General Cyber News via Ars Technica Risk Assessment

Hackers infect users of antivirus service that delivered updates over HTTP

eScan AV updates were delivered over HTTP for five years.
Publish Date: 4/23/2024
read more -->

Microsoft’s Phi-3 shows the surprising power of small, locally run AI language models

Microsoft’s 3.8B parameter Phi-3 may rival GPT-3.5, signaling a new era of “small language models."
Publish Date: 4/23/2024
read more -->

Windows vulnerability reported by the NSA exploited to install Russian malware

Microsoft didn't disclose the in-the-wild exploits by Kremlin-backed group until now.
Publish Date: 4/22/2024
read more -->

Microsoft’s VASA-1 can deepfake a person with one photo and one audio track

YouTube videos of 6K celebrities helped train AI model to animate photos in real time.
Publish Date: 4/19/2024
read more -->

LLMs keep leaping with Llama 3, Meta’s newest open-weights AI model

Zuckerberg says new AI model "was still learning" when Meta stopped training.
Publish Date: 4/18/2024
read more -->

LastPass users targeted in phishing attacks good enough to trick even the savvy

Campaign used email, SMS, and voice calls to trick targets into divulging master passwords.
Publish Date: 4/18/2024
read more -->

OpenAI winds down AI image generator that blew minds and forged friendships in 2022

How a group of friends found themselves at the center of a fierce debate about the future of art.
Publish Date: 4/18/2024
read more -->

Kremlin-backed actors spread disinformation ahead of US elections

To a lesser extent, China and Iran also peddle disinfo in hopes of influencing voters.
Publish Date: 4/17/2024
read more -->

Broadcom says “many” VMware perpetual licenses got support extensions

Broadcom reportedly accused of changing VMware licensing and support conditions.
Publish Date: 4/17/2024
read more -->

Linus Torvalds reiterates his tabs-versus-spaces stance with a kernel trap

One does not simply suggest changing a kernel line to help out a parsing tool.
Publish Date: 4/16/2024
read more -->

Attackers are pummeling networks around the world with millions of login attempts

Attacks coming from nearly 4,000 IP addresses take aim at VPNs, SSH and web apps.
Publish Date: 4/16/2024
read more -->

New UK law targets “despicable individuals” who create AI sex deepfakes

Under new law, those who create the images would face a fine and possible jail time.
Publish Date: 4/16/2024
read more -->

Why the US government’s overreliance on Microsoft is a big problem

Microsoft continues to get a free pass after series of cybersecurity failures.
Publish Date: 4/16/2024
read more -->

Alleged cryptojacking scheme consumed $3.5M of stolen computing to make just $1M

Indictment says man tricked cloud providers into giving him services he never paid for.
Publish Date: 4/15/2024
read more -->

Framework’s software and firmware have been a mess, but it’s working on them

New features, security updates, and Linux support are all on a long to-do list.
Publish Date: 4/15/2024
read more -->

Change Healthcare faces another ransomware threat—and it looks credible

Hackers already received a $22 million payment. Now a second group demands money.
Publish Date: 4/13/2024
read more -->

“Highly capable” hackers root corporate networks by exploiting firewall 0-day

No patch yet for unauthenticated code-execution bug in Palo Alto Networks firewall.
Publish Date: 4/12/2024
read more -->

Words are flowing out like endless rain: Recapping a busy week of LLM news

Gemini 1.5 Pro launch, new version of GPT-4 Turbo, new Mistral model, and more.
Publish Date: 4/12/2024
read more -->

Intel’s “Gaudi 3” AI accelerator chip may give Nvidia’s H100 a run for its money

Intel claims 50% more speed when running AI language models vs. the market leader.
Publish Date: 4/11/2024
read more -->

Hackable Intel and Lenovo hardware that went undetected for 5 years won’t ever be fixed

Multiple links in the supply chain failed for years to identify an unfixed vulnerability.
Publish Date: 4/11/2024
read more -->


Copyright Ⓒ 2010 SecuritySpecifiers™