Living in the shadow of AI borders.

Dec 12, 2024

Living in the shadow of AI borders.

This week we are joined by Petra Molnar, Harvard faculty associate, lawyer and author of the newly released book "The Walls Have Eyes: Surviving Migration in the Age of Artificial Intelligence," sharing how Big Tech and AI will enable Trump's immigration policies. Ben has an update on the effort to ban TikTok in the United States. Dave's got the story of the NYPD using city-wide surveillance to help catch the United Health Care CEO killer.

Caveat

Living in the shadow of AI borders.

Dec 12, 2024

Living in the shadow of AI borders.

This week we are joined by Petra Molnar, Harvard faculty associate, lawyer and author of the newly released book "The Walls Have Eyes: Surviving Migration in the Age of Artificial Intelligence," sharing how Big Tech and AI will enable Trump's immigration policies. Ben has an update on the effort to ban TikTok in the United States. Dave's got the story of the NYPD using city-wide surveillance to help catch the United Health Care CEO killer.

Caveat

Cybersecurity News

Daily Briefing

1 hour ago

Cleo urges customers to patch actively exploited vulnerability. Iran-linked threat actor deploys new ICS malware.

Law enforcement shutters the Rydox cybercrime marketplace.

The FAIK Files

11 hours ago

AI Gone Wild: Worrisome Leaks, Misguided Conspiracies, and More

Mason shares how ChatGPT became an unexpected hero in solving his home networking and studio challenges. Perry dives into the mysterious case of "David Mayer" and how a simple ChatGPT privacy patch sparked widespread conspiracy theories. We explore Tencent's bold entry into AI video generation with their open-source HunyuanVideo model. And in our AI Dumpster Fire of the Week, we unpack the drama surrounding leaks of multiple models from OpenAI.

CyberWire Daily

21 hours ago

When AI goes offline.

ChatGPT and Meta face widespread outages. Trump advisors explore splitting NSA and CyberCom leadership roles. A critical vulnerability in Apache Struts 2 has been disclosed. “AuthQuake” allowed attackers to bypass Microsoft MFA protections. Researchers identify Nova, a sophisticated variant of the Snake Keylogger malware. Adobe addresses critical vulnerabilities across their product line. Chinese law enforcement has been using spyware to collect data from Android devices since 2017. A new report highlights the gaps in hardware and firmware security management. A Krispy Kreme cyberattack creates a sticky situation. N2K’s Executive Editor Brandon Karpf speaks with guest Mike Silverman, Chief Strategy and Innovation Officer at the FS-ISAC discussing cryptographic agility. Do Not Track bids a fond farewell.

Caveat

21 hours ago

US appeals court upholds TikTok ban law. US alleges Chinese hackers targeted senior officials.

US appeals court upholds TikTok ban law. US alleges Chinese hackers targeted senior officials.

Daily Briefing

Dec 12, 2024

Outages hit Meta and OpenAI products.

Microsoft patches against technique to bypass multifactor authentication. Researchers describe Nova, a new version of the Snake Keylogger.

Threat Vector

Dec 12, 2024

Decoding XDR: Allie Mellen on What’s Next

Join host David Moulton on Threat Vector, as he dives deep into the rapidly evolving XDR landscape with Allie Mellen, Principal Analyst at Forrester. With expertise in security operations, nation-state threats, and the application of AI in security, Allie offers an inside look at how XDR is reshaping threat detection and response. From tackling the SIEM market’s current challenges to optimizing detection engineering, Allie provides invaluable insights into the people, processes, and tools central to an effective SOC. This episode offers listeners a thoughtful exploration of how to navigate today's complex threat landscape and separate XDR hype from reality. Perfect for cybersecurity professionals looking to stay ahead in the field, tune in to hear expert perspectives on the next steps in cybersecurity resilience.

Hacking Humans

Dec 12, 2024

Silent push, loud consequences.

On Hacking Humans, Dave Bittner, Joe Carrigan, and Maria Varmazis (also host of N2K's daily space podcast, T-Minus), are once again sharing the latest in social engineering scams, phishing schemes, and criminal exploits that are making headlines to help our audience become aware of what is out there. This week, Maria shares two stories this week, the first is from "PayPal" saying they are owed over $200. The second comes from LinkedIn where a gentleman shares the terrifying story of losing everything all because of a scam. Joe's story is on text message scams where strangers pretend to know you, building trust over time to lure victims into schemes like cryptocurrency fraud; he advises ignoring unknown messages, blocking suspicious numbers, avoiding links, and protecting personal information. Dave's story follows Silent Push Threat Analysts tracking "Payroll Pirates," a group leveraging phishing campaigns targeting HR systems like Workday to redirect payroll funds by using search ads, spoofed websites, and credential harvesting, as they alert organizations and share threat intelligence to counter these sophisticated attacks. Our catch of the day comes from a phishing scam email claiming to offer a $1.75 million compensation fund via the "United Bank for Africa," requiring victims to share personal and banking details under the guise of an IMF directive.

CyberWire Daily

Dec 11, 2024

When exploits go wild and patches race the clock.

Microsoft confirms a critical Windows zero-day vulnerability. Global law enforcement agencies dismantle 27 DDoS platforms. Researchers compromise memory in AMD virtual machines. Ivanti reports multiple critical vulnerabilities in its Cloud Services Application. Group-IB researchers expose a sophisticated global phishing campaign. A zero-day vulnerability in Cleo’s managed file transfer software is under active exploitation. The U.S. sanctions a Chinese firm for a 2020 firewall exploit. Congress looks to require the FCC to regulate telecom cybersecurity. Our guest is Malachi Walker, Security Strategist at DomainTools, discussing their role in ODNI's newly established Sentinel Horizon Program. SpartanWarriorz dodge a Telegram crackdown.

Business

Dec 11, 2024

Citrix acquires deviceTRUST and Strong Network. Bitsight completes acquisition of Cybersixgill. Axiado raises $60 million.

Citrix acquires deviceTRUST and Strong Network. Bitsight completes acquisition of Cybersixgill. Axiado raises $60 million.

Daily Briefing

Dec 11, 2024

Microsoft patches an actively exploited vulnerability. Chinese APT abuses Visual Studio Code Tunnels for C2 purposes.

Europol operation seizes DDoS booters.

Microsoft

Dec 11, 2024

Johann Rehberger on Researching AI & LLM Attacks

In this episode of The BlueHat Podcast, hosts Nic Fillingham and Wendy Zenone are joined by Johann Rehberger, security expert and Red Team director at Electronic Arts. Johann shares his career journey through roles at Microsoft, Uber, and EA, highlighting his expertise in red teaming and cybersecurity. Johann shares the inspiration behind his book on Red Team strategies and discusses his BlueHat 2024 talk on prompt injection vulnerabilities, a critical and evolving AI security challenge. Johann breaks down the distinction between prompt injection and jailbreaking, offering insights into the potential risks, including data exfiltration and system unavailability, and emphasizes the importance of securing Red Teams themselves.

SpyCast

Dec 10, 2024

“An Imperial History of the CIA” – with Hugh Wilford

Hugh Wilford joins Andrew Hammond to discuss his new book. Hugh is a professor, author, and leading CIA historian.

Load More