Tag: protocol

Source URL: https://www.forbes.com/sites/larsdaniel/2024/12/05/new-study-finds-65-of-employees-bypass-cybersecurity-measures/ Source: Hacker News Title: 65% of Employees Bypass Cybersecurity Measures, New Study Finds Feedly Summary: Comments AI Summary and Description: Yes Summary: The article highlights a critical issue in cybersecurity where employees, in the name of productivity, bypass essential security measures, significantly increasing vulnerabilities within organizations. A CyberArk survey reveals alarming statistics…

The Register: Microsoft: Another Chinese cyberspy crew targeting US critical orgs ‘as of yesterday’

Dec 6, 2024

—

by

Source URL: https://www.theregister.com/2024/12/06/chinese_cyberspy_us_data/ Source: The Register Title: Microsoft: Another Chinese cyberspy crew targeting US critical orgs ‘as of yesterday’ Feedly Summary: Redmond threat intel maven talks explains this persistent pain to The Reg A Chinese government-linked group that Microsoft tracks as Storm-0227 yesterday started targeting critical infrastructures organisations and US government agencies, according to Redmond’s…

The Register: Solana blockchain’s popular web3.js npm package backdoored to steal keys, funds

—

by

Source URL: https://www.theregister.com/2024/12/05/solana_javascript_sdk_compromised/ Source: The Register Title: Solana blockchain’s popular web3.js npm package backdoored to steal keys, funds Feedly Summary: Damage likely limited to those running bots with private key access Malware-poisoned versions of the widely used JavaScript library @solana/web3.js were distributed via the npm package registry, according to an advisory issued Wednesday by project…

Simon Willison’s Weblog: Quoting OpenAI o1 System Card

—

by

Source URL: https://simonwillison.net/2024/Dec/5/openai-o1-system-card/#atom-everything Source: Simon Willison’s Weblog Title: Quoting OpenAI o1 System Card Feedly Summary: When o1 was led to believe that it would be shut down when acting on its goal and that its actions were monitored, it attempted to deactivate this ‘oversight mechanism’ in 5% of the time. Exfiltration attempts: When o1 found…

The Register: BT Group confirms attackers tried to break into Conferencing division

—

by

Source URL: https://www.theregister.com/2024/12/05/bt_group_confirms_attempted_attack/ Source: The Register Title: BT Group confirms attackers tried to break into Conferencing division Feedly Summary: Sensitive data allegedly stolen from US subsidiary following Black Basta post BT Group confirmed it is dealing with an attempted attack on one of its legacy business units after the Black Basta ransomware group claimed they…

Hacker News: Certificate Authorities and the Fragility of Internet Safety

—

by

Source URL: https://azeemba.com/posts/certificate-authorities-and-the-fragility-of-internet-safety.html Source: Hacker News Title: Certificate Authorities and the Fragility of Internet Safety Feedly Summary: Comments AI Summary and Description: Yes Summary: The provided text offers a deep examination of HTTPS and the critical role of Certificate Authorities (CAs) in ensuring internet security. It discusses the potential vulnerabilities in the certificate verification process…

Wired: AI-Powered Robots Can Be Tricked Into Acts of Violence

Dec 4, 2024

—

by

Source URL: https://www.wired.com/story/researchers-llm-ai-robot-violence/ Source: Wired Title: AI-Powered Robots Can Be Tricked Into Acts of Violence Feedly Summary: Researchers hacked several robots infused with large language models, getting them to behave dangerously—and pointing to a bigger problem ahead. AI Summary and Description: Yes Summary: The text delves into the vulnerabilities associated with large language models (LLMs)…

Cloud Blog: (QR) Coding My Way Out of Here: C2 in Browser Isolation Environments

Dec 4, 2024

—

by

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/c2-browser-isolation-environments/ Source: Cloud Blog Title: (QR) Coding My Way Out of Here: C2 in Browser Isolation Environments Feedly Summary: Written by: Thibault Van Geluwe de Berlaere Executive Summary Browser isolation is a security technology where web browsing activity is separated from the user’s local device by running the browser in a secure environment,…

Cisco Security Blog: A New Approach to Network Troubleshooting in the Multicloud World

Dec 4, 2024

—

by