Collaborate Disseminate
Where the shiny new FOMO object collides with insider-threat reality AI agents arrived in Davos this week with the question of how to secure them – and prevent agents from becoming the ultimate insider threat – taking center stage during a panel discus… Continue reading Davos discussion mulls how to keep AI agents from running wild
Phishing campaign tries to reel in master passwords updated Password managers make great targets for attackers because they can hold many of the keys to your kingdom. Now, LastPass has warned customers about phishing emails claiming that action is req… Continue reading Don’t click on the LastPass ‘create backup’ link – it’s a scam
Have I Been Pwned reckons 72.7M customer accounts affected, sportswear firm remains silent Have I Been Pwned (HIBP) says 72.7 million accounts registered with Under Armour were affected by an alleged ransomware attack in November.… Continue reading Everest ransomware gang said to be sitting on mountain of Under Armour data
Still dominant in Germany’s networks, among others The European Commission (EC) wants a revised Cybersecurity Act to address any threats posed by IT and telecoms kit from third-country sources, potentially forcing member states to confront the thorny i… Continue reading EU considers whether there’s Huawei of axing Chinese kit from networks within 3 years
Its very own Snooper’s Charter comes a month after proposed biometric tech expansion The Irish government is planning to bolster its police’s ability to intercept communications, including encrypted messages, and provide a legal basis for spyware use.…… Continue reading Ireland wants to give its cops spyware, ability to crack encrypted messages
Minister unwraps ambassadors of the Software Security Code of Practice Britain’s digital economy minister has sent forth a raft of companies as “ambassadors” to help organizations across the land embrace the UK’s Software Security Code of Practice.… Continue reading Best of British: UK’s infosec envoys include Cisco, Palo Alto, and Accenture
Maintainer hopes hackers send bug reports anyway, will keep shaming ‘silly’ ones The maintainer of popular open-source data transfer tool cURL has ended the project’s bug bounty program after maintainers struggled to assess a flood of AI-generated cont… Continue reading Curl shutters bug bounty program to remove incentive for submitting AI slop
ACME validation had a challenge-request hole Cloudflare has fixed a flaw in its web application firewall (WAF) that allowed attackers to bypass security rules and directly access origin servers, which could lead to data theft or full server takeover.… Continue reading Cloudflare whacks WAF bypass bug that opened side door for attackers
AI + skilled malware developers = security threat VoidLink, the newly spotted Linux malware that targets victims’ clouds with 37 evil plugins, was generated “almost entirely by artificial intelligence” and likely developed by just one person, according… Continue reading Remember VoidLink, the cloud-targeting Linux malware? An AI agent wrote it
Update Chainlit to the latest version ASAP Two “easy-to-exploit” vulnerabilities in the popular open-source AI framework Chainlit put major enterprises’ cloud environments at risk of leaking data or even full takeover, according to cyber-threat exposur… Continue reading AI framework flaws put enterprise clouds at risk of takeover