AI & ML
Artificial intelligence and machine learning news
Rust Package Backdoor Attack Targets Developers at Compile Time
Three compromised Rust packages exposed developers to backdoor malware during build processes, connecting the attack to North Korean cyber-activities.
Read report →Navigating AI Risks: A Pragmatic Approach for CISOs
CISOs face dual AI threats: internal misuse and external attacks. A risk-first mindset prioritizes critical vulnerabilities for effective defense.
Read report →Ransomware Evolution: Rethinking Cyber Resilience in Business
As ransomware tactics evolve, enterprises must prioritize operational resilience, third-party risk management, and AI governance to effectively combat threats.
Read report →JavaScript Sandbox Vulnerability Addressed Following Discovery in Isolated-vm Library
Isolated-vm, a widely used JavaScript library, has patched a serious vulnerability that could allow remote code execution, enhancing its security.
Read report →Citrix Urges Immediate Action to Address Critical Vulnerabilities in NetScaler Products
Citrix warns customers to urgently patch critical security vulnerabilities in NetScaler products, emphasizing swift action due to heightened threat risks.
Read report →Emerging Threat: Criminal AI Services Undermine Cybersecurity Protections
A new criminal AI service, Kriminal, leverages established models to provide risky capabilities at low prices, raising significant cybersecurity concerns.
Read report →Airlock Digital Achieves PROTECTED Level Assessment, Enhancing Security for Australian Organizations
Airlock Digital's recent IRAP assessment at the PROTECTED level bolsters its security credibility, essential for organizations managing sensitive data.
Read report →OpenAI Adjusts Scaling Strategy and Announces New Data Policies Amid Privacy Concerns
OpenAI has paused scaling efforts and introduced a zero data retention policy for select clients, aiming to bolster privacy and security measures.
Read report →Flaw in Snowflake's GitHub Actions Pipeline Debugged by AI Agent
An autonomous AI security tool revealed a vulnerability in Snowflake's GitHub Actions pipeline, exploiting a flaw detected during code review.
Read report →Rethinking Threat Modeling for AI: Quick Sessions Offer New Insights
Short, focused threat modeling sessions are transforming risk assessment for AI applications, helping companies identify critical vulnerabilities faster.
Read report →Microsoft Addresses Persistent Copilot Vulnerability, But Challenges Remain for Security Teams
Microsoft has patched a critical Copilot vulnerability after eight months, yet security experts warn of ongoing risks within AI systems.
Read report →New GitLab Flaw Exposes Repositories to Unauthorized Alterations
GitLab resolved a severe vulnerability allowing unauthorized modifications and deletions of repositories, with a second CSRF flaw also patched.
Read report →Data Quality: The Unsung Hero of Effective Security Operations
The quality of data in security operations centers significantly influences performance, proving more critical than the AI models used for automation.
Read report →Zhipu's GLM-5.3: Accelerated Cybersecurity Skills Challenge Competitors
Zhipu's new AI model GLM-5.3 shows notable advances in cybersecurity abilities, marking a significant step in the evolution of coding AI technologies.
Read report →New Malware Threat Targets macOS Users Through Browser Hijacking Tactics
AmnesiaStealer malware exploits fake downloads to hijack macOS browsers, posing a serious risk to user credentials and sensitive data.
Read report →The Evolving Role of the CISO: Anticipating 2029
CISOs will morph into strategic facilitators and business leaders by 2029, driving innovation while navigating increased risks from evolving technologies.
Read report →Understanding the Implications of Load Balancing in Multi-AZ Kubernetes Clusters
Explore the hidden costs of load balancing in multi-AZ Kubernetes deployments, from increased latency to unexpected expenses.
Read report →Practical Strategies for Designing Inclusive and Safe Technology
Learn actionable methods to ensure safety in tech design, focusing on mitigating risks and empowering vulnerable users.
Read report →Unlocking User Experience: The ORCA Methodology for Effective Design Collaboration
The ORCA methodology enhances user-focused design by clarifying object relationships, improving team alignment, and prioritizing user research.
Read report →Building Effective Content Models for Omnichannel Strategies
Creating semantic and interconnected content models enhances audience engagement across multiple digital channels, optimizing user experience and SEO.
Read report →