"The CyberWire:  Exposing AI's Achilles heel."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 25 November 2024, 0003 UTC.

Content and Source:  https://thecyberwire.com.

Please check link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

 

The CyberWire

11

Nov 22, 2024

Exposing AI's Achilles heel.

The CyberWire / 1d

This week, we are joined by Ami Luttwak, Co-Founder and CTO from Wiz, sharing their work on "Wiz Research Finds Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs, Including Over 35 percent of Cloud Environments." A critical vulnerability in the NVIDIA Container Toolkit, widely used for GPU access in AI workloads, could allow attackers to escape containers and gain full access

Palo Alto Networks warns of PAN-OS zero-day exploitation.

Palo Alto warns of PAN-OS exploits

•

The CyberWire / 1d

LIMINAL PANDA targets telecoms. DeepData malware framework exploits Fortinet zero-day. Finastra is reportedly investigating a breach.

A not so BASIC farewell.

The CyberWire / 2d

META details its efforts against pig butchering. The Salt Typhoon attack on major U.S. telecoms sparks interest from Congress. Microsoft dismantles 240 domains linked to the ONNX phishing-as-a-service platform. A major U.S. gambling and lottery provider suffers a cyberattack. Hackers exploit newly patched zero-days in Palo Alto Networks firewalls. Researchers say Fortinet VPN servers lack sufficie

Meta takes down millions of accounts linked to pig-butchering scams.

The CyberWire / 2d

Microsoft seizes hundreds of phishing domains. Russian cyberespionage campaign targets former Soviet states.

Nov 21, 2024

No more spinach for PopeyeTools.

The CyberWire / 3d

The feds take down the PopeyeTools cybercrime market. Five alleged Scattered Spider members have been charged. CISA warns of critical vulnerabilities in VMware’s vCenter Server. Global AI experts convene to discuss safety. MITRE updates its list of Top 25 Most Dangerous Software Weaknesses. US and Australian agencies warn critical infrastructure organizations about evolving tactics by the BianLian

Biden administration holds final talks with Xi Jinping. A bipartisan coalition of attorney generals pushes Congress to pass KOSA.

The CyberWire / 3d

US charges five alleged Scattered Spider members.

The CyberWire / 3d

VMware vCenter Server flaws are being actively exploited. China-aligned threat actor deploys new Linux malware.

CertByte: CompTIA® Security+

The CyberWire / 3d

On this edition of CertByte, we discuss a question from N2K’s CompTIA® Security+ practice test. As your news-to-knowledge partner, N2K will advance your career while bringing you the industry news and trends that help you stay a step ahead. Through our bi-weekly episodes of CertByte on the CyberWire Daily podcast, and these companion articles, we aim to support your certification journey and fast-

Nov 20, 2024

Bridging AI and Cybersecurity Gaps with Mileva Security Labs’ Harriet Farlow

The CyberWire / 3d

Join us in this episode of Threat Vector as guest host Michael Heller shares his conversation with Harriet Farlow, CEO of Mileva Security Labs and a pioneer in AI security research. With a background spanning AI and national cybersecurity, Harriet shares her journey into adversarial machine learning and the critical importance of addressing AI security vulnerabilities. They discuss how AI models a

Granny’s got a new trick.

The CyberWire / 3d

On Hacking Humans, Dave Bittner, Joe Carrigan, and Maria Varmazis (also host of N2K's daily space podcast, T-Minus), are once again sharing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines to help our audience become aware of what is out there. This week, Joe shares a note from listener Michael before getting into stories, and Michael writes

Can regulations keep up with rapid innovation?

The CyberWire / 3d

This week, Danny Allan, Snyk's CTO, discusses how AI regulations are influencing both the security of AI tools and the broader software ecosystem and the emphasis on compliance with security standards. This comes on the heels of a recent report which found that the majority of security leaders have begun contemplating banning the use of AI in coding due its security risks. Ben dives into policy ch

End of feed