Sat.Jan 25, 2025 - Fri.Jan 31, 2025

article thumbnail

Breach Roundup: DeepSeek Leaked Sensitive Data

Data Breach Today

Also: Infostealer Malware Compromises Mexican Government Computers This week, DeepSeek exposed sensitive data, hackers exploited unpatched Zyxel flaws, infostealer malware on Mexican government computers, Smiths Group incident, PowerSchool breach notifications, an Apple zero-day, XWorm RAT backdoor, and Credit Control Corporation settled a lawsuit.

article thumbnail

Apple researchers reveal the secret sauce behind DeepSeek AI

Collaboration 2.0

The AI model that shook the world is part of a broad trend to squeeze more out of chips using what's called sparsity.

363
363
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

DeepSeek’s Popular AI App Is Explicitly Sending US Data to China

WIRED Threat Level

Amid ongoing fears over TikTok, Chinese generative AI platform DeepSeek says its sending heaps of US user data straight to its home country, potentially setting the stage for greater scrutiny.

IT 353
article thumbnail

Change Healthcare data breach exposed the private data of over half the U.S.

Security Affairs

The Change Healthcare data breach is worse than initially estimated: approximately 190 million people have been affected. The Change Healthcare data breach is worse than initially estimated, the incident has impacted 190 million people. In October 2024, UnitedHealth Group announced that the data breach suffered by Change Healthcare in February 2024 impacted more than 100 million individuals.

article thumbnail

How to Achieve High-Accuracy Results When Using LLMs

Speaker: Ben Epstein, Stealth Founder & CTO | Tony Karrer, Founder & CTO, Aggregage

When tasked with building a fundamentally new product line with deeper insights than previously achievable for a high-value client, Ben Epstein and his team faced a significant challenge: how to harness LLMs to produce consistent, high-accuracy outputs at scale. In this new session, Ben will share how he and his team engineered a system (based on proven software engineering approaches) that employs reproducible test variations (via temperature 0 and fixed seeds), and enables non-LLM evaluation m

article thumbnail

FBI, Dutch Police Disrupt ‘Manipulaters’ Phishing Gang

Krebs on Security

The FBI and authorities in The Netherlands this week seized dozens of servers and domains for a hugely popular spam and malware dissemination service operating out of Pakistan. The proprietors of the service, who use the collective nickname “ The Manipulaters ,” have been the subject of three stories published here since 2015. The FBI said the main clientele are organized crime groups that try to trick victim companies into making payments to a third party.

Phishing 235

More Trending

article thumbnail

Exposed DeepSeek Database Revealed Chat Prompts and Internal Data

WIRED Threat Level

China-based DeepSeek has exploded in popularity, drawing greater scrutiny. Case in point: Security researchers found more than 1 million records, including user data and API keys, in an open database.

Security 346
article thumbnail

DeepSeek database exposed highly sensitive information

Security Affairs

Chinese AI platform DeepSeek has publicly exposed two databases containing highly sensitive user and backend details. Wiz Research discovered a publicly accessible ClickHouse database belonging to DeepSeek, exposing chat history, secret keys, and backend details. After responsible disclosure, DeepSeek promptly secured the issue. “Within minutes, we found a publicly accessible ClickHouse database linked to DeepSeek, completely open and unauthenticated, exposing sensitive data.

Metadata 302
article thumbnail

DeepSeek AI Models Vulnerable to JailBreaking

Data Breach Today

Researchers uncovered flaws in large language models developed by Chinese artificial intelligence company DeepSeek, including in its flagship R1 reasoning application. The security concerns come as Microsoft and OpenAI investigate whether DeepSeek developed used data scraped from an OpenAI API.

article thumbnail

Finally, Bluetooth trackers for Android users that function even better than AirTags

Collaboration 2.0

Chipolo's One and Card trackers are perfect for people who often lose their keys and wallet. You can buy them in either single units or multipacks.

350
350
article thumbnail

Zero Trust Mandate: The Realities, Requirements and Roadmap

The DHS compliance audit clock is ticking on Zero Trust. Government agencies can no longer ignore or delay their Zero Trust initiatives. During this virtual panel discussion—featuring Kelly Fuller Gordon, Founder and CEO of RisX, Chris Wild, Zero Trust subject matter expert at Zermount, Inc., and Principal of Cybersecurity Practice at Eliassen Group, Trey Gannon—you’ll gain a detailed understanding of the Federal Zero Trust mandate, its requirements, milestones, and deadlines.

article thumbnail

DeepSeek’s Safety Guardrails Failed Every Test Researchers Threw at Its AI Chatbot

WIRED Threat Level

Security researchers tested 50 well-known jailbreaks against DeepSeeks popular new AI chatbot. It didnt stop a single one.

IT 328
article thumbnail

Broadcom fixed information disclosure flaws in VMware Aria Operations

Security Affairs

Broadcom patched five flaws in VMware Aria Operations and Aria Operations for Logs that could lead to privilege escalation and credential theft. Broadcom addressed the following vulnerabilities in VMware Aria Operations and Aria Operations for Logs: CVE-2025-22218 (CVSS score 8.5) is an information disclosure vulnerability in VMware Aria Operations for Logs.A threat actor with View Only Admin permissions could exploit the issue to read thecredentialsof a VMware product integrated with VMware Ari

article thumbnail

Good Governance is About the “Why”

Weissman's World

I get inquiries all the time from people seeking support as they ready to tackle what sound like fairly specific records and information governance issues. Lately, these types of inquiries have fallen into these three general areas: Getting rid of paper Moving to the cloud Preparing for AI These descriptors which well use throughout… Read More » Good Governance is About the Why The post Good Governance is About the Why appeared first on Holly Group.

article thumbnail

Samsung Galaxy S25 Ultra vs. OnePlus 13: I tested both, and the winner surprised me

Collaboration 2.0

Between the two best Android phones right now, which one should you buy? Based on my testing, it'll depend on these key differences.

330
330
article thumbnail

5 Ways You Can Win Faster with Gen AI in Sales

Incorporating generative AI (gen AI) into your sales process can speed up your wins through improved efficiency, personalized customer interactions, and better informed decision- making. Gen AI is a game changer for busy salespeople and can reduce time-consuming tasks, such as customer research, note-taking, and writing emails, and provide insightful data analysis and recommendations.

article thumbnail

Scammers Are Creating Fake News Videos to Blackmail Victims

WIRED Threat Level

Yahoo Boy scammers are impersonating CNN and other news organizations to create videos that pressure victims into making blackmail payments.

Privacy 237
article thumbnail

TeamViewer fixed a vulnerability in Windows client and host applications

Security Affairs

TeamViewer has patched a high-severity privilege escalation vulnerability affecting its Windows client and host applications. TeamViewer released security patches for a high-severity elevation of privilege vulnerability, tracked as CVE-2025-0065 (CVSS score of 7.8), in its remote access solutions for Windows. The vulnerability is an improper neutralization of argument delimiters in the TeamViewer_service.exe component of TeamViewer Full Client & Host prior to version 15.62 for Windows.

Access 281
article thumbnail

Mega-Breaches Bump Up 2024 Victim Count

Data Breach Today

Identity Theft Resource Center Catalogs 3,158 Known US Incidents in 2024 The number of U.S. organizations falling victim to a data breach appears to be holding steady, as viewed on an annual basis, according to the latest annual data breach report from the Identity Theft Resource Center, which counted 3,158 reported data breaches in 2024, down just 1% from 2023.

article thumbnail

How to clear the cache on your Windows 11 PC (and why it makes such a big difference)

Collaboration 2.0

Clearing the cache and removing temporary files can speed up your PC. Even better: all of these utilities are already on your computer.

IT 325
article thumbnail

Prevent Data Breaches With Zero-Trust Enterprise Password Management

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

article thumbnail

The Trial at the Tip of the Terrorgram Iceberg

WIRED Threat Level

Atomwaffen Division cofounder and alleged Terrorgram Collective member Brandon Russell is facing a potential life sentence for an alleged plot on a Baltimore electrical station. His case is only the beginning.

Security 222
article thumbnail

Italy’s Data Protection Authority Garante requested information from Deepseek

Security Affairs

Italys data privacy regulator Garante has requested information from Chinese AI company DeepSeek regarding its data practices. Italys Data Protection Authority Garante has asked the AI firm DeepSeek to clarify its data collection, sources, purposes, legal basis, and storage, citing potential risks to user data. “The Italian Data Protection Authority has sent a request for information to Hangzhou DeepSeek Artificial Intelligence and Beijing DeepSeek Artificial Intelligence, the companies th

article thumbnail

OpenAI Unveils o3-mini With Enhanced Coding, STEM Reasoning

Data Breach Today

OpenAI's New Cost-Efficient AI Reasoning Model Excels in Math, Coding, and Science OpenAI has launched o3-mini, a high-performance AI model optimized for STEM tasks. The model offers enhanced reasoning abilities, reduced latency, and features like function calling and structured outputs. Available in ChatGPT and API, o3-mini surpasses its predecessor in coding and math accuracy.

IT 147
article thumbnail

This new Android feature protects your phone, even if someone has your PIN

Collaboration 2.0

If you're looking for an additional layer of security for your Android device, Google's Identity Check might be just the ticket. Here's how it works.

Security 325
article thumbnail

Optimizing The Modern Developer Experience with Coder

Many software teams have migrated their testing and production workloads to the cloud, yet development environments often remain tied to outdated local setups, limiting efficiency and growth. This is where Coder comes in. In our 101 Coder webinar, you’ll explore how cloud-based development environments can unlock new levels of productivity. Discover how to transition from local setups to a secure, cloud-powered ecosystem with ease.

article thumbnail

The Convergence of AI, Data Privacy, and Information Governance

AIIM

Looking ahead at information management trends, I see three key areas converging: AI governance, data governance, and information governance. This convergence isn't just theoretical - it's reshaping how we handle information at the Central Bank of the Bahamas.

article thumbnail

Italy’s data protection authority Garante blocked the DeepSeek AI platform

Security Affairs

Italy’s data protection authority Garante blocked the DeepSeek AI service due to insufficient transparency regarding user data process. Italy’s data protection watchdog has blocked Chinese artificial intelligence (AI) firm DeepSeek ‘s chatbot service within the country, citing a lack of information on its use of users’ personal data.

article thumbnail

Critical UK Government Systems at High Risk, Warn Auditors

Data Breach Today

Governmental Agencies Won't Meet 2025 Goal of Bolster Cybersecurity The British government fell short of its goal of significantly fortifying civilian IT systems to withstand cyberattacks by 2025, warned auditors in a report highlighting that much of officialdom runs on legacy systems. Nearly half of the government IT budget goes to keeping legacy systems running.

article thumbnail

This lightweight, easy-to-use Linux OS can save your aging Windows 10 PC

Collaboration 2.0

If your computer currently runs Windows 10 but doesn't support Windows 11, you might want to install an OS that will live past 2025, and WattOS is a great option.

317
317
article thumbnail

15 Modern Use Cases for Enterprise Business Intelligence

Large enterprises face unique challenges in optimizing their Business Intelligence (BI) output due to the sheer scale and complexity of their operations. Unlike smaller organizations, where basic BI features and simple dashboards might suffice, enterprises must manage vast amounts of data from diverse sources. What are the top modern BI use cases for enterprise businesses to help you get a leg up on the competition?

article thumbnail

Beware: Mobile Phishing Mimicking the USPS Is On the Rise

KnowBe4

Researchers at Zimperium warn that a large phishing campaign is impersonating the US Postal Service (USPS) to target mobile devices with malicious PDF files.

Phishing 116
article thumbnail

PHP package Voyager flaws expose to one-click RCE exploits

Security Affairs

The open-source PHP packageVoyageris affected by three vulnerabilities that could be exploited to achieve one-click remote code execution on affected instances. Voyager is a popular open-source PHP package for managing Laravel applications, offering an admin interface, BREAD operations, media, and user management. During an ordinary scan activity, SonarSource researchers reported an arbitrary file write vulnerability in Voyager.

article thumbnail

ISMG Editors: DeepSeek's AI Disruption and Security Risks

Data Breach Today

Also: UnitedHealth Breach Now Affects Over Half of US Population In this week's update, ISMG editors discussed two major stories shaking the tech and cybersecurity worlds - China's AI leap with DeepSeek, a new open-source bot that wiped $600 billion off of Nvidia's value, and an update on the massive UnitedHealth breach, which now affects 190 million people.

Risk 147