10 days passed from OpenAI models exploiting JFrog Artifactory 0-day to release of a patch. Last week’s unprecedented security event in which two OpenAI security hacking models trespassed into the network of fellow AI company Hugging Face was enabled by exploiting one or more zero-day vulnerabilities in Artifactory, JFrog,…
Microsoft says tools cost less than competing ones and outperform them, too. Microsoft is introducing new AI tools designed to help customers continuously streamline and automate the process of identifying and reducing their exposure to security risks. The new tools come less than a week after OpenAI lost control…
“Current economic conditions” have shifted TreeSize’s business model. The company behind the disk space analyzer TreeSize has irked some users by no longer offering support or updates for perpetual licenses beyond their maintenance period unless customers subscribe. Further frustration has come from JAM Software’s long-standing policy of not providing…
Resellers threatened to ditch HP printing supplies for counterfeits. The Indian government has fined HP India and its partners a total of 1.4 billion rupees (about $14.4 million) for working with reseller partners in the “cartelization” of computers, ink cartridges, and toner. The Competition Commission of India (CCI) said…
The social-engineering technique has primarily been a tool of financially motivated criminals. One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices belonging to sensitive organizations in Ukraine, the latter country’s CERT center is warning. Clickfix has emerged as an…
Companies coming to market are raising money at fastest pace this century. Energy companies are raising money at IPO at their fastest pace this century, taking advantage of investors’ hunt for new ways to bet on the boom in power-intensive AI data centers. Initial public offerings for energy firms…
The convenience store chain will use StorMagic instead. Sheetz, a US convenience store chain, is moving its 838 locations off VMware. Sheetz has used VMware virtualization across two Dell R440/R450-series servers at each of its locations since 2019. Now it’s migrating 12 to 14 virtual machines (VMs) in each…
HiveLegacy is a “powerful primitive” that’s likely capable of other nefarious actions. Right on the heels of Microsoft releasing a record number of security patches, a researcher has published exploit code that can enable low-privilege Windows accounts to make sensitive changes to administrator accounts. The exploit, which multiple researchers…
Old and forgotten “shims” Microsoft failed to revoke have made Secure Boot bypasses simple. An industry-wide standard Microsoft invented to protect Windows, and later Linux, devices from firmware infections has been trivial to bypass for 13 of its 14 years of existence. The discovery was made by researchers at…
With residential proxies all the rage, CISA urges router users to be vigilant. The federal government is warning users of home and small office routers to secure their devices as Russia state hackers continue to mass-compromise them for use in obscuring nefarious actions against sensitive organizations in the public…
