Cybersecurity News, Insights and Analysis | SecurityWeek
SecurityWeek provides cybersecurity news and information to global enterprises, with expert insights & analysis for IT security professionals
Chrome 131 Update Patches High-Severity Memory Safety Bugs
Dec 19, 2024 · The transition to Rust has led to a significant drop in memory safety bugs in Android over the past five years, and similar improvements are expected in Chrome as well, since Google will be transitioning the browser to Rust too.. Related: Google Pays $55,000 for High-Severity Chrome Browser Bug Related: Five Eyes Agencies Publish Guidance on Eliminating Memory Safety Bugs
ChatGPT Jailbreak: Researchers Bypass AI Safeguards Using …
Oct 29, 2024 · “The ChatGPT-4o guardrail bypass demonstrates the need for more sophisticated security measures in AI models, particularly around encoding. While language models like ChatGPT-4o are highly advanced, they still lack the capability to evaluate the safety of every step when instructions are cleverly obfuscated or encoded,” Figueroa said.. At the time of writing, SecurityWeek was not able to ...
China’s Salt Typhoon Hacked AT&T, Verizon: Report
Oct 7, 2024 · The China-linked threat group known as Salt Typhoon has hacked into the networks of several major broadband providers in the United States, potentially compromising wiretap systems, according to The Wall Street Journal.
Latest News - SecurityWeek
3 days ago · Daily Briefing Newsletter. Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights.
Hacktivism: What’s in a Name… It May be More Than You Expect
Nov 27, 2023 · It is also worth considering the military acronym MICE, originally used to recognize potential spies but generally able to detect anyone who may become a threat: the motivations of Money, Ideology, Compromise (as in coercion), and Ego.As more elements of this acronym apply, so the likelihood of becoming a spy (or a threat generally) increases.
MITRE Updates List of 25 Most Dangerous Software Vulnerabilities
Nov 21, 2024 · “By following CISA’s initiatives, organizations can reduce vulnerabilities and strengthen application and infrastructure security. Incorporating the 2024 CWE Top 25 into cybersecurity and procurement strategies will enhance overall resilience,” the agency says.
Ivanti Patches 50 Vulnerabilities Across Several Products
Nov 13, 2024 · Vulnerabilities Ivanti Patches 50 Vulnerabilities Across Several Products. Ivanti has released fixes for dozens of vulnerabilities in Endpoint Manager, Avalanche, Connect Secure, Policy Secure, and Secure Access Client.
Ransomware in 2024: More Attacks, More Leaks, and Increased ...
Aug 7, 2024 · Two things standout. Firstly, the consistently high activity from the LockBit group until it suddenly tails off in June. It was in June that the FBI announced it had obtained 7,000 LockBit decryption keys. “There’s a lot going on with LockBit at the moment,” explained Beek.
Android’s September 2024 Update Patches Exploited Vulnerability
Sep 4, 2024 · Mobile & Wireless Android’s September 2024 Update Patches Exploited Vulnerability. Google has released Android security updates to patch an exploited local privilege escalation vulnerability.