> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
As LLMs and diffusion models power more applications, their safety alignment becomes critical.
The post A one-prompt attack that breaks LLM safety alignment appeared first on Microsoft Security Blog.
Your creative work is sensitive data. Find out how to stop AI art scraping with simple tips that protect your work from unauthorized use.
Rsync est un outil de synchronisation de données autant polyvalent que performant, très largement utilisé sur les machines Linux, y compris pour la sauvegarde.
Le post Maîtriser Rsync sous Linux : le guide complet de la synchronisation de données a été publié sur IT-Connect.
The Cyber Security Agency (CSA) of Singapore on Monday revealed that the China-nexus cyber espionage group known as UNC3886 targeted its telecommunications sector.
"UNC3886 had launched a deliberate, targeted, and well-planned campaign against Singapore's telecommunications sector," CSA said. "All f...
From recovering deleted iPhone SMS in a murder case to building tools that make SQLite and WAL analysis intuitive, James Eichbaum shares why examiners must understand—not just extract—application data.
Internal files describe a training platform as part of a large integrated system designed to allow attackers to practice hacking replicas of “the real network environments” of China’s “main operational opponents in the South China Sea and Indochina directions.”
More than half-a-million people who bought access to phone surveillance and social media snooping apps had their email address and partial payment card numbers published online.
Your biometric data is deeply personal, making it valuable to advertisers and scammers: Find out how to protect it.
(This appeared as an op-ed published Friday, Feb. 6 in the Daily Journal, a California legal newspaper.)
Section 230, “the 26 words that created the internet,” was enacted 30 years ago this week. It was no rush-job—rather, it was the result of wise legislative deliberation and foresight, and it rema...
(This appeared as an op-ed published Friday, Feb. 6 in the Daily Journal, a California legal newspaper.)
Section 230, “the 26 words that created the internet,” was enacted 30 years ago this week. It was no rush-job—rather, it was the result of wise legislative deliberation and foresight, and it rema...
A path traversal vulnerability was discovered in usbmuxd, a multiplexor daemon used to coordinate USB connections from and to Apple devices (iPhone, iPad, iPod). Exploiting this vulnerability enables an unprivileged user to create and delete files named `*.plist` (and, in some cases, arbitrarily nam...
Two Connecticut men face federal charges for a $3m scheme targeting online gambling platforms
LayerX researchers say that a security in Anthropic's Claude Desktop Extensions can be exploited to allow threat actors to place a RCE vulnerability into Google Calendar, the latest report to highlight the risks that come with giving AI models with full system privileges unfettered access to sensit...
VoidLink, a Linux-based C2 framework, facilitates credential theft, data exfiltration across clouds
SmarterTools, the company behind the popular Microsoft Exchange alternative SmarterMail, has been breached by a ransomware-wielding group that leveraged a recently fixed vulnerability in that solution. How did the SmarterTools breach happen? Derek Curtis, the firm’s Chief Operating Officer, said tha...
A security researcher found an exposed database belonging to the Chat & Ask AI app, once again traced back to a Firebase misconfiguration.
Noname vise les JO d’hiver en Italie par DDoS, impacts limités mais stratégie pro-Kremlin axée sur le récit....
Attackers don't need AI to crack passwords, they build targeted wordlists from an organization's own public language. This article explains how tools like CeWL turn websites into high-success password guesses and why complexity rules alone fall short. [...]
Learn about how ClawSec, by Prompt Security, secures OpenClaw agents, stopping malicious skills with zero-trust defenses.
Staff data belonging to the regulator and judiciary's governing body accessed The Dutch Data Protection Authority (AP) says it was one of the many organizations popped when attackers raced to exploit recent Ivanti vulnerabilities as zero-days.…