SecurityWeek Briefing

"Homeland Security Department releases framework for using AI in critical infrastructures."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 15 November 2024, 2301 UTC.

Content and Source:  Email subscription via https://feedly.com.

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

 

SecurityWeek

81K followers48 articles per week#security#tech

10

TODAY

Homeland Security Department Releases Framework for Using AI in Critical Infrastructure

DHS releases AI framework for infrastructure

•

by Associated Press / 2h

The framework recommends that AI developers evaluate potentially dangerous capabilities in their products, ensure their products align with “human-centric values” and protect users’ privacy. The post appeared first on SecurityWeek .

SurePath AI Raises $5.2 Million for Gen-AI Governance Solution

SurePath AI raises 5.2M$ funding

•

by Eduard Kovacs / 9h

SurePath AI has raised $5.2 million in seed funding for a solution that helps enterprises securely use generative AI. The post appeared first on SecurityWeek .

Glove Stealer Malware Bypasses Chrome’s App-Bound Encryption

Glove Stealer bypasses Chrome encryption

•

by Ionut Arghire / 9h

The Glove Stealer malware leverages a recently disclosed App-Bound encryption bypass method in attacks. The post appeared first on SecurityWeek .

In Other News: TSA Wants New Cyber Rules, Scam Call Detection in Android, SIM Swappers Arrested

by SecurityWeek News / 9h

Noteworthy stories that might have slipped under the radar: TSA proposes new cyber rules for pipelines and railroads, Google adds scam call detection to Android, SIM swappers arrested in US. The post appeared first on SecurityWeek .

Known Brand, Government Domains Hijacked via Sitting Ducks Attacks

DNS misconfigurations expose domains to hijacking

•

by Ionut Arghire / 11h

Threat actors have hijacked over 70,000 domains, including known brands and government entities, because of failed domain ownership verification. The post appeared first on SecurityWeek .

Man Who Stole and Laundered Roughly $1B in Bitcoin Is Sentenced to 5 Years in Prison

Ilya Lichtenstein sentenced for Bitfinex hack

•

by Associated Press / 11h

Bitfinex hacker Ilya Lichtenstein, who stole bitcoin worth billions of dollars at current prices, has been sentenced to five years in prison. The post appeared first on SecurityWeek .

CISA Warns of Two More Palo Alto Expedition Flaws Exploited in Attacks

by Eduard Kovacs / 11h

CISA has added two more Palo Alto Networks Expedition flaws, CVE-2024-9463 and CVE-2024-9465, to its KEV catalog. The post appeared first on SecurityWeek .

Critical Plugin Flaw Exposed 4 Million WordPress Websites to Takeover

by Ionut Arghire / 12h

Over 4 million WordPress websites were impacted by a critical Really Simple Security plugin vulnerability providing full administrative access. The post appeared first on SecurityWeek .

Palo Alto Networks Confirms New Firewall Zero-Day Exploitation

2 TTPs

•

by Eduard Kovacs / 12h

•

CISA warns of critical Palo Alto vulnerability

Palo Alto Networks has confirmed that a zero-day is being exploited in attacks after investigating claims of a firewall remote code execution flaw. The post appeared first on SecurityWeek .

YESTERDAY

LightSpy Spyware Operation Expands to Windows

5 TTPs

•

by Ionut Arghire / 13h

The Chinese APT behind the LightSpy iOS backdoor has expanded its toolset with DeepData, a modular Windows-based surveillance framework. The post appeared first on SecurityWeek .

END OF FEED