Experimental News Clipping Site

Tag: security practices

  • Slashdot: Russian Spies Jumped From One Network To Another Via Wi-Fi

    —

    by

    system automation
    in

    Source URL: https://mobile.slashdot.org/story/24/11/22/2331247/russian-spies-jumped-from-one-network-to-another-via-wi-fi?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Russian Spies Jumped From One Network To Another Via Wi-Fi Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a significant cybersecurity breach investigated by Veloxity, detailing how Russian hackers were able to daisy-chain multiple Wi-Fi networks to conduct sophisticated intrusions. This case study illustrates the evolving…

  • CSA: The Evolution of DevSecOps with AI

    —

    by

    system automation
    in

    Source URL: https://cloudsecurityalliance.org/blog/2024/11/22/the-evolution-of-devsecops-with-ai Source: CSA Title: The Evolution of DevSecOps with AI Feedly Summary: AI Summary and Description: Yes **Summary:** The text discusses the significant role of artificial intelligence (AI) in transforming DevSecOps practices, aiming to enhance the integration of security into software development processes. The article highlights how AI improves vulnerability detection, real-time monitoring,…

  • Hacker News: Microsoft Copilot Customers Discover It Can Let Them Read HR Docs and CEO Emails

    —

    by

    system automation
    in

    Source URL: https://21hats.substack.com/p/all-of-a-sudden-joe-blow-can-see Source: Hacker News Title: Microsoft Copilot Customers Discover It Can Let Them Read HR Docs and CEO Emails Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a security issue related to Microsoft’s Copilot, an AI-driven tool that inadvertently allows employees to access sensitive corporate information due to lax…

  • The Register: Here’s what happens if you don’t layer network security – or remove unused web shells

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/22/cisa_red_team_exercise/ Source: The Register Title: Here’s what happens if you don’t layer network security – or remove unused web shells Feedly Summary: TL;DR: Attackers will break in and pwn you, as a US government red team demonstrated The US Cybersecurity and Infrastructure Agency often breaks into critical organizations’ networks – with their permission,…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/21/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability…

  • Simon Willison’s Weblog: How some of the world’s most brilliant computer scientists got password policies so wrong

    —

    by

    system automation
    in

    Source URL: https://simonwillison.net/2024/Nov/21/password-policies/#atom-everything Source: Simon Willison’s Weblog Title: How some of the world’s most brilliant computer scientists got password policies so wrong Feedly Summary: How some of the world’s most brilliant computer scientists got password policies so wrong Stuart Schechter blames Robert Morris and Ken Thompson for the dire state of passwords today: The story…

  • New York Times – Artificial Intelligence : Nvidia’s Profit Doubles as A.I. Chip Sales Soar

    —

    by

    system automation
    in

    Source URL: https://www.nytimes.com/2024/11/20/technology/nvidia-earnings-chips-ai.html Source: New York Times – Artificial Intelligence Title: Nvidia’s Profit Doubles as A.I. Chip Sales Soar Feedly Summary: The company, which dominates the market for chips used to build artificial intelligence, expects another big jump in the current quarter. AI Summary and Description: Yes Summary: Nvidia’s exceptional growth in the AI chip…

  • Google Online Security Blog: Leveling Up Fuzzing: Finding more vulnerabilities with AI

    —

    by

    system automation
    in

    Source URL: http://security.googleblog.com/2024/11/leveling-up-fuzzing-finding-more.html Source: Google Online Security Blog Title: Leveling Up Fuzzing: Finding more vulnerabilities with AI Feedly Summary: AI Summary and Description: Yes **Summary:** The text discusses significant advancements in automated vulnerability discovery utilizing AI, specifically highlighting the OSS-Fuzz project’s recent successes with AI-powered fuzzing, which led to the identification of critical vulnerabilities, including…

  • Alerts: 2024 CWE Top 25 Most Dangerous Software Weaknesses

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/20/2024-cwe-top-25-most-dangerous-software-weaknesses Source: Alerts Title: 2024 CWE Top 25 Most Dangerous Software Weaknesses Feedly Summary: The Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the Homeland Security Systems Engineering and Development Institute (HSSEDI), operated by MITRE, has released the 2024 CWE Top 25 Most Dangerous Software Weaknesses. This annual list identifies the most critical…