brangberg – Page 955

Now on Demand: Zero Trust Strategies Summit – All Sessions Available

With all sessions now available on demand, the online summit is laser focused on helping organizations to level up their Identity and Zero Trust security strategies.

The post Now on Demand: Zero Trust Strategies Summit – All Sessions Available appeared first on SecurityWeek.

ShadowLogic Attack Targets AI Model Graphs to Create Codeless Backdoors

HiddenLayer details ShadowLogic, a new method of creating codeless backdoors in AI models by manipulating their graphs.

The post ShadowLogic Attack Targets AI Model Graphs to Create Codeless Backdoors appeared first on SecurityWeek.

Relyance AI Raises $32 Million for Data Governance Platform

Relyance AI has raised $32 million in Series B funding to develop its data governance platform and scale operations.

The post Relyance AI Raises $32 Million for Data Governance Platform appeared first on SecurityWeek.

How Hybrid Password Attacks Work and How to Defend Against Them

Threat actors constantly change tactics to bypass cybersecurity measures, developing innovative methods to steal user credentials. Hybrid password attacks merge multiple cracking techniques to amplify their effectiveness. These combined approaches exploit the strengths of various methods, accelerating the password-cracking process.
In this post, we’ll explore hybrid attacks — what they are

Recent Veeam Vulnerability Exploited in Ransomware Attacks

Sophos warns of ransomware operators exploiting a critical code execution vulnerability in Veeam Backup & Replication.

The post Recent Veeam Vulnerability Exploited in Ransomware Attacks appeared first on SecurityWeek.

Fidelity Investments Data Breach Impacts 77,000 Customers

Fidelity Investments is informing 77,000 individuals that their personal information was compromised in a data breach.

The post Fidelity Investments Data Breach Impacts 77,000 Customers appeared first on SecurityWeek.

GitLab Patches Pipeline Execution, SSRF, XSS Vulnerabilities

The latest GitLab update resolves eight vulnerabilities, including critical- and high-severity pipeline execution flaws.

The post GitLab Patches Pipeline Execution, SSRF, XSS Vulnerabilities appeared first on SecurityWeek.

OpenAI Says Iranian Hackers Used ChatGPT to Plan ICS Attacks

OpenAI has disrupted 20 cyber and influence operations this year, including the activities of Iranian and Chinese state-sponsored hackers.

The post OpenAI Says Iranian Hackers Used ChatGPT to Plan ICS Attacks appeared first on SecurityWeek.

CISA Warns of Threat Actors Exploiting F5 BIG-IP Cookies for Network Reconnaissance

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that it has observed threat actors leveraging unencrypted persistent cookies managed by the F5 BIG-IP Local Traffic Manager (LTM) module to conduct reconnaissance of target networks.
It said the module is being used to enumerate other non-internet-facing devices on the network. The agency, however, did not disclose who

New Critical GitLab Vulnerability Could Allow Arbitrary CI/CD Pipeline Execution

GitLab has released security updates for Community Edition (CE) and Enterprise Edition (EE) to address eight security flaws, including a critical bug that could allow running Continuous Integration and Continuous Delivery (CI/CD) pipelines on arbitrary branches.
Tracked as CVE-2024-9164, the vulnerability carries a CVSS score of 9.6 out of 10.

“An issue was discovered in GitLab EE

Author: brangberg