Security Weekly NewsSubscribe
Malware, Ransomware, ICS/SCADA

Chimera, Aliquippa, FNF, Lazarus, DARPA, Namedrop, Google, Aaran Leyland, and More – SWN #344

Full Audio

View Show Index

Segments

1. Chimera, Aliquippa, FNF, Lazarus, DARPA, Namedrop, Google, Aaran Leyland, and More – SWN #344

Chimera, Aliquippa, FNF, Lazarus, DARPA, Ransom Payments, Namedrop, Google, Aaran Leyland, and more are on this edition of the Security Weekly News.

Hosts

Professor at Roger Williams University
  1. 1. Hackers Hijack Industrial Control System at US Water Utility
  2. 2. Fidelity National Financial Takes Down Systems Following Cyberattack
  3. 3. North Korean supply chain attacks ‘growing in sophistication and volume’
  4. 4. When does it make sense to pay the ransom?
  5. 5. General Electric, DARPA Hack Claims Raise National Security Concerns
  6. 6. The mystery of the disappearing Google Drive files
  7. 7. Analysis
  8. 8. Hackers spent 2+ years looting secrets of chipmaker NXP before being detected
Cyber security lead EMEA at Defence
  1. 1. Guidelines for secure AI system development

    Executive summary This document recommends guidelines for providers of any systems that use artificial intelligence (AI), whether those systems have been created from scratch or built on top of tools and services provided by others. Implementing these guidelines will help providers build AI systems that function as intended, are available when needed, and work without revealing sensitive data to unauthorised parties.

    This document is aimed primarily at providers of AI systems who are using models hosted by an organisation, or are using external application programming interfaces (APIs). We urge all stakeholders (including data scientists, developers, managers, decision-makers and risk owners) to read these guidelines to help them make informed decisions about the design, development, deployment and operation of their AI systems.

Related

Fortinet, Palo Alto, VMWare – PSW #852

Fast cars kill people, Apple 0-Days, memory safety, poisoning the well, babble babble and malware that tries really hard to be stealthy, Palto Alto and Fortinet have some serious new vulnerabilities, open-source isn't free, but neither is commercial software, get on the TPM bus, find URLs with stealth, stealing credentials with more Palto Alto and ...
We’re Not Saying “I told you so” – PSW #850

In the news: Pacific Rim, Linux on Windows for attackers, one of the worst cases of a former employee's retaliation, Zery-Day FOMO, we predicted that, hacking for fun, working hard for no PoC, an LLM that discovers software vulnerabilities, absurd fines, long usernames and Okta, and paying a ransom with dough!
Everything is Overrated – PSW #847

Air gaps are still not air gapped, making old exploits new again, chaining exploits for full compromise, patching is overrated, SBOMs are overrated, VPNs are overrated, getting root with a cigarette lighter, you can be any user you want to be, in-memory Linux malware, the Internet Archive is back, we still don't know who created Bitcoin, unhackable...