News

The CVE-2024-6768 flaw in the Windows CLFS.sys driver can lead to BSOD

Firms are introducing 300 services monthly, contributing to 32% of high or critical cloud exposures

DARPA awards $14 million to seven teams competing to develop AI systems capable of identifying and patching vulnerabilities in open-source software

Many stakeholders said the future UN convention could allow authoritarian countries to stifle political opposition and violate human rights

Microsoft claims Iran is ramping up election interference activity in the US, as Trump campaign claims it was hacked

Arthur Petrov is accused of exporting US chips for manufacturers supplying weaponry and equipment to the Russian military

A new Sophos-commissioned survey finds burnout, fatigue, cynicism riding high in the workforce

Interesting paper: “Generative AI Misuse: A Taxonomy of Tactics and Insights from Real-World Data“:

Generative, multimodal artificial intelligence (GenAI) offers transformative potential across industries, but its misuse poses significant risks. Prior research has shed light on the potential of advanced AI systems to be exploited for malicious purposes. However, we still lack a concrete understanding of how GenAI models are specifically exploited or abused in practice, including the tactics employed to inflict harm. In this paper, we present a taxonomy of GenAI misuse tactics, informed by existing academic literature and a qualitative analysis of approximately 200 observed incidents of misuse reported between January 2023 and March 2024. Through this analysis, we illuminate key and novel patterns in misuse during this time period, including potential motivations, strategies, and how attackers leverage and abuse system capabilities across modalities (e.g. image, text, audio, video) in the wild.

Blog post. Note the graphic mapping goals with strategies.

CISA Director Jen Easterly calls on organizations to drive cybersecurity improvements through a ‘Secure by Demand’ approach

Leading AI companies have formed the Coalition for Secure AI (CoSAI) to address the growing cybersecurity risks posed by artificial intelligence