"DARPA suggests turning old C Code automatically into Rust-using AI, of course."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  

Content and Source:  Via https://feedly.com.   https://feedly.com/i/collection/content/user/f401222a-bca6-4c45-9cc1-183f239e8d86/category/7737d3c9-5fe2-4b34-8708-85e57085f895

Please scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Security News Bundle

17

Most popular

DARPA suggests turning old C code automatically into Rust – using AI, of course

100+The Register – Security / 1d

Who wants to make a TRACTOR pull request? To accelerate the transition to memory safe programming languages, the US Defense Advanced Research Projects Agency (DARPA) is driving the development of TRACTOR, a programmatic code conversion vehicle.…

Hackers attempt to sell the personal data of 3 billion people resulting from an April data breach

Security Affairs / 1h

Jerico Pictures Inc., operating as National Public Data, exposed the personal information of nearly 3 billion individuals in an April data breach. A proposed class action claims that Jerico Pictures Inc., operating with the National Public Data, exposed the personal information of nearly 3 billion individuals in a data breach that occurred in April. On April 8, a threat actor that uses the monike

DOJ and FTC Sue TikTok for Violating Children's Privacy Laws

US sues TikTok for child privacy

•

90The Hacker News / 1d

The U.S. Department of Justice (DoJ), along with the Federal Trade Commission (FTC), filed a lawsuit against popular video-sharing platform TikTok for "flagrantly violating" children's privacy laws in the country. The agencies claimed the company knowingly permitted children to create TikTok accounts and to view and share short-form videos and messages with adults and others on the service. They

Yesterday

Security Affairs Malware Newsletter – Round 5

Security Affairs / 4h

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Unplugging PlugX: Sinkholing the PlugX USB worm botnet Introducing Gh0stGambit: A Dropper for Deploying Gh0st RAT Mandrake spyware sneaks onto Google Play again, flying under the radar for two years A Survey of Malware Detection Using Deep Learning ThreatLabz 2024

Security Affairs newsletter Round 483 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs / 4h

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. US sued TikTok and ByteDance for violating children’s privacy laws Russia-linked APT used a car for sale as a phishing lure to target diplomats with HeadL

Bringing Security Back into Balance

Trend Micro Research, News and Perspecti... / 7h

This article by Trend Micro CEO Eva Chen brings focus back to striking the cybersecurity strategies balance between business C-suite and information technology (IT) departments.

US sued TikTok and ByteDance for violating children’s privacy laws

US sues TikTok for child privacy

•

Security Affairs / 15h

The U.S. Department of Justice has sued TikTok and its parent company, ByteDance, for extensive violations of children’s privacy laws. The Justice Department and the Federal Trade Commission (FTC) filed a civil lawsuit in the U.S. District Court for the Central District of California against TikTok Inc., its parent company ByteDance Ltd., and their affiliates (together, TikTok) for extensive viol

Linux kernel impacted by new SLUBStick cross-cache attack

90BleepingComputer / 17h

A novel Linux Kernel cross-cache attack named SLUBStick has a 99% success in converting a limited heap vulnerability into an arbitrary memory read-and-write capability, letting the researchers elevate privileges or escape containers. [...]

Hackers breach ISP to poison software updates with malware

7 TTPs

•

100+BleepingComputer / 17h

•

Chinese hackers compromise ISP for malware

A Chinese hacking group tracked as StormBamboo has compromised an undisclosed internet service provider (ISP) to poison automatic software updates with malware. [...]

CISA Names Lisa Einstein as First Chief AI Officer

AI pilot for vulnerability detection

•

SecurityWeek / 20h

Einstein has led CISA’s AI efforts since 2023 as CISA’s Senior Advisor for AI. The post appeared first on SecurityWeek .

Russia-linked APT used a car for sale as a phishing lure to target diplomats with HeadLace malware

IoC > 1 domain

•

Security Affairs / 22h

•

15 TTPs

•

APT28 targets diplomats with HeadLace

A Russia-linked APT used a car for sale as a phishing lure to deliver a modular Windows backdoor called HeadLace. Palo Alto researchers reported that a Russia-linked threat actor known as Fighting Ursa (also identified as APT28 , Fancy Bear , or Sofacy ) used a fake car advertisement to distribute HeadLace backdoor malware, targeting diplomats. The campaign began around March 2024, the attackers

This 11-in-1 docking station instantly decluttered my desk and is 44% off

ZDNet | Security / 1d

The Baseus Spacemate docking station features a unique upright design that frees up precious desk space and has all the ports.

One of the longest-lasting sports watches I've tested is also the most gorgeous

ZDNet | Security / 1d

Suunto's latest Race sports watch has a brilliant AMOLED display and all the fitness metrics you could ask for.

The most immersive speaker system I've ever tested isn't from Bose or Polk

ZDNet | Security / 1d

With the ability to connect to three devices simultaneously and its robust EQ settings, the SteelSeries Arena 9 is an excellent choice for multi-use media spaces.

10 tiny tools and gadgets I keep on my keychain (and why they're so useful)

20ZDNet | Security / 1d

These handy gadgets make useful gifts for dads or grads. If your loved one likes to be prepared for anything, you can't go wrong with these EDC essentials.

Have an old Kindle? Here's how to add books - and one thing you should never do

ZDNet | Security / 1d

Doing this thing can render your vintage Kindle unusable. If you're trying to figure out how to add new books to old Kindles, this guide can help.

Aug 2, 2024

Hackers Exploit Misconfigured Jupyter Notebooks with Repurposed Minecraft DDoS Tool

6 TTPs

•

58The Hacker News / 1d

•

New DDoS attack targets Jupyter Notebooks

Cybersecurity researchers have disclosed details of a new distributed denial-of-service (DDoS) attack campaign targeting misconfigured Jupyter Notebooks. The activity, codenamed Panamorfi by cloud security firm Aqua, utilizes a Java-based tool called mineping to launch a TCP flood DDoS attack. Mineping is a DDoS package designed for Minecraft game servers. Attack chains entail the exploitation

End of feed