> TODAY'S SUMMARY (6 articles)
Today's cybersecurity news highlights several critical developments. The ad industry is increasingly becoming a conduit for mercenary spyware, enabling data collection without user interaction. Additionally, concerns are rising around AI security, with reports indicating that TypeSafe's Jev model may be even more vulnerable to attacks than traditional large language models (LLMs). Meanwhile, the Fastfetch tool has undergone updates affecting how disk space is reported, possibly impacting system diagnostics. As AI continues to evolve, experts stress the importance of controlling its capabilities to mitigate risks effectively. Lastly, the cybersecurity community mourns the loss of Barry Steinhardt, a prominent advocate for digital privacy.
|
// AI-powered summary generated at 04:00
Outdated AV software significant problem when it comes to protecting patient records from malware
Webmaster allegedly hoovered up log-ins from sites he designed
John Oliver may have written off 2016, but we’re darn proud of all that we accomplished and contributed this year. We released a slew of the security tools that help us -and you- work smarter, and promoted a few more that deserved recognition. We helped the New York City InfoSec community build a fo...
Police bosses warn businesses of shifting trend
A cross-site scripting flaw in McDonald’s website could allow an attacker to steal and decrypt a password from a registered user.
We’re back with our promised second installment discussing control flow integrity. This time, we will talk about Microsoft’s implementation of control flow integrity. As a reminder, control flow integrity, or CFI, is an exploit mitigation technique that prevents bugs from turning into exploits. For...
Launches open source, generic and interoperable directory of public keys
Ransomware ruled out by UK’s largest NHS Trust
I think you’ll agree when I say: there’s no VPN option on the market designed with equal emphasis on security and ease of use. That changes now. Today we’re introducing Algo, a self-hosted personal VPN server designed for ease of deployment and security. Algo automatically deploys an on-demand VPN s...
EU agency looks to support manufacturers and other stakeholders
Poorly trained cops leave data downloads unencrypted and with no audit trail
CA discovers five-month-old domain validation bug
Those who use two-factor authentication (2FA) admit that they receive complaints about it from their users.
Japanese researchers raise biometric security fears
Experts finger same culprit as December 2015 attack
The audit program, based on the NIST Cybersecurity Framework, provides direction on cyber-governance.
Royal and Sun Alliance (RSA) has been fined £150,000 by the Information Commissioner’s Office following the loss of personal information relating to 59,592 customers
Move seems to validate last year’s report on widespread bugs but doesn’t fix larger problems
The ransom note features Robot Santa Claus from the TV show Futurama.
Joint Committee asks experts to pen written submissions