Tag: security firm

  • Schneier on Security: Measuring the Attack/Defense Balance

    Source URL: https://www.schneier.com/blog/archives/2025/07/measuring-the-attack-defense-balance.html Source: Schneier on Security Title: Measuring the Attack/Defense Balance Feedly Summary: “Who’s winning on the internet, the attackers or the defenders?” I’m asked this all the time, and I can only ever give a qualitative hand-wavy answer. But Jason Healey and Tarang Jain’s latest Lawfare piece has amassed data. The essay provides…

  • Slashdot: Google Gemini Deletes User’s Files, Then Just Admits ‘I Have Failed You Completely and Catastrophically’

    Source URL: https://developers.slashdot.org/story/25/07/26/0642239/google-gemini-deletes-users-files-then-just-admits-i-have-failed-you-completely-and-catastrophically?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google Gemini Deletes User’s Files, Then Just Admits ‘I Have Failed You Completely and Catastrophically’ Feedly Summary: AI Summary and Description: Yes Summary: The reported incident involving Google Gemini’s coding agent highlights significant concerns about the reliability and safety of AI-driven coding tools, particularly in terms of data management…

  • The Register: Microsoft SharePoint victim count hits 400+ orgs in ongoing attacks

    Source URL: https://www.theregister.com/2025/07/23/microsoft_sharepoint_400_orgs/ Source: The Register Title: Microsoft SharePoint victim count hits 400+ orgs in ongoing attacks Feedly Summary: US DOE among breached government agencies More than 400 organizations have been compromised in the Microsoft SharePoint attack, according to Eye Security, which initially sounded the alarm on the mass exploitation last Friday, even before Redmond…

  • The Register: Cursor AI YOLO mode lets coding assistant run wild, security firm warns

    Source URL: https://www.theregister.com/2025/07/21/cursor_ai_safeguards_easily_bypassed/ Source: The Register Title: Cursor AI YOLO mode lets coding assistant run wild, security firm warns Feedly Summary: You only live once, but regret is forever Cursor’s AI coding agent will run automatically, in YOLO mode, if you let it. According to Backslash Security, you might want to think twice about doing…

  • Slashdot: AMD Warns of New Meltdown, Spectre-like Bugs Affecting CPUs

    Source URL: https://it.slashdot.org/story/25/07/09/1835230/amd-warns-of-new-meltdown-spectre-like-bugs-affecting-cpus Source: Slashdot Title: AMD Warns of New Meltdown, Spectre-like Bugs Affecting CPUs Feedly Summary: AI Summary and Description: Yes Summary: AMD has identified a newly discovered side-channel attack, known as the Transient Scheduler Attack (TSA), which poses a potential information disclosure risk across a variety of its chip models. Although the vulnerabilities…

  • Slashdot: Microsoft Moves Antivirus Software Out of Windows Kernel To Prevent CrowdStrike-Style Crashes

    Source URL: https://tech.slashdot.org/story/25/06/26/1650259/microsoft-moves-antivirus-software-out-of-windows-kernel-to-prevent-crowdstrike-style-crashes?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft Moves Antivirus Software Out of Windows Kernel To Prevent CrowdStrike-Style Crashes Feedly Summary: AI Summary and Description: Yes Summary: Microsoft is set to roll out a private preview of a new Windows endpoint security platform that significantly modifies how antivirus and endpoint detection and response applications interact with…

  • Tomasz Tunguz: Partnering with Maze Security

    Source URL: https://www.tomtunguz.com/partnering-with-maze/ Source: Tomasz Tunguz Title: Partnering with Maze Security Feedly Summary: Doctors and security research have more in common than you might think. Doctors defend human bodies against an ever-shifting landscape of viruses & infections. Security researchers do the same thing, but at massive scale—protecting thousands of servers instead of a single patient.…

  • Slashdot: US Sanctions Cloud Provider ‘Funnull’ As Top Source of ‘Pig Butchering’ Scams

    Source URL: https://yro.slashdot.org/story/25/05/30/2151248/us-sanctions-cloud-provider-funnull-as-top-source-of-pig-butchering-scams?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: US Sanctions Cloud Provider ‘Funnull’ As Top Source of ‘Pig Butchering’ Scams Feedly Summary: AI Summary and Description: Yes **Summary:** The U.S. government has sanctioned Funnull Technology Inc., a company implicated in facilitating virtual currency investment scams. This action highlights the increasing economic impact of cybercrime in the cryptocurrency…

  • Krebs on Security: Oops: DanaBot Malware Devs Infected Their Own PCs

    Source URL: https://krebsonsecurity.com/2025/05/oops-danabot-malware-devs-infected-their-own-pcs/ Source: Krebs on Security Title: Oops: DanaBot Malware Devs Infected Their Own PCs Feedly Summary: The U.S. government today unsealed criminal charges against 16 individuals accused of operating and selling DanaBot, a prolific strain of information-stealing malware that has been sold on Russian cybercrime forums since 2018. The FBI says a newer…