"Microsoft releases PyRIT-A Red Teaming Tool for Generative AI."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 23 February 2024, 1402 UTC.

Content and Source:  https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895 ("Security News Bundle").

Please scroll down to read your selections. Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security News Bundle

15

MOST POPULAR

Microsoft Releases PyRIT - A Red Teaming Tool for Generative AI

Microsoft releases PyRIT tool

•

25The Hacker News / 1h

Microsoft has released an open access automation framework called PyRIT (short for Python Risk Identification Tool) to proactively identify risks in generative artificial intelligence (AI) systems. The red teaming tool is designed to "enable every organization across the globe to innovate responsibly with the latest artificial intelligence advances," Ram Shankar Siva Kumar, AI red team

230k Individuals Impacted by Data Breach at Australian Telco Tangerine

Tangerine Telecom data breach affects 230

•

SecurityWeek / 1h

Tangerine Telecom says attackers stole the personal information of 230,000 individuals from a legacy customer database. The post appeared first on SecurityWeek .

Tips on meeting complex cloud security challenges

The Register – Security / 16min

Learn about the benefits of applying advanced automation to policy management practices Webinar Dealing with the double trouble of relentless cyber threats and regular technology refresh cycles can stretch already overworked security practitioners. And orchestrating the transition to cloud-native applications and multi-cloud architectures doesn't make things any easier.…

TODAY

Windows Photos gets AI magic eraser on Windows 10 and later

Windows 11 Photos app introduces Generative Eraser

•

BleepingComputer / 1h

Microsoft's Windows Photos app now has its own generative erase tool that enables users to replace unwanted objects with AI-generated content. [...]

‘SlashAndGrab’ ScreenConnect Vulnerability Widely Exploited for Malware Delivery

5 TTPs

•

SecurityWeek / 1h

•

CVE-2024-1709

ConnectWise ScreenConnect vulnerability tracked as CVE-2024-1709 and SlashAndGrab exploited to deliver ransomware and other malware. The post appeared first on SecurityWeek .

How to Use Tines's SOC Automation Capability Matrix

The Hacker News / 1h

Created by John Tuckner and the team at workflow and automation platform Tines, the SOC Automation Capability Matrix (SOC ACM) is a set of techniques designed to help security operations teams understand their automation capabilities and respond more effectively to incidents. A customizable, vendor-agnostic tool featuring lists of automation opportunities, it's been shared

New ScreenConnect RCE flaw exploited in ransomware attacks

6 TTPs

•

BleepingComputer / 1h

•

CVE-2024-1709

Attackers are exploiting a maximum severity authentication bypass vulnerability to breach unpatched ScreenConnect servers and deploy LockBit ransomware payloads on compromised networks. [...]

AT&T Says the Outage to Its US Cellphone Network Was Not Caused by a Cyberattack

AT&T restores nationwide cellphone service

•

SecurityWeek / 3h

AT&T said the hourslong outage to its U.S. cellphone network Thursday appeared to be the result of a technical error, not a malicious attack. The post appeared first on SecurityWeek .

Microsoft Releases Red Teaming Tool for Generative AI

Microsoft releases PyRIT tool

•

SecurityWeek / 3h

Microsoft releases PyRIT red teaming tool to help identify risks in generative AI through automation. The post appeared first on SecurityWeek .

YESTERDAY

MIWIC24: Plexal Alumni Receive Multiple Nominations From Peers at This Year’s Awards

IT Security Guru / 4h

Plexal work with some of the UK’s most exciting start-ups, entrepreneurs and scale-ups who are building emerging technologies and operating across multiple sectors. Plexal help build community, foster talent, and launch graduating companies and professionals into success. They work in conjunction with the government and industry to deliver programmes that support the next generation of promising

Cyber Mindfulness Corner Company Spotlight: Jamf

IT Security Guru / 4h

At the IT Security Guru we’re showcasing organisations that are passionate about making cybersecurity a healthier, more mindful industry. This week, Aaron Webb, Senior Product Marketing Manager at Jamf , spoke to the Gurus about how leaders can approach the burnout crisis in cybersecurity, what the future of the industry looks like if nothing changes, and why now is the time for change. How can b

UnitedHealth confirms Optum hack behind US healthcare billing outage

Change Healthcare faces cyberattack disruptions

•

36BleepingComputer / 4h

Healthcare giant UnitedHealth Group confirmed that its subsidiary Optum was forced to shut down IT systems and various services after a cyberattack by "nation-state" hackers on the Change Healthcare platform. [...]

Researchers Detail Apple's Recent Zero-Click Shortcuts Vulnerability

63The Hacker News / 7h

Details have emerged about a now-patched high-severity security flaw in Apple's Shortcuts app that could permit a shortcut to access sensitive information on the device without users' consent. The vulnerability, tracked as CVE-2024-23204 (CVSS score: 7.5), was addressed by Apple on January 22, 2024, with the release of iOS 17.3, iPadOS 17.3, macOS Sonoma 14.3, and

X protests forced suspension of accounts on orders of India's government

Elon Musk's X complies with Indian government

•

The Register – Security / 8h

Nonprofit SFLC links orders to farming protests The global government affairs team at X (née Twitter) has suspended some accounts and posts in India after receiving executive orders to do so from the country's government, backed by threat of penalties including significant fines and imprisonment.…

FTC Slams Avast with $16.5 Million Fine for Selling Users' Browsing Data

FTC fines Avast $16.5M

•

71The Hacker News / 10h

The U.S. Federal Trade Commission (FTC) has hit antivirus vendor Avast with a $16.5 million fine over charges that the firm sold users' browsing data to advertisers after claiming its products would block online tracking. In addition, the company has been banned from selling or licensing any web browsing data for advertising purposes. It will also have to notify users whose browsing data was

END OF FEED