Cloud Security Alliance News Clipping Site

Tag: exploit

  • Slashdot: The US Patent and Trademark Office Banned Staff From Using Generative AI

    —

    by

    system automation
    in

    Source URL: https://yro.slashdot.org/story/24/11/19/1648219/the-us-patent-and-trademark-office-banned-staff-from-using-generative-ai?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: The US Patent and Trademark Office Banned Staff From Using Generative AI Feedly Summary: AI Summary and Description: Yes **Summary:** The US Patent and Trademark Office (USPTO) has imposed a ban on the use of generative artificial intelligence due to security concerns and risks associated with bias and unpredictability.…

  • The Register: Palo Alto Networks tackles firewall-busting zero-days with critical patches

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/19/palo_alto_networks_patches/ Source: The Register Title: Palo Alto Networks tackles firewall-busting zero-days with critical patches Feedly Summary: Amazing that these two bugs got into a production appliance, say researchers Palo Alto Networks (PAN) finally released a CVE identifier and patch for the zero-day exploit that caused such a fuss last week.… AI Summary and…

  • The Register: Crook breaks into AI biz, points $250K wire payment at their own account

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/19/ilearningengines_bec_scam/ Source: The Register Title: Crook breaks into AI biz, points $250K wire payment at their own account Feedly Summary: Fastidious attacker then tidied up email trail behind them A Maryland AI company has confirmed to the Securities and Exchange Commission (SEC) that it lost $250,000 to a misdirected wire payment.… AI Summary…

  • The Register: Europe looks Russia’s way after Baltic Sea data cables severed

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/19/baltic_sea_cables_cut/ Source: The Register Title: Europe looks Russia’s way after Baltic Sea data cables severed Feedly Summary: Probe continues into disruption affecting Germany, Sweden, Finland, Lithuania Two optical fiber internet cables under the Baltic Sea appear to have been disrupted, Germany and Finland confirmed, prompting fresh concerns over possible Russian interference with technology…

  • The Register: iOS 18 added secret and smart security feature that reboots iThings after three days

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/19/ios_18_secret_reboot/ Source: The Register Title: iOS 18 added secret and smart security feature that reboots iThings after three days Feedly Summary: Security researcher’s reverse engineering effort reveals undocumented reboot timer that will make life harder for attackers Apple’s latest mobile operating system, iOS 18, appears to have added an undocumented security feature that…

  • Slashdot: HarperCollins Confirms It Has a Deal to Sell Authors’ Work to AI Company

    —

    by

    system automation
    in

    Source URL: https://slashdot.org/story/24/11/18/2142209/harpercollins-confirms-it-has-a-deal-to-sell-authors-work-to-ai-company?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: HarperCollins Confirms It Has a Deal to Sell Authors’ Work to AI Company Feedly Summary: AI Summary and Description: Yes Summary: HarperCollins has initiated a controversial partnership with an AI technology firm, allowing limited use of select nonfiction titles for training AI models. Authors can opt in for a…

  • The Register: Critical 9.8-rated VMware vCenter RCE bug exploited after patch fumble

    —

    by

    system automation
    in

    Source URL: https://www.theregister.com/2024/11/18/vmware_vcenter_rce_exploited/ Source: The Register Title: Critical 9.8-rated VMware vCenter RCE bug exploited after patch fumble Feedly Summary: If you didn’t fix this a month ago, your to-do list probably needs a reshuffle Two VMware vCenter server bugs, including a critical heap-overflow vulnerability that leads to remote code execution (RCE), have been exploited in…

  • Alerts: CISA Adds Three Known Exploited Vulnerabilities to Catalog

    —

    by

    system automation
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2024/11/18/cisa-adds-three-known-exploited-vulnerabilities-catalog Source: Alerts Title: CISA Adds Three Known Exploited Vulnerabilities to Catalog Feedly Summary: CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability CVE-2024-9474 Palo Alto Networks PAN-OS…

  • Rekt: Polter Finance

    —

    by

    system automation
    in

    Source URL: https://www.rekt.news/polter-finance-rekt Source: Rekt Title: Polter Finance Feedly Summary: After losing roughly $8.7 million to a textbook case of oracle manipulation, Polter Finance is scrambling to clean up the mess. Their unaudited protocol left key vulnerabilities wide open, and now they’re facing the fallout. Another day, another lesson in DeFi’s recklessness. AI Summary and…

  • Slashdot: Belgian Region Trials Web Founder’s Data Privacy System

    —

    by

    system automation
    in

    Source URL: https://yro.slashdot.org/story/24/11/18/1654250/belgian-region-trials-web-founders-data-privacy-system?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Belgian Region Trials Web Founder’s Data Privacy System Feedly Summary: AI Summary and Description: Yes Summary: The initiative in Flanders to implement personal data “pods” represents a significant shift towards user-controlled data privacy, emphasizing compliance with European privacy regulations. This project, inspired by Tim Berners-Lee, seeks to empower individuals…