Experimental News Clipping Site

Tag: proactive

  • News: Call for action: urgent plan needed to transition to post-quantum cryptography together

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.europol.europa.eu/media-press/newsroom/news/call-for-action-urgent-plan-needed-to-transition-to-post-quantum-cryptography-together Source: News Title: Call for action: urgent plan needed to transition to post-quantum cryptography together Feedly Summary: On 7 February 2025, Europol hosted a Quantum Safe Financial Forum (QSFF) event, during which the QSFF has issued a call to action for financial institutions and policymakers, urging them to prioritise the transition to…

  • Slashdot: Ransomware Payments Dropped 35% In 2024

    —

    by

    Kurt Seifried
    in

    Source URL: https://it.slashdot.org/story/25/02/07/0049222/ransomware-payments-dropped-35-in-2024?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Ransomware Payments Dropped 35% In 2024 Feedly Summary: AI Summary and Description: Yes Summary: The text outlines a significant decline in ransomware payments despite an increase in the frequency of attacks in 2024, highlighting the influence of law enforcement operations against major ransomware groups. It emphasizes the improved resilience…

  • The Register: Apple missed screenshot-snooping malware in code that made it into the App Store, Kaspersky claims

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/07/infected_apps_google_apple_stores/ Source: The Register Title: Apple missed screenshot-snooping malware in code that made it into the App Store, Kaspersky claims Feedly Summary: OCR plugin great for extracting crypto-wallet secrets from galleries Kaspersky eggheads say they’ve spotted the first app containing hidden optical character recognition spyware in Apple’s App Store. Cunningly, the software nasty…

  • The Cloudflare Blog: Cloudflare’s commitment to advancing Public Sector security worldwide by pursuing FedRAMP High, IRAP, and ENS

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.cloudflare.com/cloudflares-commitment-to-advancing-public-sector-security-worldwide/ Source: The Cloudflare Blog Title: Cloudflare’s commitment to advancing Public Sector security worldwide by pursuing FedRAMP High, IRAP, and ENS Feedly Summary: Cloudflare achieves ENS certification, and intends to pursue FedRAMP High and IRAP. AI Summary and Description: Yes **Summary:** Cloudflare for Government is enhancing its compliance capabilities with international certifications, including…

  • The GenAI Bug Bounty Program | 0din.ai: Poison in the Pipeline: Liberating models with Basilisk Venom

    —

    by

    Kurt Seifried
    in

    Source URL: https://0din.ai/blog/poison-in-the-pipeline-liberating-models-with-basilisk-venom Source: The GenAI Bug Bounty Program | 0din.ai Title: Poison in the Pipeline: Liberating models with Basilisk Venom Feedly Summary: AI Summary and Description: Yes Summary: The provided text highlights a significant incident of data poisoning in generative AI models, emphasizing the long-term implications of malicious data insertion and its potential impact…

  • Krebs on Security: Experts Flag Security, Privacy Risks in DeepSeek AI App

    —

    by

    Kurt Seifried
    in

    Source URL: https://krebsonsecurity.com/2025/02/experts-flag-security-privacy-risks-in-deepseek-ai-app/ Source: Krebs on Security Title: Experts Flag Security, Privacy Risks in DeepSeek AI App Feedly Summary: New mobile apps from the Chinese artificial intelligence (AI) company DeepSeek have remained among the top three “free" downloads for Apple and Google devices since their debut on Jan. 25, 2025. But experts caution that many…

  • Microsoft Security Blog: Code injection attacks using publicly disclosed ASP.NET machine keys

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.microsoft.com/en-us/security/blog/2025/02/06/code-injection-attacks-using-publicly-disclosed-asp-net-machine-keys/ Source: Microsoft Security Blog Title: Code injection attacks using publicly disclosed ASP.NET machine keys Feedly Summary: Microsoft Threat Intelligence observed limited activity by an unattributed threat actor using a publicly available, static ASP.NET machine key to inject malicious code and deliver the Godzilla post-exploitation framework. In the course of investigating, remediating, and…

  • Alerts: CISA Adds Five Known Exploited Vulnerabilities to Catalog

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/06/cisa-adds-five-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Five Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added five vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-0411 7-Zip Mark of the Web Bypass Vulnerability CVE-2022-23748 Dante Discovery Process Control Vulnerability CVE-2024-21413 Microsoft Outlook Improper Input Validation Vulnerability CVE-2020-29574 CyberoamOS…