Aggregator

'Frontier AI Framework' Identifies Risk Categories, Action Plan
Meta has set new limits on the release of its advanced artificial intelligence models, establishing a framework detailing the criteria for restricting systems deemed too dangerous for public release. Meta's Frontier AI Framework identifies two risk categories: high and critical.

Attacks Hit Hospitals, Clinics in California, Alabama and Colorado
Three healthcare entities - including a California hospital and outpatient care provider, an Alabama cardiology practice, and a Colorado community health system, are notifying a total of more than 1.2 million individuals that their sensitive information was compromised in 2024 hacks.

FIs Expected to Move from Periodic Reviews to Perpetual KYC
Banks are struggling to keep up with evolving KYC expectations. Despite efforts to modernize, outdated processes continue to leave compliance gaps, leading to increased regulatory action. Penalties for financial institutions surged with KYC-related fines more than doubling to $51 million.

Fraud groups are using cutting-edge technology to scale their operations to create fake identities and execute fraud campaigns.

The security startup's autonomous security remediation platform uses off-the-shelf large language models (LLMs) to analyze security alerts and apply the fixes.

Netgear disclosed two critical flaws impacting multiple WiFi router models and urges customers to address them. Netgear addressed two critical vulnerabilities, internally tracked as PSV-2023-0039 and PSV-2021-0117, impacting multiple WiFi router models and urged customers to install the latest firmware. The two flaws are, respectively, a remote code execution issue and an authentication bypass vulnerability. […]

Researchers measured a threefold increase in credential stealing between 2023 and 2024, with more than 11.3 million such thefts last year.

Espionage and Cybercrime Campaign Tied to 7-Zip Mark-of-the-Web Bypass Hits
Russian hackers targeting Ukrainian government agencies and businesses - including a major automotive manufacturer - have been targeting a zero-day vulnerability in the open source and widely used 7-Zip archive utility, to infect systems with credential-stealing SmokeLoader malware.

OneTrust's Ojas Rege Details Act Requirements, AI Governance Challenges
The first set of rules banning high-risk AI systems under the European Union AI Act went into effect on Sunday. Starting this week, companies are now barred from deploying AI-driven emotion recognition in the workplace and schools. OneTrust's Ojas Rege discusses the implications.

3rd Round of Layoffs in 3 Years Comes as Rival CyberArk Surpasses Okta's Valuation
Okta will execute its third round of layoffs in three years, cutting 180 employees to reallocate resources toward priorities to drive growth. The San Francisco-based identity security giant on Tuesday shared plans to reduce its staff by 3% in what has become somewhat of an annual tradition for Okta.

'Frontier AI Framework' Identifies Risk Categories, Action Plan
Meta has set new limits on the release of its advanced artificial intelligence models, establishing a framework detailing the criteria for restricting systems deemed too dangerous for public release. Meta's Frontier AI Framework identifies two risk categories: high and critical.

A vulnerability was found in CommodityRentals CD Rental Software and classified as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument cat_id leads to sql injection. This vulnerability is handled as CVE-2010-0762. The attack may be launched remotely. Furthermore, there is an exploit available.

The Age of AI Is Upon Us The current pace of technological change beggars’ belief. Generative Artificial Intelligence (GenAI), released to the world a mere two years ago, promises to eliminate much of the tedium of the digital world. Software engineers around the world are already using it to speed up their development times (making […]

The post How Imperva Infused AI Throughout Research and Development appeared first on Blog.

The post How Imperva Infused AI Throughout Research and Development appeared first on Security Boulevard.

Targets are lured into a fake interview process that convinces them to download malware needed for a virtual interview.

A vulnerability was found in Antiboard up to 0.63. It has been classified as critical. Affected is an unknown function of the file antiboard.php. The manipulation leads to sql injection. This vulnerability is traded as CVE-2004-2062. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability has been found in ID Software Quake 4 up to 1.4.2 and classified as very critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to format string. This vulnerability is known as CVE-2007-5248. The attack can be launched remotely. Furthermore, there is an exploit available.

Zyxel has issued a security advisory about actively exploited flaws in CPE Series devices, warning that it has no plans to issue fixing patches and urging users to move to actively supported models. [...]

A vulnerability classified as critical was found in Tecnick AIOCP 1.4.001. This vulnerability affects unknown code of the file cp_html2txt.php of the component Control Panel. The manipulation of the argument page leads to code injection. This vulnerability was named CVE-2009-3220. The attack can be initiated remotely. Furthermore, there is an exploit available.