The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has tagged a Langflow remote code execution vulnerability as actively exploited, urging organizations to apply security updates and mitigations as soon as possible. […]
Category: Security
Global Security News, Security
Why EASM is vital to modern digital risk protection
You can’t protect what you can’t see. From shadow IT to supplier risk, modern attack surfaces are sprawling fast — and External Attack Surface Management (EASM) is how security teams take back control. Learn from Outpost24 how EASM powers proactive digital risk protection. […]
Exploits, Global Security News, Google, Mobile, Security
Google fixes actively exploited FreeType flaw on Android
Google has released the May 2025 security updates for Android with fixes for 45 security flaws, including an actively exploited zero-click FreeType 2 code execution vulnerability. […]
Global Security News, Security
Linux wiper malware hidden in malicious Go modules on GitHub
A supply-chain attack targets Linux servers with disk-wiping malware hidden in Golang modules published on GitHub. […]
Global Security News, North America, Security
Luna Moth extortion hackers pose as IT help desks to breach US firms
The data-theft extortion group known as Luna Moth, aka Silent Ransom Group, has ramped up callback phishing campaigns in attacks on legal and financial institutions in the United States. […]
Exploits, Global Security News, Security
New “Bring Your Own Installer” EDR bypass used in ransomware attack
A new “Bring Your Own Installer” EDR bypass technique is exploited in attacks to bypass SentinelOne’s tamper protection feature, allowing threat actors to disable endpoint detection and response (EDR) agents to install the Babuk ransomware. […]
Exploits, Global Security News, Mike Waltz, Security, signal, TeleMessage
TeleMessage, a modified Signal clone used by US government officials, has been hacked
A hacker has exploited a vulnerability in TeleMessage, which provides modded versions of encrypted messaging apps such as Signal, Telegram, and WhatsApp, to extract archived messages and other data relating to U.S. government officials and companies who used the tool, 404 Media reported. TeleMessage came into the spotlight last week after it was reported that…
Cloud, Global Security News, Security
Microsoft finds default Kubernetes Helm charts can expose data
Microsoft warns about the security risks posed by default configurations in Kubernetes deployments, particularly those using out-of-the-box Helm charts, which could publicly expose sensitive data. […]
Global Security News, Security
Unofficial Signal app used by Trump officials investigates hack
TeleMessage, an Israeli company that sells an unofficial Signal message archiving tool used by some U.S. government officials, has suspended all services after reportedly being hacked. […]
Cybersecurity, Global Security News, GlobalX, Hackers, hacktivism, Security, Trump
GlobalX, airline used for Trump deportations, gets hacked: report
Hackers claiming to be part of the hacktivist group Anonymous claimed the data breach.
Global Security News, Security
Darcula PhaaS steals 884,000 credit cards via SMS phishing texts
The Darcula phishing-as-a-service (PhaaS) platform stole 884,000 credit cards from 13 million clicks on malicious links sent via text messages to targets worldwide. […]
Global Security News, Security
Darcula PhaaS steals 884,000 credit cards via phishing texts
The Darcula phishing-as-a-service (PhaaS) platform stole 884,000 credit cards from 13 million clicks on malicious links sent via text messages to targets worldwide. […]
Global Security News, Security
UK shares security tips after major retail cyberattacks
Following three high-profile cyberattacks impacting major UK retailers, the country’s National Cyber Security Centre (NCSC) has published guidance that all companies are advised to follow to strengthen their cybersecurity defenses. […]
Global Security News, Incident Response, Security, Security Operations Center (SOC), threat detection, Threat Hunting
Automate Forensics to Eliminate Uncertainty
Discover how Cisco XDR delivers automated forensics and AI-driven investigation—bringing speed, clarity, and confidence to SecOps teams.
Global Security News, Incident Response, Security, Security Operations Center (SOC), threat detection, Threat Hunting
Automate Forensics to Eliminate Uncertainty
Discover how Cisco XDR delivers automated forensics and AI-driven investigation—bringing speed, clarity, and confidence to SecOps teams.
Exploits, Global Security News, Mike Waltz, Security, signal, TeleMessage
TeleMessage, a modified Signal clone used by US govt. officials, has been hacked
A hacker has exploited a vulnerability in TeleMessage, which provides modded versions of encrypted messaging apps such as Signal, Telegram and WhatsApp, to extract archived messages and other data relating to U.S. government officials and companies who used the tool, 404 Media reported. TeleMessage came into the spotlight last week after it was reported that…
Global Security News, Security
Passkeys for Normal People
Let me start by very simply explaining the problem we’re trying to solve with passkeys. Imagine you’re logging on to a website like this: And, because you want to protect your account from being logged into by someone else who may obtain your username and password, you’ve turned on two-factor authentication (2FA). That means that…
AI and Machine Learning in Security, AI and ML in Security, Compliance, Cybersecurity, Global Security News, MFA, Security, Security Awareness, Security Boulevard (Original), Social - Facebook, Social - LinkedIn, Social - X, Third Party Risk, vulnerabilities
Beyond Traditional Vendor Management: Navigating AI Risks in the Supply Chain
There are many ways in which AI is increasing risk, extending beyond third parties to affect all aspects of our security programs. The post Beyond Traditional Vendor Management: Navigating AI Risks in the Supply Chain appeared first on Security Boulevard.
Global Security News, Security
StealC malware enhanced with stealth upgrades and data theft tools
The creators of StealC, a widely-used information stealer and malware downloader, have released its second major version, bringing multiple stealth and data theft enhancements. […]
Global Security News, Microsoft, Mobile, Security
Microsoft ends Authenticator password autofill, moves users to Edge
Microsoft has announced that it will discontinue the password storage and autofill feature in the Authenticator app starting in July and will complete the deprecation in August 2025. […]
Exclusive, Games hacking, Gaming, Global Security News, league of legends, riot, Riot Games, Security, Valorant, Vanguard
How Riot Games is fighting the war against video game hackers
Riot’s “anti-cheat artisan” Phillip Koskinas explains how he and his team go after cheaters and cheat developers to protect the integrity of games, such as Valorant and League of Legends.
Global Security News, Security
Co-op confirms data theft after DragonForce ransomware claims attack
The Co-op cyberattack is far worse than initially reported, with the company now confirming that data was stolen for a significant number of current and past customers. […]
Global Security News, Security
Magento supply chain attack compromises hundreds of e-stores
A supply chain attack involving 21 backdoored Magento extensions has compromised between 500 and 1,000 e-commerce stores, including one belonging to a $40 billion multinational. […]
Cybersecurity, Exclusive, Global Security News, privacy, Security
Dating app Raw exposed users’ location data and personal information
The app claims it uses end-to-end encryption, but spilled its users’ dating preferences and granular location data to the open web.
Cloud Security, Cybersecurity, Data Security, Global Security News, Security, Security Boulevard (Original), Social - Facebook, Social - LinkedIn, Social - X
The Cloud Illusion: Why Your Database Security Might Be at Risk
With the right cloud database architecture, you gain versatility as well as optimal security. The post The Cloud Illusion: Why Your Database Security Might Be at Risk appeared first on Security Boulevard.
Global Security News, Legal, North America, Security
US indicts Black Kingdom ransomware admin for Microsoft Exchange attacks
A 36-year-old Yemeni national, who is believed to be the developer and primary operator of ‘Black Kingdom’ ransomware, has been indicted by the United States for conducting 1,500 attacks on Microsoft Exchange servers. […]
Global Security News, Security
UK NCSC: Cyberattacks impacting UK retailers are a wake-up call
The United Kingdom’s National Cyber Security Centre warned that ongoing cyberattacks impacting multiple UK retail chains should be taken as a “wake-up call.” […]
Europe, Global Security News, Security
TikTok fined €530 million for sending European user data to China
The Irish Data Protection Commission (DPC) has fined TikTok €530 million (over $601 million) for illegally transferring the personal data of users in the European Economic Area (EEA) to China, violating the European Union’s GDPR data protection regulations. […]
Global Security News, Microsoft, Security
Microsoft fixes Exchange Online bug flagging Gmail emails as spam
Microsoft has resolved an issue with a machine learning model that mistakenly flagged emails from Gmail accounts as spam in Exchange Online. […]
Global Security News, Microsoft, Security
Microsoft makes all new accounts passwordless by default
Microsoft has announced that all new Microsoft accounts will be “passwordless by default” to secure them against password attacks such as phishing, brute force, and credential stuffing. […]
Global Security News, Security
Hacker ‘NullBulge’ pleads guilty to stealing Disney’s Slack data
A California man who used the alias “NullBulge” has pleaded guilty to illegally accessing Disney’s internal Slack channels and stealing over 1.1 terabytes of internal company data. […]
Global Security News, Government, Security
Pro-Russia hacktivists bombard Dutch public orgs with DDoS attacks
Russia-aligned hacktivists persistently target key public and private organizations in the Netherlands with distributed denial of service (DDoS) attacks, causing access problems and service disruptions. […]
Global Security News, North America, Security
Ukrainian extradited to US for Nefilim ransomware attacks
A Ukrainian national has been extradited from Spain to the United States to face charges over allegedly conducting Nefilim ransomware attacks against companies. […]
Global Security News, Security
Harrods the the next UK retailer targeted in a cyberattack
London’s iconic department store, Harrods, has confirmed it was targeted in a cyberattack, becoming the third major UK retailer to report cyberattacks in a week following incidents at M&S and the Co-op. […]
Global Security News, Security
Harrods the next UK retailer targeted in a cyberattack
London’s iconic department store, Harrods, has confirmed it was targeted in a cyberattack, becoming the third major UK retailer to report cyberattacks in a week following incidents at M&S and the Co-op. […]
Global Security News, Security
Malicious PyPI packages abuse Gmail, websockets to hijack systems
Seven malicious PyPi packages were found using Gmail’s SMTP servers and WebSockets for data exfiltration and remote command execution. […]
Asia Pacific, Global Security News, Security
Hackers abuse IPv6 networking feature to hijack software updates
A China-aligned APT threat actor named “TheWizards” abuses an IPv6 networking feature to launch adversary-in-the-middle (AitM) attacks that hijack software updates to install Windows malware. […]
Global Security News, Security
WordPress plugin disguised as a security tool injects backdoor
A new malware campaign targeting WordPress sites employs a malicious plugin disguised as a security tool to trick users into installing and trusting it. […]
Artificial Intelligence, Cloud, Global Security News, Security
WhatsApp unveils ‘Private Processing’ for cloud-based AI features
WhatsApp has announced the introduction of ‘Private Processing,’ a new technology that enables users to utilize advanced AI features by offloading tasks to privacy-preserving cloud servers. […]
Apple, Cybersecurity, Global Security News, hacking, Security, Spyware, surveillance
Apple notifies new victims of spyware attacks across the world
Two alleged victims came forward claiming they received a spyware notification from Apple.
Exploits, Global Security News, Security
SonicWall: SMA100 VPN vulnerabilities now exploited in attacks
Cybersecurity company SonicWall has warned customers that several vulnerabilities impacting its Secure Mobile Access (SMA) appliances are now being actively exploited in attacks. […]
Global Security News, Security
Commvault says recent breach didn’t impact customer backup data
Commvault, a leading provider of data protection solutions, says a nation-state threat actor who breached its Azure environment didn’t gain access to customer backup data. […]
Global Security News, Security
FBI shares massive list of 42,000 LabHost phishing domains
The FBI has shared 42,000 phishing domains tied to the LabHost cybercrime platform, one of the largest global phishing-as-a-service (PhaaS) platforms that was dismantled in April 2024. […]
Global Security News, Security
UK retailer Co-op shuts down some IT systems after hack attempt
British supermarket chain Co-op Food has confirmed to BleepingComputer via a statement that it has suffered limited operational disruption as it responds to a cyberattack. […]
cyberattack, Cybersecurity, Global Security News, retail, Security
UK retail giant Co-op warns of disruption as it battles cyberattack
The U.K. grocery and retail giant said the unspecified cyber incident is affecting its back office and call centers.
Global Security News, Healthcare, North America, Security
Ascension discloses new data breach after third-party hacking incident
Ascension, one of the largest private healthcare systems in the United States, is notifying patients that their personal and health information was stolen in a December 2024 data theft attack, which affected a former business partner. […]
Global Security News, Microsoft, Security
Microsoft: Windows Server hotpatching to require subscription
Microsoft has announced that it will soon introduce paid subscriptions for Windows Server 2025 hotpatching, a service that enables admins to install security updates without restarting. […]
Global Security News, Security
Hackers ramp up scans for leaked Git tokens and secrets
Threat actors are intensifying internet-wide scanning for Git configuration files that can reveal sensitive secrets and authentication tokens used to compromise cloud services and source code repositories. […]
Global Security News, Security
France ties Russian APT28 hackers to 12 cyberattacks on French orgs
Today, the French foreign ministry blamed the APT28 hacking group linked to Russia’s military intelligence service (GRU) for targeting or breaching a dozen French entities over the last four years. […]
Apple, Global Security News, Security
Apple ‘AirBorne’ flaws can lead to zero-click AirPlay RCE attacks
A set of security vulnerabilities in Apple’s AirPlay Protocol and AirPlay Software Development Kit (SDK) exposed unpatched third-party and Apple devices to various attacks, including remote code execution. […]
Global Security News, Security
SK Telecom cyberattack: Free SIM replacements for 25 million customers
South Korean mobile provider SK Telecom has announced free SIM card replacements to its 25 million mobile customers following a recent USIM data breach, but only 6 million cards are available through May. […]
Global Security News, Proton, proton mail, Security
Indian court orders blocking of Proton Mail
The ruling, which has yet to take effect, was ordered under India’s online blocking laws.
Exploits, Global Security News, Security
CISA tags Broadcom Fabric OS, CommVault flaws as exploited in attacks
The U.S. Cybersecurity & Infrastructure Security Agency (CISA) is warning of Broadcom Brocade Fabric OS, Commvault web servers, and Qualitia Active! Mail clients vulnerabilities that are actively exploited in attacks. […]
Asia Pacific, china, Cybersecurity, Global Security News, Google, malware, North Korea, Security, Spyware, zero days
Government hackers are leading the use of attributed zero-days, Google says
Governments like China and North Korea, along with spyware makers, used the most recorded zero-days in 2024.
Exploits, Global Security News, Security
Google: 97 zero-days exploited in 2024, over 50% in spyware attacks
Google’s Threat Intelligence Group (GTIG) says attackers exploited 75 zero-day vulnerabilities in the wild last year, over 50% of which were linked to spyware attacks. […]
Global Security News, Security
IBM aims for autonomous security operations
IBM has added new agentic and automation capabilities to its managed detection and response (MDR) services to help customers more quickly and efficiently secure enterprise resources. Specifically, Big Blue is launching an agentic AI system called Autonomous Threat Operations Machine (ATOM), which is designed to provide automated threat triage, investigation, and remediation and reduce the…
Global Security News, Security
Marks & Spencer breach linked to Scattered Spider ransomware attack
Ongoing outages at British retail giant Marks & Spencer are caused by a ransomware attack believed to be conducted by a hacking collective known as “Scattered Spider” BleepingComputer has learned from multiple sources. […]
Global Security News, Security
Hitachi Vantara takes servers offline after Akira ransomware attack
Hitachi Vantara, a subsidiary of Japanese multinational conglomerate Hitachi, was forced to take servers offline over the weekend to contain an Akira ransomware attack. […]
Global Security News, Security
VeriSource now says February data breach impacts 4 million people
Employee benefits administration firm VeriSource Services is warning that a data breach exposed the personal information of four million people. […]
Exploits, Global Security News, Security
Blackpoint Cyber Launches New Platform to ‘Quantify Maturity’
Cybersecurity vendor Blackpoint Cyber today announced its new platform solution. CompassOne offers MSPs capabilities across various security needs and also aims to address what CTO Manoj Srivastava calls the challenge of quantifying MSP and customer maturity. CompassOne shows the next generation of Blackpoint’s approach to the channel The new platform is Blackpoint Cyber’s latest innovation,…
Exploits, Global Security News, Security
Over 1,200 SAP NetWeaver servers vulnerable to actively exploited flaw
Over 1,200 internet-exposed SAP NetWeaver instances are vulnerable to an actively exploited maximum severity unauthenticated file upload vulnerability that allows attackers to hijack servers. […]
Global Security News, linux, Security
Kali Linux warns of update failures after losing repo signing key
Offensive Security warned Kali Linux users to manually install a new Kali repository signing key to avoid experiencing update failures. […]
china, Citizen Lab, Cybersecurity, Global Security News, Google, malware, Security, Spyware, Uyghurs, Windows
Citizen Lab say exiled Uyghur leaders targeted with Windows spyware
The researchers said the attackers behind the campaign had “deep understanding of the target community.”
china, Citizen Lab, Cybersecurity, Global Security News, Google, In Brief, malware, Security, Spyware, Uyghurs, Windows
Citizen Lab says exiled Uyghur leaders targeted with Windows spyware
The researchers said the attackers behind the campaign had “deep understanding of the target community.”
Global Security News, Security
Cloudflare mitigates record number of DDoS attacks in 2025
Internet services giant Cloudflare says it mitigated a record number of DDoS attacks in 2024, recording a massive 358% year-over-year jump and a 198% quarter-over-quarter increase. […]
agentic ai, api, API security, Featured, Global Security News, rsac, Security, Social - X, Spotlight, wallarm
Wallarm Extends API Security Reach to AI Agents
Wallarm at the 2025 RSA Conference announced that, starting this summer, it will extend the reach of its platform for securing application programming interfaces (APIs) to include artificial intelligence (AI) agents. Tim Erlin, vice president of product for Wallarm, said the Agentic AI Protection capability added to the platform makes it possible to thwart attack..…
Global IT News, Global Security News, Security, Social
4chan is back online, says it’s been ‘starved of money’
4chan is partly back online after a hack took the infamous image-sharing site down for nearly two weeks. The site first went down on April 14, with the person responsible for the hack apparently leaking data including a list of moderators and “janitors” (one janitor told TechCrunch they were “confident” that the leaked data was…
CryptoCurrency, Global Security News, Security
Coinbase fixes 2FA log error making people think they were hacked
Coinbase has fixed a confusing bug in its account activity logs that caused users to think their credentials were compromised. […]
Global Security News, Security, Software
Brave’s Cookiecrumbler tool taps community to help block cookie notices
Brave has open-sourceed a new tool called “Cookiecrumbler,” which uses large language models (LLMs) to detect cookie consent notices and then community-driven reviews to block those that won’t break site functionality. […]
Global Security News, Government & Policy, Security, signal
Government officials are kind of bad at the internet
Perhaps no one in the world has made such catastrophic tech flubs this year as U.S. Secretary of Defense Pete Hegseth. The saga started when the editor-in-chief of The Atlantic, Jeffrey Goldberg, reported that he had been mistakenly added to an unauthorized Signal group chat by U.S. National Security Advisor Michael Waltz, where numerous high-ranking…
Global Security News, Security
DragonForce expands ransomware model with white-label branding scheme
The ransomware scene is re-organizing, with one gang known as DragonForce working to gather other operations under a cartel-like structure. […]
Global Security News, Security
WooCommerce admins targeted by fake security patches that hijack sites
A large-scale phishing campaign targets WooCommerce users with a fake security alert urging them to download a “critical patch” that adds a WordPress backdoor to the site. […]
Exploits, Global Security News, Security
Craft CMS RCE exploit chain used in zero-day attacks to steal data
Two vulnerabilities impacting Craft CMS were chained together in zero-day attacks to breach servers and steal data, with exploitation ongoing, according to CERT Orange Cyberdefense. […]
cyberattacks, Cybersecurity, data breach, evergreens, Global IT News, Global Security News, Security
The TechCrunch Cyber Glossary
This glossary includes the most common terms and expressions TechCrunch uses in our security reporting, and explanations of how — and why — we use them.
Global Security News, Security, Security Bloggers Network
Guide: What is KMI (Key Management Infrastructure)?
One of the most critical elements of modern information security is encryption. Encryption is a complex field based solely on the arms race between people seeking secure ways to encode and encrypt data at rest and in transit and those seeking to break that encryption. Encryption is extremely commonplace. Most websites you visit use SSL,…
Global Security News, Security
Marks & Spencer pauses online orders after cyberattack
British retailer giant Marks & Spencer (M&S) has suspended online orders while working to recover from a recently disclosed cyberattack. […]
Global Security News, Security
Mobile provider MTN says cyberattack compromised customer data
African mobile giant MTN Group announced that a cybersecurity incident has compromised the personal information of some of its subscribers in certain countries. […]
Global Security News, Microsoft, Security
Windows “inetpub” security fix can be abused to block future updates
A recent Windows security update that creates an ‘inetpub’ folder has introduced a new weakness allowing attackers to prevent the installation of future updates. […]
Global Security News, Security
Baltimore City Public Schools data breach affects over 31,000 people
Baltimore City Public Schools notified tens of thousands of employees and students of a data breach following an incident in February when unknown attackers hacked into its network. […]
Exploits, Global Security News, Security
SAP fixes suspected Netweaver zero-day exploited in attacks
SAP has released out-of-band emergency updates for NetWeaver to fix an actively exploited remote code execution (RCE) vulnerability used to hijack servers. […]
Cybersecurity, data breach, Global Security News, hospitals, Security
Data breach at Connecticut’s Yale New Haven Health affects over 5 million
Yale New Haven Health is Connecticut’s largest healthcare provider.
Global Security News, North America, Security
FBI seeks help to unmask Salt Typhoon hackers behind telecom breaches
The FBI has asked the public for information on Chinese Salt Typhoon hackers behind widespread breaches of telecommunications providers in the United States and worldwide. […]
Cloud Security, Cybersecurity, Global Security News, Security, Security Awareness, Security Boulevard (Original), Social - Facebook, Social - LinkedIn, Social - X
Cloud Infrastructure Security: Threats, Challenges & How to Protect Your Data
As cloud environments become more complex, ensuring robust security for your cloud infrastructure is no longer an option, but a necessity. The post Cloud Infrastructure Security: Threats, Challenges & How to Protect Your Data appeared first on Security Boulevard.
Cybersecurity, DevSecOps, Global Security News, Quality, quality assurance, Security, Security Awareness, Security Boulevard (Original), Social - Facebook, Social - LinkedIn, Social - X, software testing, vulnerabilities
Security at Arm’s Length: Why the Lag Between Detection and Action Keeps Growing
Vulnerabilities: It’s not their presence but their visibility and controlled management that defines secure development. The post Security at Arm’s Length: Why the Lag Between Detection and Action Keeps Growing appeared first on Security Boulevard.
Global Security News, Security
Hackers abuse OAuth 2.0 workflows to hijack Microsoft 365 accounts
Russian threat actors have been abusing legitimate OAuth 2.0 authentication workflows to hijack Microsoft 365 accounts of employees of organizations related to Ukraine and human rights. […]
Global Security News, Security
Lazarus hackers breach six companies in watering hole attacks
In a recent espionage campaign, the infamous North Korean threat group Lazarus targeted multiple organizations in the software, IT, finance, and telecommunications sectors in South Korea. […]
Global Security News, Healthcare, Security
Frederick Health data breach impacts nearly 1 million patients
A ransomware attack in January at Frederick Health Medical Group, a major healthcare provider in Maryland, has led to a data breach affecting nearly one million patients. […]
AI, Apps, Biotech & Health, Climate, Crypto, Disrupt 2025, Fintech, Fundraising, Global IT News, Global Security News, Media & Entertainment, Security, Space, Startups, TC, TechCrunch Disrupt 2025, Venture
Speak at TechCrunch Disrupt 2025: Applications now open
TechCrunch Disrupt returns October 27–29 to Moscone West in San Francisco — and we’re inviting thought leaders, founders, VCs, and tech experts to apply for a chance to take the stage at one of the most anticipated tech events of the year. Applications are now open to speak at Disrupt 2025, where over 10,000+ tech…
Global Security News, Security
Interlock ransomware claims DaVita attack, leaks stolen data
The Interlock ransomware gang has claimed the cyberattack on DaVita kidney dialysis firm and leaked data allegedly stolen from the organization. […]
Global Security News, Healthcare, Security
Yale New Haven Health data breach affects 5.5 million patients
Yale New Haven Health (YNHHS) is warning that threat actors stole the personal data of 5.5 million patients in a cyberattack earlier this month. […]
Global Security News, linux, Security
Linux ‘io_uring’ security blindspot allows stealthy rootkit attacks
A significant security gap in Linux runtime security caused by the ‘io_uring’ interface allows rootkits to operate undetected on systems while bypassing advanced Enterprise security software. […]
Global Security News, Mobile, Security
Russian army targeted by new Android malware hidden in mapping app
A new Android malware has been discovered hidden inside trojanized versions of the Alpine Quest mapping app, which is reportedly used by Russian soldiers as part of war zone operational planning. […]
AI, Global Security News, gpt 4.1, openai, Safety, Security
OpenAI’s GPT-4.1 may be less aligned than the company’s previous AI models
In mid-April, OpenAI launched a powerful new AI model, GPT-4.1, that the company claimed “excelled” at following instructions. But the results of several independent tests suggest the model is less aligned — that is to say, less reliable — than previous OpenAI releases. When OpenAI launches a new model, it typically publishes a detailed technical…
Global Security News, Security
WhatsApp’s new Advanced Chat Privacy protects sensitive messages
WhatsApp has introduced a new Advanced Chat Privacy feature to protect sensitive information exchanged in private chats and group conversations. […]
Global Security News, Healthcare, Security
Blue Shield of California leaked health data of 4.7 million members to Google
Blue Shield of California disclosed it suffered a data breach after exposing protected health information of 4.7 million members to Google’s analytics and advertisement platforms. […]
Global Security News, Security
FBI: US lost record $16.6 billion to cybercrime in 2024
The FBI says cybercriminals have stolen a record $16,6 billion in 2024, marking an increase in losses of over 33% compared to the previous year. […]
Global Security News, Hardware, Security
ASUS releases fix for AMI bug that lets hackers brick servers
ASUS has released security updates to address CVE-2024-54085, a maximum severity flaw that could allow attackers to hijack and potentially brick servers. […]
Global Security News, Security
Phishing detection is broken: Why most attacks feel like a zero day
Phishing attacks now evade email filters, proxies, and MFA — making every attack feel like a zero-day. This article from Push Security breaks down why detection is failing and how real-time, in-browser analysis can help turn the tide. […]
california, Cybersecurity, data breach, Global Security News, health insurance, Security
Blue Shield of California shared the private health data of millions with Google for years
The health insurance giant is notifying at least 4.7 million patients of the security lapse.
AI, endor labs, Fundraising, Global Security News, Security
Endor Labs, which builds tools to scan AI-generated code for vulnerabilities, lands $93M
AI-generated code is no doubt changing how software is built, but it’s also introducing new security challenges. More than 50% of organizations encounter security issues with AI-produced code sometimes or frequently, according to a late 2023 survey by developer security platform Synk. For Endor Labs, that opportunity proved alluring enough that it chose to change…