developers

Developers Beware: Slopsquatting & Vibe Coding Can Increase Risk of AI-Powered Attacks

Posted on by Admin
Developers Beware: Slopsquatting & Vibe Coding Can Increase Risk of AI-Powered Attacks

Security researchers and developers are raising alarms over “slopsquatting,” a new form of supply chain attack that leverages AI-generated misinformation commonly known as hallucinations. As developers increasingly rely on coding tools like GitHub Copilot, ChatGPT, and DeepSeek, attackers are exploiting AI’s tendency to invent software packages, tricking users into downloading malicious content. What is slopsquatting? The term slopsquatting was originally coined by Seth Larson, a developer with the Python Software Foundation, and later popularized by…

Read More

OpenAI Seeks Feedback About Open Model That Will Be Revealed ‘In the Coming Months’

Posted on by Admin
OpenAI Seeks Feedback About Open Model That Will Be Revealed ‘In the Coming Months’

Image credit: Creative Commons Developers have the opportunity to weigh in on OpenAI’s latest project. On March 31, the AI giant published applications for feedback sessions on an upcoming open language model, the second such model since OpenAI’s LLMs went private after GPT-2. It will be released “in the coming months,” according to a post on X by OpenAI CEO Sam Altman. Open-weight models can be modified by their users. In particular, “weights” in generative…

Read More

Android Malware Exploits a Microsoft-Related Security Blind Spot to Avoid Detection

Posted on by Admin
Android Malware Exploits a Microsoft-Related Security Blind Spot to Avoid Detection

This Motorola Moto G Power 5G shows the midnight blue color option. Image: Amazon New Android malware is using Microsoft’s .NET MAUI to fly under the radar in a new cybersecurity dust-up this week. Disguised as actual services such as banking and social media apps targeting Indian and Chinese-speaking users, the malware is designed to gain access to sensitive information. Cybersecurity experts with McAfee’s Mobile Research Team say that, while the threat is currently aimed…

Read More

Google Acquires Startup Wiz for $32B to 'Turbocharge Improved Cloud Security’

Posted on by Admin
Google Acquires Startup Wiz for B to 'Turbocharge Improved Cloud Security’

Image: Wiz Google has announced it is acquiring cybersecurity startup Wiz for $32 billion. The acquisition is parent company Alphabet’s largest to date, more than doubling its previous record-breaking $12.5 billion purchase of Motorola Mobility in 2012. The company appears to have pursued this deal aggressively due to the growing demand for secure cloud services. The surge in generative AI has prompted tech companies to rush for cloud infrastructure, while major security incidents, such as…

Read More

OpenAI, Anthropic AI Research Reveals More About How LLMs Affect Security and Bias

Posted on by Admin
OpenAI, Anthropic AI Research Reveals More About How LLMs Affect Security and Bias

Because large language models operate using neuron-like structures that may link many different concepts and modalities together, it can be difficult for AI developers to adjust their models to change the models’ behavior. If you don’t know what neurons connect what concepts, you won’t know which neurons to change. On May 21, Anthropic published a remarkably detailed map of the inner workings of the fine-tuned version of its Claude AI, specifically the Claude 3 Sonnet…

Read More

Anthropic’s Generative AI Research Reveals More About How LLMs Affect Security and Bias

Posted on by Admin
Anthropic’s Generative AI Research Reveals More About How LLMs Affect Security and Bias

Because large language models operate using neuron-like structures that may link many different concepts and modalities together, it can be difficult for AI developers to adjust their models to change the models’ behavior. If you don’t know what neurons connect what concepts, you won’t know which neurons to change. On May 21, Anthropic created a remarkably detailed map of the inner workings of the fine-tuned version of its Claude 3 Sonnet 3.0 model. With this…

Read More

XZ Utils Supply Chain Attack: A Threat Actor Spent Two Years to Implement a Linux Backdoor

Posted on by Admin
XZ Utils Supply Chain Attack: A Threat Actor Spent Two Years to Implement a Linux Backdoor

A threat actor quietly spent the last two years integrating themself in the core team of maintainers of XZ Utils, a free software command-line data compressor widely used in Linux systems. The attacker slowly managed to integrate a backdoor in the software that was designed to interfere with SSHD and allow remote code execution via an SSH login certificate. The backdoor was discovered a few days before being released on several Linux systems worldwide. The…

Read More

Google Adds Gemini Pro API to AI Studio and Vertex AI

Posted on by Admin
Google Adds Gemini Pro API to AI Studio and Vertex AI

Starting Dec. 13, developers can use Google AI Studio and Vertex AI to build applications with the Gemini Pro API, which allows access to Google’s new generative AI model. Google’s initial rollout of Gemini was limited to Google Bard and the Pixel 8 Pro, so Wednesday’s general availability of Gemini for Google AI Studio and Vertex AI marks the first test of Gemini for enterprise developers. AI Studio and Vertex AI with Gemini can help…

Read More

New AI Security Guidelines Published by NCSC, CISA & More International Agencies

Posted on by Admin
New AI Security Guidelines Published by NCSC, CISA & More International Agencies

The U.K.’s National Cyber Security Centre, the U.S.’s Cybersecurity and Infrastructure Security Agency and international agencies from 16 other countries have released new guidelines on the security of artificial intelligence systems. The Guidelines for Secure AI System Development are designed to guide developers in particular through the design, development, deployment and operation of AI systems and ensure that security remains a core component throughout their life cycle. However, other stakeholders in AI projects should find…

Read More

Kaspersky’s Advanced Persistent Threats Predictions for 2024

Posted on by Admin
Kaspersky’s Advanced Persistent Threats Predictions for 2024

Kaspersky’s new report provides the company’s view on the advanced persistent threats landscape for 2024. Existing APT techniques will keep being used, and new ones will likely emerge, such as the increase in AI usage, hacktivism and targeting of smart home tech. New botnets and rootkits will also likely appear, and hacker-for-hire services might increase, as will supply chain attacks, which might be provided as a service on cybercriminals’ underground forums. Jump to: More exploitation…

Read More