Tag: security community
-
Unit 42: Bad Likert Judge: A Novel Multi-Turn Technique to Jailbreak LLMs by Misusing Their Evaluation Capability
Source URL: https://unit42.paloaltonetworks.com/?p=138017 Source: Unit 42 Title: Bad Likert Judge: A Novel Multi-Turn Technique to Jailbreak LLMs by Misusing Their Evaluation Capability Feedly Summary: The jailbreak technique “Bad Likert Judge" manipulates LLMs to generate harmful content using Likert scales, exposing safety gaps in LLM guardrails. The post Bad Likert Judge: A Novel Multi-Turn Technique to…
-
The Register: How Androxgh0st rose from Mozi’s ashes to become ‘most prevalent malware’
Source URL: https://www.theregister.com/2024/12/24/androxgh0st_botnet_mozi/ Source: The Register Title: How Androxgh0st rose from Mozi’s ashes to become ‘most prevalent malware’ Feedly Summary: Botnet’s operators ‘driven by similar interests as that of the Chinese state’ After the Mozi botnet mysteriously disappeared last year, a new and seemingly more powerful botnet, Androxgh0st, rose from its ashes and has quickly…
-
Cloud Blog: Cloud CISO Perspectives: From gen AI to threat intelligence: 2024 in review
Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-from-gen-AI-to-threat-intelligence-2024-in-review/ Source: Cloud Blog Title: Cloud CISO Perspectives: From gen AI to threat intelligence: 2024 in review Feedly Summary: Welcome to the second Cloud CISO Perspectives for December 2024. To close out the year, I’m sharing the top Google Cloud security updates in 2024 that attracted the most interest from the security community.…
-
Cisco Talos Blog: Something to Read When You Are On Call and Everyone Else is at the Office Party
Source URL: https://blog.talosintelligence.com/something-to-read-when-you-are-on-call-and-everyone-else-is-at-the-office-party/ Source: Cisco Talos Blog Title: Something to Read When You Are On Call and Everyone Else is at the Office Party Feedly Summary: Its mid-December, if you’re on-call or working to defend networks, this newsletter is for you. Martin discusses the widening gap between threat and defences as well as the growing…
-
Slashdot: Open Source Maintainers Are Drowning in Junk Bug Reports Written By AI
Source URL: https://developers.slashdot.org/story/24/12/10/2334221/open-source-maintainers-are-drowning-in-junk-bug-reports-written-by-ai?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Open Source Maintainers Are Drowning in Junk Bug Reports Written By AI Feedly Summary: AI Summary and Description: Yes **Summary:** The report highlights the rising prevalence of low-quality security vulnerability submissions generated by AI models in open-source projects, which poses significant challenges for developers. Seth Larson from the Python…