LRQA Nettitude Labs

DECEMBER 14, 2023

So, AI, or as I like to call it, spicy autocomplete, is about making machines act smart. They can learn, think, solve problems – basically, they’re trying to outdo us at our own game. It’s like a digital con artist whispering chaos into the ears of our so-called intelligent machines. What is AI and what are its uses?

Artificial Intelligence 61

Artificial Intelligence Technology Penetration Testing Engineering 61

NopSec

APRIL 7, 2019

Spam detection, facial recognition, market segmentation, social network analysis, personalized product recommendations, self-driving cars – applications of machine learning (ML) are everywhere around us. For example, we could tag all messages that contain the expression ‘make money’ as spam.

Cybersecurity 52

Cybersecurity Data breaches Malware Risk 52

Centraleyes

APRIL 16, 2024

Automated classification tags enable the institution to enforce stringent access controls and encryption measures, ensuring the utmost protection for sensitive financial data. Machine learning algorithms, trained on historical data, enable proactive defense by predicting and preventing unauthorized access or data exfiltration.

Encryption 52

Encryption Education Risk Healthcare 52

SecureList

OCTOBER 28, 2021

This summer Kaspersky experts took part in the Machine Learning Security Evasion Competition ( MLSEC ) — a series of trials testing contestants’ ability to create and attack machine learning models. We added popular header tags, such as <meta>, which somehow led to poorer results on the first three models.

Phishing 62

Phishing Malware Architecture Technology 62

Troy Hunt

AUGUST 5, 2021

These machines came courtesy of the Insiders program so full disclosure, I didn't pay for them. But also full disclosure, I do buy Lenovo machines at full retail with my own hard-earned dollars because frankly, they're awesome: Bought @charlottelyng a *very* nice Lenovo ThinkPad X1 Extreme to replace her MacBook Pro.

Education 70

Education Technology Software Retail 70

Security Boulevard

FEBRUARY 17, 2022

And by studying these common vulnerability types, why they happen, and how to spot them, you can learn to prevent them and secure your application. Learn how these attacks work and how to prevent them here. But the SOP does not limit javascript code, and the HTML <script> tag is allowed to load Javascript code from any origin.

Authentication 105

Authentication Encryption Engineering Firewall 105

Security Boulevard

FEBRUARY 12, 2021

ENTITY file SYSTEM "file:///secrets.txt" > ]> <example>&file;</example> If users can declare arbitrary XML entities in their uploads, they can declare an external entity to any location on your machine. They can access and exfiltrate files such as system files, source code, directory listings on the local machine.

Software 59

Software Encryption Passwords Engineering 59

Kali Linux

MARCH 12, 2023

Stay tuned for a blog post coming out for more information! Your browser does not support the video tag. You can learn more about the latest changes in the Plasma 5.27 Your browser does not support the video tag. We have a RSS feeds and newsletter of our blog ! Edit: Its out ! The changelog summary since the 2022.4

Firmware 52

Firmware Architecture Engineering Technology 52

Security Boulevard

SEPTEMBER 1, 2021

<a href='/blog?tag=Cybersecurity'>Cybersecurity</a> tag=Cybersecurity'>Cybersecurity</a> <a href='/blog?tag=Ransomware'>Ransomware</a> tag=Ransomware'>Ransomware</a> <a href='/blog?tag=Cyber-attacks'>Cyber-attacks</a> Additional Resources.

Digital transformation 145

Digital transformation Cybersecurity Cyber threats IoT 145

Thales Cloud Protection & Licensing

APRIL 17, 2024

Stealing the Model: AI models are the crown jewels of organizations leveraging machine learning algorithms. Data poisoning involves injecting malicious inputs into training datasets, corrupting the learning process, and compromising the model's performance. This should help them stay a step ahead of adversaries.

Risk 71

Risk Data collection Artificial Intelligence Accountability 71

Security Boulevard

APRIL 17, 2024

Stealing the Model: AI models are the crown jewels of organizations leveraging machine learning algorithms. Data poisoning involves injecting malicious inputs into training datasets, corrupting the learning process, and compromising the model's performance. This should help them stay a step ahead of adversaries.

Risk 69

Risk Data collection Artificial Intelligence Accountability 69

Security Boulevard

FEBRUARY 21, 2024

Part 1 of this 2-part blog highlights some of the latest improvements with HYAS Insight. HYAS verdicts compress the outputs of over 50 proprietary rules, machine learning algorithms, and processes into a single Benign, Suspicious, or Malicious verdict. You can group by malware family, malware tags, and C2 ASNs.

DNS 49

DNS Malware Engineering Cybersecurity 49

Elie

AUGUST 31, 2017

This series of three blog posts summarizes the key findings of our large-scale study. This blog post, the first in the series, explains the methodology and techniques we developed to trace ransomware payments end-to-end. This was a titanesque task as there were 34 families (as shown in the tag cloud above) and hundreds of variants.

Ransomware 115

Ransomware Backups Encryption Scams 115

Cisco Security

AUGUST 28, 2023

The same script was then copied and amended to add tags to devices. So, to make this flexible, we use tags in Meraki Systems Manager speak. This means that if you tag a device, and tag a setting or application, that device gets that application, and so on. However, it didn’t work. We did the same thing in Singapore.

Wireless 63

Wireless DNS Mobile Technology 63

SecureList

APRIL 27, 2021

Readers who would like to learn more about our intelligence reports or request more information on a specific report are encouraged to contact intelreports@kaspersky.com. In November and December 2020, two public blog posts were published about this campaign. The most remarkable findings.

Malware 138

Malware Spyware Government Social Engineering 138

ForAllSecure

MAY 13, 2022

And in a moment, we'll hear how he took it upon himself to learn all that he could about smart meters. Vamosi: So it began as a challenge posted in Hackaday and curiosity to learn more about LIDAR. Everybody's got their own little blog where they post stuff. That's how hash started down the road. of reverse engineering.

Engineering 52

Engineering Energy and Utilities Computers and Electronics Firmware 52

Scary Beasts Security

MAY 5, 2017

For what it’s worth, the woeful state of WebKit packaging on Linux was discussed in Feb 2016 in this blog post , which was picked up by Linux Weekly News. side effects that are possible, we’re into a blossoming tree of weird machine explorations! [Note: since starting to write this post, Ubuntu 12.04 LTS has passed end of life.]

Hacking 126

Hacking Mobile Accountability 126

SecureList

NOVEMBER 14, 2022

Last June, Google’s TAG team released a blog post documenting attacks on Italian and Kazakh users that they attribute to RCS Lab, an Italian offensive software vendor. In line with our predictions, we released two blog posts in 2022 introducing sophisticated low-level bootkits. The next WannaCry.

Firmware 106

Firmware Surveillance Mobile Telecommunications 106