Tag: protocol

  • Cloud Blog: Cloud CISO Perspectives: AI vendors should share vulnerability research. Here’s why

    Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-ai-vendors-should-share-vulnerability-research-heres-why/ Source: Cloud Blog Title: Cloud CISO Perspectives: AI vendors should share vulnerability research. Here’s why Feedly Summary: Welcome to the first Cloud CISO Perspectives for October 2024. Today I’m discussing new AI vulnerabilities that Google’s security teams discovered and helped fix, and why it’s important for AI vendors to share vulnerability research…

  • Hacker News: Invisible text that AI chatbots understand and humans can’t?

    Source URL: https://arstechnica.com/security/2024/10/ai-chatbots-can-read-and-write-invisible-text-creating-an-ideal-covert-channel/ Source: Hacker News Title: Invisible text that AI chatbots understand and humans can’t? Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a sophisticated method of exploiting vulnerabilities in AI chatbots like Claude and Copilot through “ASCII smuggling,” where invisible characters are used to embed malicious instructions. This innovative…

  • Slashdot: New Passkey Specifications Will Let Users Import and Export Them

    Source URL: https://it.slashdot.org/story/24/10/14/2337227/new-passkey-specifications-will-let-users-import-and-export-them Source: Slashdot Title: New Passkey Specifications Will Let Users Import and Export Them Feedly Summary: AI Summary and Description: Yes Summary: The reported advancements from the FIDO Alliance regarding passkeys signify a pivotal improvement in password management security. By introducing new specifications that involve the Credential Exchange Protocol (CXP) and Credential Exchange…

  • CSA: Why Is Google Ending Support for Less Secure Apps?

    Source URL: https://cloudsecurityalliance.org/articles/app-specific-passwords-origins-functionality-security-risks-and-mitigation Source: CSA Title: Why Is Google Ending Support for Less Secure Apps? Feedly Summary: AI Summary and Description: Yes Summary: Google’s announcement to terminate support for Less Secure Apps (LSAs) highlights the importance of App-Specific Passwords (ASPs) and the lingering security concerns they carry. This transition marks a significant improvement in user…

  • CSA: AI Application Security & Fundamental Cyber Hygiene

    Source URL: https://www.tenable.com/blog/securing-the-ai-attack-surface-separating-the-unknown-from-the-well-understood Source: CSA Title: AI Application Security & Fundamental Cyber Hygiene Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the emerging risks associated with LLM (Large Language Model) and AI applications, emphasizing the necessity for foundational cybersecurity practices and clear usage policies to mitigate vulnerabilities. It highlights the unique security…

  • Slashdot: Chinese Scientists Report Using Quantum Computer To Hack Military-grade Encryption

    Source URL: https://it.slashdot.org/story/24/10/14/1743258/chinese-scientists-report-using-quantum-computer-to-hack-military-grade-encryption?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Chinese Scientists Report Using Quantum Computer To Hack Military-grade Encryption Feedly Summary: AI Summary and Description: Yes Summary: Chinese researchers have reportedly developed the first effective quantum computer attack against widely utilized encryption methods, posing significant risks to critical sectors such as banking and military. This breakthrough challenges the…

  • The Register: Trump campaign arms up with ‘unhackable’ phones after Iranian intrusion

    Source URL: https://www.theregister.com/2024/10/14/trump_unhackable_phones/ Source: The Register Title: Trump campaign arms up with ‘unhackable’ phones after Iranian intrusion Feedly Summary: Florida man gets his hands on ‘the best ever’ With less than a month to go before American voters head to the polls to choose their next president, the Trump campaign has been investing in secure…

  • Wired: The War on Passwords Is One Step Closer to Being Over

    Source URL: https://www.wired.com/story/passkey-portability-fido-alliance/ Source: Wired Title: The War on Passwords Is One Step Closer to Being Over Feedly Summary: “Passkeys,” the secure authentication mechanism built to replace passwords, are getting more portable and easier for organizations to implement thanks to new initiatives the FIDO Alliance announced on Monday. AI Summary and Description: Yes Summary: The…

  • The Register: The best use for those latest manycore chips? AI, say server vendors

    Source URL: https://www.theregister.com/2024/10/14/manycore_chips_ai_servers/ Source: The Register Title: The best use for those latest manycore chips? AI, say server vendors Feedly Summary: PC makers might not be able to sell the idea – big iron has a better chance Analysis Anyone wondering what the target market is for manycore monster chips – like AMD’s newly unveiled…

  • Simon Willison’s Weblog: Grant Negotiation and Authorization Protocol (GNAP)

    Source URL: https://simonwillison.net/2024/Oct/14/grant-negotiation-and-authorization-protocol-gnap/#atom-everything Source: Simon Willison’s Weblog Title: Grant Negotiation and Authorization Protocol (GNAP) Feedly Summary: Grant Negotiation and Authorization Protocol (GNAP) RFC 9635 was published a few days ago. GNAP is effectively OAuth 3 – it’s a newly standardized design for a protocol for delegating authorization so an application can access data on your…