Schneier on Security

DECEMBER 19, 2023

There’s a rumor flying around the Internet that OpenAI is training foundation models on your Dropbox documents. If OpenAI are training on data that they said they wouldn’t train on, or if Facebook are spying on us through our phone’s microphones, they should be hauled in front of regulators and/or sued into the ground.

Government 250

Government Banking Risk Internet 250

Schneier on Security

JULY 12, 2023

No surprise, but Google just changed its privacy policy to reflect broader uses of all the surveillance data it has captured over the years: Research and development : Google uses information to improve our services and to develop new products, features and technologies that benefit our users and the public.

Surveillance 220

Surveillance Technology Data collection Artificial Intelligence 220

Schneier on Security

AUGUST 9, 2023

Researchers have trained a ML model to detect keystrokes by sound with 95% accuracy. When trained on keystrokes recorded by a nearby phone, the classifier achieved an accuracy of 95%, the highest accuracy seen without the use of a language model.

Software 175

Software 175

SecureWorld News

APRIL 18, 2024

The National Cybersecurity Alliance has launched Cybersecure My Business, a training program for non-technical owners and operators of small- to medium-sized businesses (SMBs) on how to manage cyber risk in their business. Visit Cybersecure My Business for more information and to join the waitlist for the training program.

Cyber Risk 112

Cyber Risk Risk Cybersecurity Small Business 112

Security Affairs

AUGUST 7, 2023

Zoom changed its terms of service requiring users to allow AI to train on all their data without giving them an opt-out option. Zoom updated its terms of service and informed users that it will train its artificial intelligence models using some of its data. Service Generated Data; Consent to Use. “ 10.2

Artificial Intelligence 98

Artificial Intelligence Data collection Software Marketing 98

Dark Reading

NOVEMBER 15, 2023

With a two-pronged approach, the group trains its hackers in penetration testing, only to set them free to build a marketplace for pen-testing services.

Penetration Testing 121

Penetration Testing 121

The Last Watchdog

OCTOBER 25, 2022

The battle has sprawled out beyond email; phishing ruses are increasingly getting seeded via messaging apps, cloud-based file sharing platforms and text messaging services. We discussed advances in cybersecurity training that combine timely content and targeted training to combat the latest phishing campaigns.

Phishing 203

Phishing Cloud Migration Small Business Marketing 203

The Last Watchdog

MAY 30, 2022

Meanwhile, 200,000 well-trained and technically skilled military service members are discharged each year. Training and certification must become more accessible and hiring criteria must change to encourage veterans to apply for these roles. This experience can also be helpful when training cybersecurity talent.

Cybersecurity 261

Cybersecurity InfoSec Education Cyber threats 261

SecureWorld News

APRIL 1, 2024

A new Phishing-as-a-Service (PhaaS) threat called "darcula" is taking advantage of encrypted mobile messaging services to unleash a wave of sophisticated smishing attacks targeting organizations across more than 100 countries. Good training should cover all attack vectors."

Phishing 94

Phishing Mobile Encryption Technology 94

The Last Watchdog

FEBRUARY 11, 2024

Related: The case for augmented reality training Because of this, cybersecurity investments and regulatory oversight are increasing at an astounding rate , especially for those in the financial services industry, bringing an overwhelming feeling to chief compliance officers without dedicated security teams.

Cyber Risk 200

Cyber Risk Risk Financial Services Cyber threats 200

The Last Watchdog

NOVEMBER 19, 2023

That’s largely because the splashy headlines and online buzz created by bringing down the pair of casinos will only motivate more mid-level cybercriminals to follow Scattered Spiders’ model, putting wide-reaching businesses at risk of ransomware attacks due to the rise of ransomware-as-a-service models.

Social Engineering 265

Social Engineering Passwords Authentication Marketing 265

Malwarebytes

OCTOBER 2, 2023

Meta has likely been using those posts to train its AI, according to the company's top policy executive. In an interview with Reuters , Meta President of Global Affairs Nick Clegg said the company used the public posts to train the LLM (large language model) that feeds into its new Meta AI virtual assistant.

Media 143

Media Artificial Intelligence Risk Cybersecurity 143

Schneier on Security

AUGUST 3, 2023

What distinguishes AI systems from these other internet services is how interactive they are, and how these interactions will increasingly become like relationships. This kind of conversational interface to the vast network of services and resources on the web is within the capabilities of existing generative AIs like ChatGPT.

Surveillance 229

Surveillance Internet Internet Technology 229

The Last Watchdog

SEPTEMBER 21, 2023

Each participating organization is committed to developing cyber skills and programs to train the workforce across a wide range of industries, including manufacturing. manufacturers from cyber-attacks by providing role-based training to the next generation of cybersecurity workers in manufacturing.

Manufacturing 147

Manufacturing Cybersecurity Artificial Intelligence Education 147

Malwarebytes

APRIL 7, 2024

Not surprisingly, small businesses in the professional services sector feel significantly more concerned about cybersecurity threats than those in manufacturing or services, but the poll explains that they also feel more prepared to handle them. Services businesses are right to be concerned.

Small Business 87

Small Business Cybersecurity Manufacturing Social Engineering 87

Krebs on Security

MAY 2, 2023

A sprawling online company based in Georgia that has made tens of millions of dollars purporting to sell access to jobs at the United States Postal Service (USPS) has exposed its internal IT operations and database of nearly 900,000 customers. These sites also sell training, supposedly to help ace an interview with USPS human resources.

Marketing 252

Marketing Advertising Scams Telecommunications 252

Security Affairs

NOVEMBER 6, 2022

At the end of October, a cyber attack caused the trains to stop in Denmark, the attack hit a third-party IT service provider. A cyber attack caused training the trains operated by DSB to stop in Denmark the last weekend, threat actors hit a third-party IT service provider. Supeo did not comment on the incident. .

Cyber Attacks 127

Cyber Attacks Ransomware Hacking Technology 127

Schneier on Security

JUNE 16, 2022

Interesting research: “ Sponge Examples: Energy-Latency Attacks on Neural Networks “: Abstract: The high energy costs of neural network training and inference led to the use of acceleration hardware such as GPUs and TPUs.

296

296

Dark Reading

OCTOBER 17, 2023

The two countries agree to share financial services information and provide cross-border training and best practices.

Financial Services 93

Financial Services Cybersecurity 93

Jane Frankland

JANUARY 16, 2024

Contract Terms Market intelligence firm, IDC, recently reported that one of the key areas of frustration for procuring MDR services is contract terms and duration. Unfortunately, this approach is far from ideal for security teams as the onboarding process for new services can be expensive and inefficient, ultimately impairing their agility.

Marketing 130

Marketing CISO Cybersecurity Technology 130

Thales Cloud Protection & Licensing

NOVEMBER 13, 2023

Defending Financial Services Against Fraud in a Shifting Cyber Landscape sparsh Tue, 11/14/2023 - 05:05 As we approach International Fraud Awareness Week during 12-18 November 2023, taking stock of the evolving threat landscape and the vulnerabilities that financial services organizations face is crucial.

Financial Services 104

Financial Services Encryption Cybercrime Threat Reports 104

Schneier on Security

OCTOBER 21, 2022

Here’s the latest: a training-time attack that forces the model to exhibit a point of view: Spinning Language Models: Risks of Propaganda-As-A-Service and Countermeasures.” Model spinning enables propaganda-as-a-service, where propaganda is defined as biased speech.

Media 225

Media Internet Internet Healthcare 225

Malwarebytes

AUGUST 30, 2023

The UK's National Cyber Security Centre (NCSC) has issued a warning about the risks of integrating large language models (LLMs) like OpenAI’s ChatGPT into other services. The NCSC points out several dangers associated with integrating a technology that is very much in early stages of development into other services and platforms.

Artificial Intelligence 110

Artificial Intelligence Technology Accountability Banking 110

The Last Watchdog

MAY 24, 2023

As a general rule, all organizations should have a secure operation center as well as a security incident management tool that’s either run internally 24 hours a day, seven days a week, or outsourced to a partner who provides managed-security services. Quite simply, investing in cybersecurity is a standard cost of doing business today.

Cybersecurity 171

Cybersecurity Backups Data breaches Technology 171

Security Affairs

APRIL 28, 2023

OpenAI announced that access to its chatbot service ChatGPT is allowed again in Italy after the company met the demands of regulators. At the time the privacy watchdog said that there is no legal basis underpinning the massive collection and processing of personal data to ‘train’ the algorithms on which the platform relies.

Education 97

Education Media Hacking Accountability 97

The Last Watchdog

APRIL 17, 2023

Related: Why timely training is a must-have That’s why businesses of all sizes need to understand the biggest cybersecurity weaknesses and take steps to mitigate them. Tick-in-the-box training. Getting security right early in the development cycle with well-architected services and systems reduces attack surface significantly.

Risk 174

Risk Cybersecurity Data breaches Cyber Attacks 174

CyberSecurity Insiders

JULY 19, 2021

A suspected ransomware attack on the servers of Northern Rail’s ticketing system has disrupted the digital services of the company from the past 12 hours and news is out that the operator might make a recovery only after 2 days.

Ransomware 143

Ransomware Government Encryption Malware 143

SecureWorld News

DECEMBER 6, 2023

Hospitals will be required to implement comprehensive cybersecurity programs, including vulnerability assessments, access controls, and security awareness training for their employees. The funding will support the acquisition of advanced cybersecurity tools, the training of cybersecurity professionals, and the modernization of IT systems.

Cyber Attacks 81

Cyber Attacks Healthcare Computers and Electronics Financial Services 81

CSO Magazine

JANUARY 10, 2023

More than 10,000 beneficiaries of a local branch of the French social security agency CAF, or Family Allowance Fund, saw their data exposed for about 18 months, after a file containing personal information was sent to a service provider. To read this article in full, please click here

109

109

The Last Watchdog

FEBRUARY 5, 2024

Exchange server ordeal Take what recently happened to iConnect Consulting , a San Francisco-based supplier of Laboratory Information Management System ( LIMs ) consulting services. iConnect faced a major disruption of its Exchange services, stemming from a corrupted RAID drive and extending into their backups.

Risk 239

Risk Backups Software Education 239

The Last Watchdog

SEPTEMBER 21, 2022

Cybersecurity experts are discussing a new trend in the cybercrime community called phishing-as-a-service. Phishing-as-a-Service (PhaaS). Countless organizations have adopted the “as-a-service (-aaS)” business model. PhaaS services are growing in popularity for a few reasons. Prioritize training. Rising popularity.

Phishing 153

Phishing Artificial Intelligence Cybercrime Social Engineering 153

Security Boulevard

JULY 29, 2022

As part of the Cyber Workforce and Education Summit held at the White House last week hosted by Chris Inglis, national cyber director, numerous organizations made pledges to boost training and education offerings. The post White House Announces Free Cybersecurity Training appeared first on Security Boulevard.

Cybersecurity 109

Cybersecurity Education Security Awareness 109

Bleeping Computer

JANUARY 21, 2022

Microsoft has started the forced rollout of Windows 10, version 21H2 to more devices approaching the end of service (EOS) as part of a first machine learning (ML) training phase. [.].

122

122

CyberSecurity Insiders

MARCH 31, 2023

Capita, an internationally acclaimed business processing & outsourcing firm, is experiencing a sudden halt in the operations of its IT services and suspects a cyber attack behind the disruption. But as they are still busy gathering evidence, they are not in a position to make it official.

Cyber Attacks 137

Cyber Attacks Government Ransomware Risk 137

Security Affairs

OCTOBER 18, 2023

In April, Google observed Russia-linked FROZENBARENTS APT (aka SANDWORM) impersonates Ukrainian drone training school to deliver the Rhadamanthys infostealer. The threat actors used a lure themed as an invitation to join the school, the email included a link to an anonymous file-sharing service, fex[.]net.

Cybercrime 126

Cybercrime Malware Software Hacking 126

CSO Magazine

MARCH 8, 2022

To help bring more people into cybersecurity careers, the need for access to training, career pathways and connecting individuals to employers is essential. As part of Fortinet’s focus on Women's Day, I had the opportunity to speak with Aimee Carter, the Director of Support Services at SymQuest in South Burlington, Vermont.

Cybersecurity 120

Cybersecurity 120

Dark Reading

JUNE 20, 2023

The tool trained on the company's investigative cybersecurity services data set, and provides natural language responses to client queries, to improve response and remediation efforts.

Cybersecurity 73

Cybersecurity 73