Tag: threats

  • Slashdot: US Sanctions Chinese Firm, Hacker Behind Telecom and Treasury Hacks

    Source URL: https://yro.slashdot.org/story/25/01/17/2125214/us-sanctions-chinese-firm-hacker-behind-telecom-and-treasury-hacks?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: US Sanctions Chinese Firm, Hacker Behind Telecom and Treasury Hacks Feedly Summary: AI Summary and Description: Yes Summary: The U.S. Department of the Treasury has sanctioned Yin Kecheng and Sichuan Juxinhe Network Technology Co. due to their involvement in cyber espionage operations targeting U.S. telecommunications, highlighting critical security concerns…

  • The Register: FCC to telcos: Did you know you must by law secure your networks from foreign spies?

    Source URL: https://www.theregister.com/2025/01/17/fcc_telcos_calea/ Source: The Register Title: FCC to telcos: Did you know you must by law secure your networks from foreign spies? Feedly Summary: Plus: Uncle Sam is cross with this one Chinese biz over Salt Typhoon mega-snooping Decades-old legislation requiring American telcos to lock down their systems to prevent foreign snoops from intercepting…

  • Slashdot: Microsoft-OpenAI Partnership Raises Antitrust Concerns, FTC Says

    Source URL: https://slashdot.org/story/25/01/17/1958200/microsoft-openai-partnership-raises-antitrust-concerns-ftc-says?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft-OpenAI Partnership Raises Antitrust Concerns, FTC Says Feedly Summary: AI Summary and Description: Yes Summary: The Federal Trade Commission (FTC) has raised concerns about Microsoft’s substantial investment in OpenAI, highlighting the potential implications for competition in the AI sector and cloud computing. This investment may lead to increased dominance…

  • METR updates – METR: Comment on NIST RMF GenAI Companion

    Source URL: https://downloads.regulations.gov/NIST-2024-0001-0075/attachment_2.pdf Source: METR updates – METR Title: Comment on NIST RMF GenAI Companion Feedly Summary: AI Summary and Description: Yes **Summary**: The provided text discusses the National Institute of Standards and Technology’s (NIST) AI Risk Management Framework concerning Generative AI. It outlines significant risks posed by autonomous AI systems and suggests enhancements to…

  • The Register: Biden signs sweeping cybersecurity order, just in time for Trump to gut it

    Source URL: https://www.theregister.com/2025/01/17/biden_cybersecurity_eo/ Source: The Register Title: Biden signs sweeping cybersecurity order, just in time for Trump to gut it Feedly Summary: Ransomware, AI, secure software, digital IDs – there’s something for everyone in the presidential directive Analysis Joe Biden, in the final days of his US presidency, issued another cybersecurity order that is nearly…

  • Wired: The FCC’s Jessica Rosenworcel Isn’t Leaving Without a Fight

    Source URL: https://www.wired.com/story/the-fccs-jessica-rosenworcel-isnt-leaving-without-a-fight/ Source: Wired Title: The FCC’s Jessica Rosenworcel Isn’t Leaving Without a Fight Feedly Summary: As the US faces “the worst telecommunications hack in our nation’s history,” by China’s Salt Typhoon hackers, the outgoing FCC chair is determined to bolster network security if it’s the last thing she does. AI Summary and Description:…

  • The Register: Fortinet: FortiGate config leaks are genuine but misleading

    Source URL: https://www.theregister.com/2025/01/17/fortinet_fortigate_config_leaks/ Source: The Register Title: Fortinet: FortiGate config leaks are genuine but misleading Feedly Summary: Competition hots up with Ivanti over who can have the worst start to a year Fortinet has confirmed that previous analyses of records leaked by the Belsen Group are indeed genuine FortiGate configs stolen during a zero-day raid…

  • Hacker News: A New type of web hacking technique: DoubleClickjacking

    Source URL: https://www.paulosyibelo.com/2024/12/doubleclickjacking-what.html Source: Hacker News Title: A New type of web hacking technique: DoubleClickjacking Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text introduces the concept of “DoubleClickjacking,” a sophisticated web vulnerability that builds upon traditional clickjacking techniques by exploiting event timing between double clicks. This novel approach allows attackers to bypass…

  • Cloud Blog: Cloud CISO Perspectives: Talk cyber in business terms to win allies

    Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-talk-cyber-in-business-terms-to-win-allies/ Source: Cloud Blog Title: Cloud CISO Perspectives: Talk cyber in business terms to win allies Feedly Summary: Welcome to the first Cloud CISO Perspectives for January 2025. We’re starting off the year at the top with boards of directors, and how talking about cybersecurity in business terms can help us better convey…

  • Slashdot: Microsoft Research: AI Systems Cannot Be Made Fully Secure

    Source URL: https://it.slashdot.org/story/25/01/17/1658230/microsoft-research-ai-systems-cannot-be-made-fully-secure?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Microsoft Research: AI Systems Cannot Be Made Fully Secure Feedly Summary: AI Summary and Description: Yes Summary: A recent study by Microsoft researchers highlights the inherent security vulnerabilities of AI systems, particularly large language models (LLMs). Despite defensive measures, the researchers assert that AI products will remain susceptible to…