Technology

Updates

New report illuminates why OpenAI board said Altman “was not consistently candid”
Insider report details clash over one board member's criticism in an academic paper.
05-12-2023 21:31
Due to AI, “We are about to enter the era of mass spying,” says Bruce Schneier
Schneier: AI will enable a shift from observing actions to interpreting intentions, en masse.
05-12-2023 20:53
IBM, Meta form “AI Alliance” with 50 organizations to promote open source AI
What's the opposite of OpenAI? IBM and Meta devise plan that includes 50 members.
05-12-2023 17:03
New Synopsys Report Reveals Application Security Automation Soars
Today, Synopsys released BSIMM14, the latest iteration of its annual Building Security In Maturity Model (BSIMM) report. This comprehensive analysis delves into the software security practices of 130 organisations, encompassing leading companies across v
05-12-2023 14:17
Over 80% of IT Leaders Want to Move Their On-Prem PAM Solution to the Cloud
A new report by zero-trust and zero-knowledge cybersecurity software providers Keeper Security has found that over 80% of IT leaders (82%) want to move their on-premises Privilege Access Management (PAM) solution to the Cloud. The findings were outlined
05-12-2023 11:36
Centripetal Announces Partnership With Tiger to Provide Cybersecurity Innovation to the UK Market
Today, intelligence powered cybersecurity pros Centripetal have announced that their patented cybersecurity threat solution is available for the first time ever across the UK as a result of its strategic partnership with Tiger. Centripetal’s innovative t
05-12-2023 10:33
1960s chatbot ELIZA beat OpenAI’s GPT-3.5 in a recent Turing test study
AI chatbot deception paper suggests that some bots (and people) aren't very persuasive.
01-12-2023 21:27
Broadcom cuts at least 2,800 VMware jobs following $69 billion acquisition
Broadcom hasn't said how many people will be affected, or much of anything else.
01-12-2023 20:16
Google bins inactive accounts
Today marks the day when Google makes good on its new policy to reserve the right to delete inactive accounts after two years of inactivity. The company defines activity as “actions you take when you sign in or while you’re signed in to your Google Accou
01-12-2023 10:58
ChatGPT is one year old. Here’s how it changed the tech world.
Examining 365 days with OpenAI's bot: The good, the bad, the ugly—and the productive?
30-11-2023 17:01
Sam Altman officially back as OpenAI CEO: “We didn’t lose a single employee”
Altman forgives Sutskever; Microsoft will serve observer role on new OpenAI board.
30-11-2023 14:37
How Huawei made a cutting-edge chip in China and surprised the US
China's flagship smartphone maker pulled off the feat despite sanctions.
30-11-2023 14:37
2 municipal water facilities report falling to hackers in separate breaches
The facilities in Pennsylvania and Texas serve more than 2 million residents.
30-11-2023 00:42
Stable Diffusion XL Turbo can generate AI images as fast as you can type
Even at home, SDXL Turbo can create detailed images with startling speed.
29-11-2023 21:20
Amazon unleashes Q, an AI assistant for the workplace
Aimed at the office, Amazon Q can summarize docs and assist with programming tasks.
29-11-2023 17:13
Report: Apple and Goldman Sachs are breaking up over money-losing Apple Card
Goldman Sachs has lost billions of dollars on its consumer-focused businesses.
29-11-2023 16:40
ownCloud vulnerability with maximum 10 severity score comes under “mass” exploitation
Easy-to-exploit flaw can give hackers passwords and cryptographic keys to vulnerable servers.
29-11-2023 00:38
Mother plucker: Steel fingers guided by AI pluck weeds rapidly and autonomously
AI applications like the Ekobot may help the people and the environment.
28-11-2023 23:09
Hackers spent 2+ years looting secrets of chipmaker NXP before being detected
Chipmaker claims breach had no "material adverse effect."
28-11-2023 12:56
New “Stable Video Diffusion” AI model can animate any still image
Given GPU and patience, SVD can turn any image into a 2-second video clip.
27-11-2023 20:28
Amazon’s $195 thin clients are repurposed Fire TV Cubes
Amazon Workspaces Thin Client is a Fire TV Cube with different software.
27-11-2023 19:32
40% of Cybersecurity Departments Want More Budget to Upskill Employees
According to a new Cyber Security Insights Report by S-RM, in 2023, the average cyber budgets grew to USD 27.10 million, up 3.1% from USD 26.30 million in 2022. S-RM’s research shows that senior IT professionals and their c-suites had anticipated a more
24-11-2023 17:05
AI Receives £500 Million Funding in Finance Minister’s 2023 Autumn Statement
Jeremy Hunt, the Chancellor of the Exchequer for the UK, delivered his Autumn Statement of 2023 on November the 22nd to Parliament. In this statement, he outlined the government’s five economic priorities for the upcoming forecast period. These include r
24-11-2023 10:54
Half of Cybersecurity Professionals Kept Awake By Workload Worries
According to research by the Chartered Institute of Information Security (CIISec), cybersecurity professionals report that the industry is “booming”, but 22% of staff report to work unsafe hours. This research, revealed in the Security Profes
23-11-2023 14:44
Cyber Mindfulness Corner Company Spotlight: Pentest People
At the IT Security Guru we’re showcasing organisations that are passionate about making cybersecurity a healthier, more mindful industry. This week, Gemma Gilderdale, Head of People at Pentest People, spoke to the Gurus about Pentest People’s innov
23-11-2023 12:09
Hack The Box Launches 5th Annual University CTF Competition
22-11-2023 20:30
Fake Browser Updates Targeting Mac Systems With Infostealer
A pervasive ClearFake campaign targeting Windows systems with Atomic Stealer has expanded its social engineering scams to MacOS users, analysts warn.
22-11-2023 20:27
Kiteworks' Maytech Acquisition Reaffirms Commitment to UK Market
22-11-2023 20:26
Generative AI Takes on SIEM
IBM joins Crowdstrike and Microsoft is releasing AI models to cloud-native SIEM platforms.
22-11-2023 20:00
Web Shells Gain Sophistication for Stealth, Persistence
A favorite post-exploitation tool continues to gain sophistication, with one recent example adding disguised log-in pages, credential stealing, and information gathering via services such as VirusTotal.
22-11-2023 19:52
Qatar Cyber Agency Runs National Cyber Drills
Qatari organizations participate in cybersecurity exercises to hone their incident response plans and processes.
22-11-2023 19:41
Thousands of routers and cameras vulnerable to new 0-day attacks by hostile botnet
Internet scans show 7,000 devices may be vulnerable. The true number could be higher.
22-11-2023 19:35
Researchers Undermine 'Windows Hello' on Lenovo, Dell, Surface Pro PCs
Biometric security on PCs isn't quite as bulletproof as you might think, as the line between sensors and host computers can be tampered with.
22-11-2023 19:30
Mideast Oil & Gas Facilities Could Face Cyber-Related Energy Disruptions
The Israel-Gaza conflict could expose the region's oil and gas operations to renewed cyberattacks, with global ramifications.
22-11-2023 17:49
Equal Pay Day: Women, Cybersecurity, and Money
Let’s talk about women – and money. Today (22nd November 2023) marks the day that women effectively stop being paid for the year. Stop being paid against their male counterparts for the same work that they do – for the rest of the year. Yes, the rest of
22-11-2023 17:03
3 Ways to Stop Unauthorized Code From Running in Your Network
As organizations increasingly rely on AI-developed code, they must put guardrails in place to prevent major cybersecurity risks related to malicious code.
22-11-2023 17:00
Idaho National Nuclear Lab Targeted in Major Data Breach
The laboratory operates a major test reactor, tests advanced nuclear energy concepts, and conducts research involving hydrogen production and bioenergy.
22-11-2023 16:53
Scattered Spider Hops Nimbly From Cloud to On-Prem in Complex Attack
The actor behind the high-profile MGM incident jumps across segmentations in under an hour, in a ransomware attack spanning Okta, Citrix, Azure, SharePoint, and more.
22-11-2023 16:44
Rootkit Turns Kubernetes From Orchestration to Subversion
Kubernetes compromises have usually led to attackers creating cryptomining containers, but the outcomes could be much worse, say researchers presenting at the Black Hat Europe conference.
22-11-2023 16:15
Employees breaking security policies just dangerous as being hacked, Kaspersky global study shows
Employee violations of an organisation’s information security policies are as dangerous as external hacker attacks according to a recent study from Kaspersky. In the last two years, 26% of cyber incidents in businesses occurred due to employees intention
22-11-2023 15:48
The Persian Gulf's March to the Cloud Presents Global Opportunities
Loosening attitudes about cloud security are expected to create a nearly $10 billion public cloud market in the Middle East by 2027.
22-11-2023 15:00
Over Half of Organisations Are at Risk of Cyberattack Due to Exhausted and Stressed Staff
Today, new research from Adarma has revealed that organisations believe that they are at significant risk of cyberattacks due to stressed and exhausted staff. The report, entitled “A False Sense of Cybersecurity: How Feeling Safe Can Sabotage Your Busine
22-11-2023 12:14
USB worm unleashed by Russian state hackers spreads worldwide
LitterDrifter's means of self-propagation are simple. So why is it spreading so widely?
22-11-2023 00:02
The 7 Deadly Sins of Security Awareness Training
Stay away from using these tactics when trying to educate employees about risk.
21-11-2023 23:44
Citrix Bleed Bug Inflicts Mounting Wounds, CISA Warns
Patch or isolate now: Organizations in every sector run the risk of hemorrhaging data as opportunistic attacks from LockBit ransomware and others grow.
21-11-2023 22:10
AutoZone Files MOVEit Data Breach Notice With State of Maine
The company temporarily disabled the application and patched the vulnerability, though affected individuals should still remain vigilant.
21-11-2023 21:35
DPRK Hackers Masquerade as Tech Recruiters, Job Seekers
No one has turned the job market into an attack surface quite like North Korea, which plays both sides for financial gain and, possibly, espionage.
21-11-2023 20:55
Inside Job: Cyber Exec Admits to Hospital Hacks
Healthcare cyber services executive Vikas Singla admits to hobbling hospital operations, then using the incidents to try and gin up extra business.
21-11-2023 19:37
Major Saudi University to Offer AI, Cybersecurity Studies
University of Jeddah partners with Resecurity to teach cybersecurity skills.
21-11-2023 16:50
Kinsing Cyberattackers Target Apache ActiveMQ Flaw to Mine Crypto
Active exploit of the critical RCE flaw targets Linux systems to achieve full system compromise.
21-11-2023 16:30
Cato Networks Named SASE Leader, Again
Today, Cato Networks, announced its recognition as a Leader in both the Frost Radar™: Global SASE, 2023 by Frost & Sullivan and the Market Radar: SASE 2023 by Omdia. “Once again, Cato Networks and our cloud-native SASE platform have been recognised b
21-11-2023 16:19
Maximize Cybersecurity Returns: 5 Key Steps to Enhancing ROI
Cybersecurity isn't a one-time task. It's an ongoing effort that needs regular checks, updates, and teamwork.
21-11-2023 15:00
AI Helps Uncover Russian State-Sponsored Disinformation in Hungary
Researchers used machine learning to analyze Hungarian media reports and found Russian narratives soured the nation's perspective on EU sanctions and arms deliveries months before the Ukraine invasion.
21-11-2023 14:40
Lookout Alerts U.S. Employees and Businesses of Significant Phishing Threat This Week
This week, Lookout, Inc., is warning employees and businesses that phishing attacks across enterprise and personal devices are expected to more than double this week, based on historical data. With more corporate data residing in the cloud today and an i
21-11-2023 14:35
95% of OpenAI employees have threatened to quit in standoff with board
OpenAI's future hangs in the balance as staff says they'll join former CEO at Microsoft.
21-11-2023 14:19
Proof of Concept Exploit Publicly Available for Critical Windows SmartScreen Flaw
Threat actors were actively exploiting CVE-2023-36025 before Microsoft patched it in November.
21-11-2023 00:00
What Healthcare Cybersecurity Leaders Should Know About the FDA's Section 524B Guidelines
New cybersecurity regulations from the FDA outline specific steps that medical device companies must take in order to get their devices approved for market. 
20-11-2023 23:00
Lasso Security Emerges From Stealth With $6M Seed Funding for Gen AI and Advanced LLM Cybersecurity
20-11-2023 22:11
Malware Uses Trigonometry to Track Mouse Strokes
The latest LummaC2 infostealer version includes a novel anti-sandbox trick to avoid detonating when no human mouse movements are detected.
20-11-2023 22:01
GenAI Requires New, Intelligent Defenses
Understanding the risks of generative AI and the specific defenses to build to mitigate those risks is vital for effective business and public use of GenAI.
20-11-2023 22:00
Amid Military Buildup, China Deploys Mustang Panda in the Philippines
China pairs cyber and kinetic attacks in the South Pacific as it continues to wrangle control of the South China Sea.
20-11-2023 21:06
CISA Launches Pilot Program to Address Critical Infrastructure Threats
CISA expects to extend this program to include up to 100 critical infrastructure entities in its first year.
20-11-2023 20:10
Exploited Vulnerabilities Can Take Months to Make KEV List
The Known Exploited Vulnerabilities (KEV) catalog is a high-quality source of information on software flaws being exploited in the wild, but updates are often delayed, which means companies need other sources of threat intelligence.
20-11-2023 19:16
Enterprise Generative AI Enters Its Citizen Development Era
Business users are building Copilots and GPTs with enterprise data. What can security teams do about it?
20-11-2023 18:26
Saudi Arabia Arms Public Sector With Google Cloud Services
Chronicle CyberShield will be offered as a managed service with security monitoring and Mandiant incident response included.
20-11-2023 17:40
OpenAI employees revolt after board names new CEO; Altman may head to Microsoft
Ilya Sutskever announces regret; 700+ OpenAI employees sign letter asking board to resign.
20-11-2023 15:29
How the Evolving Role of the CISO Impacts Cybersecurity Startups
CISOs and vendors must work together to keep up with emerging threats and find solutions, says a group of CISOs and security entrepreneurs.
20-11-2023 15:00
LummaC2 Stealer’s New Anti-Sandbox Technique? Trigonometry
New research by Outpost24 has revealed that malware developers are using sandbox evasion techniques to avoid exposing malicious behaviour inside a sandbox where malware is analysed by security researches. Outpost24’s threat intelligence team, KrakenLabs,
20-11-2023 14:41
Recognising Scam Patterns and Preventing Data Loss: A Unified Approach
Cybersecurity professionals stand on the frontlines, ever-vigilant against an increasing tide of cyber threats. From protecting sensitive corporate data to safeguarding our personal information, the battle against cybercrime is ongoing. In today’s
20-11-2023 11:41
Understanding the UK government’s new cybersecurity regime, GovAssure
With the ever-growing threat of cyberattacks on the UK government and Critical National Infrastructure cyber safety matters more than ever. With the rising tide of ever-resent threat in mind, GovAssure was launched by the UK government in April 2023. It&
20-11-2023 11:18
Leveraging Sandbox and Threat Intelligence Feeds to Combat Cyber Threats
Combining a malware sandbox with threat intelligence feeds improves security detection, analysis, and response capabilities.
20-11-2023 08:00
A Detection and Response Benchmark Designed for the Cloud
Does your security operation center's performance meet the 5/5/5 benchmark for cloud threat detection and incident response?
20-11-2023 08:00
Sam Altman reportedly in talks for potential return as OpenAI CEO
Altman's unpopular firing may be undone—if a deal can be worked out.
19-11-2023 00:36
OpenAI board attempts to hit “Ctrl-Z” in talks with Altman to return as CEO
Cleared of malfeasance, Altman's unpopular firing may be undone—if he's interested.
19-11-2023 00:36
The FCC says new rules will curb SIM swapping. I’m pessimistic
SIM swaps and port-out scams are a fact of life. New rules aren't likely to change that.
18-11-2023 18:38
Details emerge of surprise board coup that ousted CEO Sam Altman at OpenAI
Microsoft CEO "furious"; OpenAI President and 3 researchers resign. COO says "No malfeasance."
18-11-2023 14:24
OpenAI President Greg Brockman quits as shocked employees hold all-hands meeting
Details emerge in Sam Altman firing, which blindsided Microsoft and investors.
18-11-2023 00:31
Hackers Weaponize SEC Disclosure Rules Against Corporate Targets
Ransomware group BlackCat/ALPHV files SEC complaint against its latest victim, putting an audacious new twist on cyber extortion tactics.
17-11-2023 22:35
VicOne and Block Harbor Deliver Integrated Workflow-Based Cybersecurity System
17-11-2023 22:00
CompTIA Advises Retailers to Check their Cybersecurity Preparedness Ahead of the Holiday Shopping Season
17-11-2023 21:56
British Library Confirms Ransomware Attack Caused Outages
The library said that it expects many of its services to be restored in the forthcoming weeks.
17-11-2023 21:49
Scattered Spider Casino Hackers Evade Arrest in Plain Sight
The feds seem to know all about the hacking group brazenly breaking into corporate networks; so why are enterprise teams left on their own to stop their cybercrimes?
17-11-2023 20:00
Shadowy Hack-for-Hire Group Behind Sprawling Web of Global Cyberattacks
For several years operators at New Delhi-based Appin hacked into, spied on, and stole data from targets around the world for clients that included private investigators, government agencies, law enforcement, and others.
17-11-2023 19:13
Actions to Take to Defeat Initial Access Brokers
Initial access brokers (IAB) are often difficult to track. This Tech Tip spells out some countermeasures enterprises need to defend against stolen credentials.
17-11-2023 17:06
“Hallucinating” AI models help coin Cambridge Dictionary’s word of the year
Cambridge: "When an artificial intelligence hallucinates, it produces false information."
17-11-2023 17:01
Hands Off the Security Budget! Find Efficiencies to Reduce Risk
Security budgets will benefit from new priorities, streamlined responses rather than wholesale cost-cutting in light of cyberattacks and increased regulatory requirements.
17-11-2023 15:00
Can bcrypt Passwords Be Cracked?
Specops Software, an Outpost24 company, have released new research about bcrypt-passwords – and how easy (or not) they are to crack. This research follows previously released data on how long it takes attackers to brute force MD5 hashed user passwords wi
17-11-2023 14:49
Detection & Response That Scales: A 4-Pronged Approach
Building a resilient incident response team requires more than a simple combination of tools and on-call rotations.
17-11-2023 14:00
IT Pros Worry That Generative AI Will Be a Major Driver of Cybersecurity Threats
Organizations are concerned about generative AI technologies as being a major driver of cybersecurity threats in 2024.
17-11-2023 01:00
Ransomware group reports victim it breached to SEC regulators
Group tells SEC that the victim is in violation for not reporting it was hacked.
17-11-2023 00:03
“Make It Real” AI prototype wows devs by turning drawings into working software
Designer: "I think I need to go lie down."
16-11-2023 22:48
Dangerous Apache ActiveMQ Exploit Allows Stealthy EDR Bypass
There's no time to waste: For organizations on the fence about patching the critical bug in ActiveMQ, the new proof-of-concept exploit should push them towards action.
16-11-2023 22:45
Unauthorized “David Attenborough” AI clone narrates developer’s life, goes viral
"We observe the sophisticated Homo sapiens engaging in the ritual of hydration."
16-11-2023 21:45
'CacheWarp' AMD VM Bug Opens the Door to Privilege Escalation
Academics in Germany figured out how to reverse time in AMD virtualization environments, then reap the spoils.
16-11-2023 21:00
No Bing, no Edge, no upselling: De-crufted Windows 11 coming to Europe soon
Some changes will arrive for non-EU users, too, but not the easy removals.
16-11-2023 20:39
Consumer Software Security Assessment: Should We Follow NHTSA's Lead?
Vehicles are required to meet basic safety standards. Having similar requirements for software would give consumers greater control over their privacy and security.
16-11-2023 18:00
Unpatched Critical Vulnerabilities Open AI Models to Takeover
The security holes can allow server takeover, information theft, model poisoning, and more.
16-11-2023 17:47
The “Windows App” for Mac, iOS, and browsers is a fancy remote desktop, for now
Microsoft wants you in Windows, whether you're on iPad, Android, or Chrome OS.
16-11-2023 17:42
'Randstorm' Bug: Millions of Crypto Wallets Open to Theft
The security vulnerability in a component of a widely used JavaScript implementation of Bitcoin makes passwords guessable via brute-force attacks.
16-11-2023 17:40
Cybersecurity Investment Involves More Than Just Technology
Cybersecurity investment involves more than just buying security technologies — organizations are also looking at threat intelligence, risk assessment, cyber-insurance, and third-party risk management.
16-11-2023 17:00
source : arstechnica, darkreading, itsecurityguru


Ads