The S in LLM stands for Security OpenAI’s ChatGPT crawler appears to be willing to initiate distributed denial of service (DDoS) attacks on arbitrary websites, a reported vulnerability the tech giant has yet to acknowledge.… This article has been indexed…
Category: The Register – Security
FCC to telcos: By law you must secure your networks from foreign spies. Get on it
Plus: Uncle Sam is cross with this one Chinese biz over Salt Typhoon mega-snooping Decades-old legislation requiring American telcos to lock down their systems to prevent foreign snoops from intercepting communications isn’t mere decoration on the pages of law books…
FCC to telcos: Did you know you must by law secure your networks from foreign spies?
Plus: Uncle Sam is cross with this one Chinese biz over Salt Typhoon mega-snooping Decades-old legislation requiring American telcos to lock down their systems to prevent foreign snoops from intercepting communications isn’t mere decoration on the pages of law books…
FCC to telcos: Did you know by law you must secure your networks from foreign spies?
Plus: Uncle Sam is cross with this one Chinese biz over Salt Typhoon mega-snooping Decades-old legislation requiring American telcos to lock down their systems to prevent foreign snoops from intercepting communications isn’t mere decoration on the pages of law books…
Biden signs sweeping cybersecurity order, just in time for Trump to gut it
Ransomware, AI, secure software, digital IDs – there’s something for everyone in the presidential directive Analysis Joe Biden, in the final days of his US presidency, issued another cybersecurity order that is nearly as vast in scope as it is…
Fortinet: FortiGate config leaks are genuine but misleading
Competition hots up with Ivanti over who can have the worst start to a year Fortinet has confirmed that previous analyses of records leaked by the Belsen Group are indeed genuine FortiGate configs stolen during a zero-day raid in 2022.……
Clock ticking for TikTok as US Supreme Court upholds ban
With Biden reportedly planning to skirt enforcement and kick the can to Trump, this saga might still not be over The US Supreme Court has upheld a law requiring TikTok to either divest from its Chinese parent company ByteDance or…
Six vulnerabilities in ubiquitous rsync tool announced and fixed in a day
Turns out tool does both file transfers and security fixes fast Don’t panic. Yes, there were a bunch of CVEs affecting potentially hundreds of thousands of users found in rsync in early December – and made public on Tuesday –…
Medusa ransomware group claims attack on UK’s Gateshead Council
Pastes allegedly stolen documents on leak site with £600K demand Another year and yet another UK local authority has been pwned by a ransomware crew. This time it’s Gateshead Council in North East England at the hands of the Medusa…
Microsoft eggheads say AI can never be made secure – after testing Redmond’s own products
If you want a picture of the future, imagine your infosec team stamping on software forever Microsoft brainiacs who probed the security of more than 100 of the software giant’s own generative AI products came away with a sobering message:…
Just as your LLM once again goes off the rails, Cisco, Nvidia are at the door smiling
Some of you have apparently already botched chatbots or allowed ‘shadow AI’ to creep in Cisco and Nvidia have both recognized that as useful as today’s AI may be, the technology can be equally unsafe and/or unreliable – and have…
GM parks claims that driver location data was given to insurers, pushing up premiums
We’ll defo ask for permission next time, automaker tells FTC General Motors on Thursday said that it has reached a settlement with the FTC “to address privacy concerns about our now-discontinued Smart Driver program.”… This article has been indexed from…
GM parks claims that driver location data was shared to insurers, pushed up premiums
We’ll defo ask for permission next time, automaker tells FTC General Motors on Thursday said that it has reached a settlement with the FTC “to address privacy concerns about our now-discontinued Smart Driver program.”… This article has been indexed from…
Russia’s Star Blizzard phishing crew caught targeting WhatsApp accounts
FSB cyberspies venture into a new app for espionage, Microsoft says Star Blizzard, a prolific phishing crew backed by the Russian Federal Security Service (FSB), conducted a new campaign aiming to compromise WhatsApp accounts and gain access to their messages…
Enzo Biochem settles lawsuit over 2023 ransomware attack for $7.5M
That’s in addition to the $4.5M fine paid to three state AGs last year Enzo Biochem has settled a consolidated class-action lawsuit relating to its 2023 ransomware incident for $7.5 million.… This article has been indexed from The Register –…
Cybersecurity rethink – from reaction to resilience
Proactive strategies for data security and identity management in 2025 Webinar Are you tired of constant firefighting in the ever-changing cybersecurity landscape?… This article has been indexed from The Register – Security Read the original article: Cybersecurity rethink – from…
Raspberry Pi hands out prizes to all in the RP2350 Hacking Challenge
Power-induced glitches, lasers, and electromagnetic fields are all tools of the trade Raspberry Pi has given out prizes for extracting a secret value from the one-time-programmable (OTP) memory of the Raspberry Pi RP2350 microcontroller – awarding a pile of cash…
Infoseccer: Private security biz let guard down, exposed 120K+ files
Assist Security’s client list includes fashion icons, critical infrastructure orgs A London-based private security company allegedly left more than 120,000 files available online via an unsecured server, an infoseccer told The Register.… This article has been indexed from The Register…
GoDaddy slapped with wet lettuce for years of lax security and ‘several major breaches’
Watchdog alleged it had no SIEM or MFA, orders rapid adoption of basic infosec tools GoDaddy has failed to protect its web-hosting platform with even basic infosec tools and practices since 2018, according to the FTC, but the internet giant…
DJI loosens flight restrictions, decides to trust operators to follow FAA rules
Right after one of its drones crashed into an aircraft fighting California wildfires? Great timing Drone maker DJI has decided to scale back its geofencing restrictions, meaning its software won’t automatically stop operators from flying into areas flagged as no-fly…