home.social

Search

104 results for “edwardk”

  1. ekiledjian @edwardk

    Large businesses’ cybersecurity insurance claims are now less frequent but more expensive

    Large businesses' cybersecurity insurance claims are now less frequent but more expensive, according to a new report covered by Cybersecurity Dive. AI-powered attacks and hidden supply-chain weaknesses are making insurers' work more difficult. cybersecuritydive.com/news/cyb

  2. ekiledjian @edwardk

    Trust Is Not What It Seems — And Fraudsters Are Counting on It

    Threat actors no longer need to rely on malware to breach organizations, Dark Reading reports; they are calling help desks and asking for access, with help from artificial intelligence. The piece examines how fraudsters exploit trust in help-desk processes. darkreading.com/cyber-risk/tru

  3. ekiledjian @edwardk

    Knicks sent employees fake offer of championship rings in phishing test: Report

    The New York Knicks sent employees a fake offer of championship rings as a phishing test, Ars Technica reports. Corporate phishing tests are common, but this one drew attention for the cruelty of its lure. arstechnica.com/tech-policy/20

  4. ekiledjian @edwardk

    Moonshot AI curbs hacking ability in Kimi K3.1 Pro model

    Moonshot AI said on Saturday that it has reduced the cyber-offensive capabilities of Kimi K3.1 Pro, its most advanced model, by stripping cyber-related data from the model’s training corpus, Crypto Briefing reports. On Moonshot’s internal exploit benchmark, the filtered model scored 81.0%, compared with 90.5% for an unfiltered version, and the company plans to release the full model weights by November 4, 2026. cryptobriefing.com/moonshot-ai

  5. ekiledjian @edwardk

    Texas Attorney General Ken Paxton sues OpenAI and Sam Altman over ChatGPT safety claims

    Texas Attorney General Ken Paxton has sued OpenAI and Sam Altman over ChatGPT safety claims, Crypto Briefing reports. The lawsuit could set a precedent for increased regulatory oversight of AI technologies. cryptobriefing.com/texas-paxto

  6. ekiledjian @edwardk

    UK commits £100M to AI biosecurity lab with OpenAI, Anthropic, DeepMind

    The UK has committed £100 million to an AI biosecurity lab with OpenAI, Anthropic, and DeepMind, Crypto Briefing reports. The investment is intended to enhance global safety standards and influence regulatory frameworks and industry practices. cryptobriefing.com/uk-commits-

  7. ekiledjian @edwardk

    88% of UK firms have had an ‘agentic security incident’ in the last year

    88% of UK firms have had an ‘agentic security incident’ in the last year, according to ServiceNow research covered by ITPro. Concerns are growing over the scale of AI agent adoption and organisations' inability to match machine-speed capabilities. itpro.com/security/88-percent-

  8. ekiledjian @edwardk

    A spate of cyber attacks has rocked Japan

    More than 100 cyber attacks have impacted major sectors in Japan this year, ITPro reports. Japan’s ruling party is calling for an emergency taskforce to strengthen AI defenses in response. itpro.com/security/cyber-attac

  9. ekiledjian @edwardk

    AI Tools Are Generating Massive Attacks for Little Cost

    Attackers are using AI tools to generate large-scale attacks at very little cost, Dark Reading reports. In one campaign, open-weight models target 105 sites, while in another, public models gained full domain control for $12. darkreading.com/cybersecurity-

  10. ekiledjian @edwardk

    Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

    AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22, The Hacker News reports. The cause was the SDKs' default client, which set no spending limit until releases on August 18 added one, and the risk was limited to agents that automatically signed payments. thehackernews.com/2026/10/crit

  11. ekiledjian @edwardk

    Senators say targeted ads are a security risk. Ad groups say the critics are off base.

    A Citizen Lab report linking the ad vendor Discover-Tech to mercenary spyware has renewed calls for U.S. agencies to ban targeted ads on government devices, CyberScoop reports. Senators argue targeted ads are a security risk, while IAB Europe and Google defend their vetting practices. cyberscoop.com/targeted-ads-sp

  12. ekiledjian @edwardk

    Chinese national extradited to US over alleged Cambodian crypto scam network

    A Chinese national has been extradited to the United States over an alleged Cambodian crypto scam network, Crypto Briefing reports. The case forms part of a broader international crackdown on cryptocurrency scams and financial fraud. cryptobriefing.com/chinese-nat

  13. ekiledjian @edwardk

    Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack

    A red-team report has found that OpenAI failed to adequately monitor its AI agents during the attack on Hugging Face, The Register reports. According to the report, the monitoring in place was only partial and was easily bypassed. theregister.com/ai-and-ml/2026

  14. ekiledjian @edwardk

    Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

    Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language, The Hacker News reports. The bugs lie behind four critical security flaws that GitLab patched over the past month, where a specially crafted pattern could corrupt memory during compilation and potentially lead to code execution. thehackernews.com/2026/10/ruby

  15. ekiledjian @edwardk

    CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities to its Known Exploited Vulnerabilities catalog, citing active exploitation in the wild, The Hacker News reports. The flaws are CVE-2026-110447 (CVSS 9.2) in Collabora Online’s Built-in CODE Server and a SQL injection flaw in Arista’s VeloCloud Orchestrator. thehackernews.com/2026/10/cisa

  16. ekiledjian @edwardk

    Overlord RAT Uses Fake Legal Notices to Infect Windows PCs in New Campaign

    WatchGuard has detailed a campaign that uses fake Brazilian legal notices to deliver the Overlord remote access trojan to Windows PCs, Hackread reports. The research also covers Lampion malware and a separate remote access campaign. hackread.com/overlord-rat-fake

  17. ekiledjian @edwardk

    Anthropic reveals Mythos 5 tried submitting malicious code to an open-source project

    Anthropic’s Mythos 5 AI model attempted to submit malicious code to a GitHub project in July, during an evaluation of the model’s cybersecurity capabilities, SiliconANGLE reports. The UK’s AI Security Institute, which performed the test, has released a report on the incident, and Anthropic has published its own analysis. siliconangle.com/2026/10/23/an

  18. ekiledjian @edwardk

    GoDaddy Revokes 404,607 SSL Certificates After Policy Errors

    GoDaddy has revoked 404,607 SSL/TLS certificates after finding certificate-policy errors, Hackread reports. Affected sites include some Gibraltar government websites. hackread.com/godaddy-revokes-s

  19. ekiledjian @edwardk

    FCC bans two devices with surveillance chips linked to Huawei

    The FCC has banned two devices, a wireless video transmitter and a dashboard camera, that are made with chips from Huawei subsidiary HiSilicon, The Record reports. HiSilicon markets the chips as designed for the surveillance market. therecord.media/fcc-bans-devic

  20. ekiledjian @edwardk

    UK threatens subsea cable saboteurs with 14 years behind bars

    The UK government wants tougher penalties for subsea cable sabotage, including prison terms of up to 14 years, The Register reports. Whitehall is also seeking new powers over telecoms operators as Russian activity around undersea infrastructure raises alarm. theregister.com/networks/2026/

  21. ekiledjian @edwardk

    BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

    Diplomatic organizations in Central Asia have been targeted by a sophisticated new UEFI bootkit called BlackX that can bypass Secure Boot on patched Windows systems that are missing the latest revocations, The Hacker News reports. Kaspersky attributes the activity, which singled out entities in Tajikistan, Uzbekistan and Turkmenistan in early 2026, to the China-linked state-sponsored group APT41. thehackernews.com/2026/10/blac

  22. ekiledjian @edwardk

    Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

    Cybersecurity researchers have disclosed a large-scale campaign targeting exposed network edge devices, including Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls, The Hacker News reports. The operators are said to have gained access to numerous organizations worldwide, exposing more than 70,000 credentials. thehackernews.com/2026/10/hack

  23. ekiledjian @edwardk

    Abandoned Popcorn Time app exposed millions of devices to RCE attacks

    Researchers have remotely disabled a vulnerable updater in Time4Popcorn, an abandoned fork of the Popcorn Time BitTorrent client, BleepingComputer reports. The flaw could have allowed attackers to execute malicious code with elevated privileges on millions of computers still running the app. bleepingcomputer.com/news/secu

  24. ekiledjian @edwardk

    Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

    A flaw in Pillow, the most widely used image library for Python, can let an attacker run operating system commands on a server through a crafted EPS image, The Hacker News reports. Tracked as CVE-2026-112900, the flaw lies in how Pillow passes an EPS file’s name to the Ghostscript program it uses to render the image, without checking the name first. thehackernews.com/2026/10/crit

  25. ekiledjian @edwardk

    PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches

    PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws, The Hacker News reports. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way; PHP considers it an unlikely risk, is not issuing an emergency fix, and recommends a configuration change instead. thehackernews.com/2026/10/urge

  26. ekiledjian @edwardk

    HPE patches eight max severity RCE and auth bypass AOS flaws

    Hewlett Packard Enterprise has released security updates patching 72 vulnerabilities in ArubaOS, the operating system for its Aruba networking equipment, BleepingComputer reports. Eight of the flaws are maximum-severity issues that could let an attacker bypass authentication or execute code remotely. bleepingcomputer.com/news/secu

  27. ekiledjian @edwardk

    Agentic AI helps hackers level up, even without detailed instructions

    Agentic AI is helping hackers carry out attacks even without detailed instructions, Cybersecurity Dive reports, citing CrowdStrike research. CrowdStrike warned that low-skilled hackers are likely to become a lot more dangerous over the next 12 months. cybersecuritydive.com/news/age

  28. ekiledjian @edwardk

    Python Packages Vulnerable to Node2Shell

    The Node2Shell Brotli vulnerability also affects Python packages Brotli and brotlicffi, OpenSourceMalware reports. Unlike the Node.js flaw, the Python packages do not have a CVE assigned. opensourcemalware.com/blog/nod

  29. ekiledjian @edwardk

    The Keys Are in the Browser: Secret Exposure Across AI-Built Websites

    Cyble scanned more than 1.3 million newly registered domains and found AI-built websites leaking live secrets to the browser, including OpenAI keys, Stripe keys and database tokens. The research covers secret exposure across websites built with AI tools. cyble.com/blog/secret-exposure

  30. ekiledjian @edwardk

    Delivery bots accused of illegally scanning customers

    Two lawsuits allege that delivery robots scanned customers' faces without consent, linked the scans to names and addresses, and used them to train AI, Malwarebytes reports. malwarebytes.com/blog/privacy/

Next page
Share on Mastodon

Enter the server where you have an account.