The Future of Generative AI and Security [2 Predictions]
Offensive AI Will Outpace Defensive AI In the short term, and possibly indefinitely, we will see offensive or malicious AI applications outpace defensive ones that…
Month: January 2025
Manage Your Attack Surface With Continuous Security Testing
Creating Continuous Attack Resistance In order to stay ahead of cybercriminals, businesses need to preemptively find flaws in their digital landscape that a bad actor…
Russian UAC-0063 Targets Europe and Central Asia with Advanced Malware
UAC-0063: A Russian-linked threat actor targeting Central Asia and Europe with sophisticated cyberespionage campaigns, including weaponized documents, data exfiltration, and advanced malware. Bitdefender has shared…
APRA finds new cyber security leader – Security – Training & Development
The Australian Prudential Regulation Authority (APRA) has hired Bianca Wirth as its new chief information security officer following a four-month recruitment process. Bianca Wirth LinkedIn…
Aquabot variant v3 targets Mitel SIP phones
Aquabot variant v3 targets Mitel SIP phones Pierluigi Paganini January 29, 2025 A new variant of the Mirai-based botnet Aquabot targets vulnerable Mitel SIP phones…
Apple Chips Vulnerability Exposes Credit Cards & Location History to Hackers
Researchers have uncovered two critical vulnerabilities in Apple’s custom silicon chips, dubbed SLAP (Speculative Load Address Prediction) and FLOP (False Load Output Predictions). These flaws,…
Exposed DeepSeek Database Revealed Chat Prompts and Internal Data
“It’s pretty shocking to build an AI model and leave the backdoor wide open from a security perspective,” says independent security researcher Jeremiah Fowler, who…
Microsoft probes if DeepSeek-linked group improperly obtained OpenAI data – Software – Security
Microsoft and OpenAI are probing if data output from the ChatGPT maker’s technology was obtained in an unauthorised manner by a group linked to Chinese…
U.S. CISA adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Apple products’ flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini January 29, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds…
State-sponsored Actors Abusing Gemini to Fuel Cyber Attacks
The state-sponsored threat actors are increasingly exploiting Google’s AI-powered assistant, Gemini, to enhance their cyber operations. While generative AI tools like Gemini hold immense potential…
Goldman Sachs hires Amazon exec in senior AI engineering role – Financial Services – Training & Development – Software
Goldman Sachs has hired Daniel Marcu from Amazon.com as its global head of artificial intelligence engineering and science to help develop and refine artificial intelligence…
FBI seizes Cracked.io, Nulled.to hacking forums in Operation Talent
Update January 29, 14:15 EST: Seizure banners were added to the cracked[.] io, nulled [.] to, starkrdp [.] io, mysellix [.] io, and sellix [.] io,…