacker News: Web Analytics Accidentally Collecting Passwords

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.freshpaint.io/blog/rudderstack-collecting-passwords Source: Hacker News Title: Web Analytics Accidentally Collecting Passwords Feedly Summary: Comments AI Summary and Description: Yes Summary: The text highlights a significant security concern related to RudderStack’s data collection tool, emphasizing how the autotrack feature can inadvertently capture sensitive user information, including passwords, due to its implementation based on a flawed…

  • Data and computer security | The Guardian: Threat of cyber-attacks on Whitehall ‘is severe and advancing quickly’, NAO says

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theguardian.com/technology/2025/jan/29/cyber-attack-threat-uk-government-departments-whitehall-nao Source: Data and computer security | The Guardian Title: Threat of cyber-attacks on Whitehall ‘is severe and advancing quickly’, NAO says Feedly Summary: Audit watchdog finds 58 critical IT systems assessed in 2024 had ‘significant gaps in cyber-resilience’The threat of potentially devastating cyber-attacks against UK government departments is “severe and advancing quickly”,…

  • Cloud Blog: ScatterBrain: Unmasking the Shadow of PoisonPlug’s Obfuscator

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/topics/threat-intelligence/scatterbrain-unmasking-poisonplug-obfuscator/ Source: Cloud Blog Title: ScatterBrain: Unmasking the Shadow of PoisonPlug’s Obfuscator Feedly Summary: Written by: Nino Isakovic Introduction Since 2022, Google Threat Intelligence Group (GTIG) has been tracking multiple cyber espionage operations conducted by China-nexus actors utilizing POISONPLUG.SHADOW. These operations employ a custom obfuscating compiler that we refer to as “ScatterBrain," facilitating…

  • Hacker News: Show HN: I Created ErisForge, a Python Library for Abliteration of LLMs

    —

    by

    Kurt Seifried
    in

    Source URL: https://github.com/Tsadoq/ErisForge Source: Hacker News Title: Show HN: I Created ErisForge, a Python Library for Abliteration of LLMs Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text introduces ErisForge, a Python library designed for modifying Large Language Models (LLMs) through alterations of their internal layers. This tool allows researchers and developers to…

  • Simon Willison’s Weblog: Qwen2.5-1M: Deploy Your Own Qwen with Context Length up to 1M Tokens

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Jan/26/qwen25-1m/ Source: Simon Willison’s Weblog Title: Qwen2.5-1M: Deploy Your Own Qwen with Context Length up to 1M Tokens Feedly Summary: Qwen2.5-1M: Deploy Your Own Qwen with Context Length up to 1M Tokens Very significant new release from Alibaba’s Qwen team. Their openly licensed (sometimes Apache 2, sometimes Qwen license, I’ve had trouble keeping…