Security Leftovers
-
Federal News Network ☛ CISA deepens coordination with agencies on ‘systemic’ risks
CISA is still on the hook to define "systemically important entities" as it responds to critical infrastructure risks ranging from cyber attacks to hurricanes.
-
Silicon Angle ☛ Google’s Big Sleep Hey Hi (AI) model sets world first with discovery of SQLite security flaw
Google LLC revealed today that it has uncovered a previously unknown vulnerability using artificial intelligence, a claimed world first that could mark the beginning of Hey Hi (AI) being used at the forefront of security vulnerability detection.
-
Bruce Schneier ☛ AIs Discovering Vulnerabilities
I’ve been writing about the possibility of AIs automatically discovering code vulnerabilities since at least 2018. This is an ongoing area of research: AIs doing source code scanning, AIs finding zero-days in the wild, and everything in between.
-
Scoop News Group ☛ Schneider Electric reports cyberattack, its third incident in 18 months
The ransomware group HellCat claims responsibility for the cyberattack and threatens to dump 40GB.
-
Silicon Angle ☛ Ransomware gang demands ransom payment in Schneider Electric data breach: baguettes
French multinational digital automation and energy firm Schneider Electric SE has been breached and had data stolen, but the ransom payment those behind the theft are demanding is not money. It’s baguettes. Lots of baguettes.
-
Citizen Lab ☛ The Citizen Lab at the Hague Program’s 2024 Conference on International Cyber Security
On November 13, 2024, The Citizen Lab’s director Ron Deibert will deliver a keynote titled “Digital parasites: Mapping the new frontiers of espionage, subversion, and Dark PR” at The Hague Program’s 2024 Conference on International Cyber Security. Visit the The Hague Program to learn more.