Sat.Mar 29, 2025 - Fri.Apr 04, 2025

article thumbnail

U.S. CISA adds Cisco Smart Licensing Utility flaw to its Known Exploited Vulnerabilities catalog

Security Affairs

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Smart Licensing Utility flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Smart Licensing Utility vulnerability, tracked as CVE-2024-20439 , to its Known Exploited Vulnerabilities (KEV) catalog. Last week, Cisco disclosed two vulnerabilities in its Smart Licensing Utility: CVE-2024-20439, a static credential backdoor, and CVE-2024-20440, an inf

IT 271
article thumbnail

Microsoft unveils 9 new Copilot features - you can try some now

Collaboration 2.0

Marking the company's 50th anniversary, Microsoft's AI companion just got a lot smarter. Even free users can enjoy these.

340
340
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Cybersecurity Professor Mysteriously Disappears as FBI Raids His Homes

WIRED Threat Level

Xiaofeng Wang, a longtime computer science professor at Indiana University, has disappeared along with his wife, and their profiles on the school's website were wiped ahead of recent FBI raids.

article thumbnail

Hacker Leaks 270,000 Samsung Customer Records—Stolen Credentials Were Left Unchecked for Years

eSecurity Planet

In a troubling security breach, a hacker exposed the personal data of over 270,000 Samsung customers in Germany, freely dumping it on the internet. The hack, attributed to a cybercriminal operating under the alias GHNA, occurred when the attacker accessed a system used by Samsungs German customer service. According to cybersecurity firm Hudson Rock, the hack was made possible by a set of stolen credentials compromised in 2021.

article thumbnail

Automation, Evolved: Your New Playbook For Smarter Knowledge Work

Speaker: Frank Taliano

Document-heavy workflows slow down productivity, bury institutional knowledge, and drain resources. But with the right AI implementation, these inefficiencies become opportunities for transformation. So how do you identify where to start and how to succeed? Learn how to develop a clear, practical roadmap for leveraging AI to streamline processes, automate knowledge work, and unlock real operational gains.

article thumbnail

39M secrets exposed: GitHub rolls out new security tools

Security Affairs

39 Million Secrets Leaked on GitHub in 2024 GitHub found 39M secrets leaked in 2024 and launched new tools to help developers and organizations secure sensitive data in code. Microsoft-owned code hosting platform GitHub announced the discovery of 39 million secrets leaked in 2024. The exposure of this sensitive information poses a serious risk to organizations, as malicious actors are ready to exploit it in attacks.

Security 203

More Trending

article thumbnail

News alert: YRIKKA’s ‘Red Teaming’ API advances AI safety, reliability in high-stakes applications

The Last Watchdog

New York, NY, Apr. 3, 2025 YRIKKA has released the first publicly available API for agentic red teaming of Visual AI assets. This release comes at the heels of YRIKKA successfully raising its pre-seed funding round of $1.5M led by Focal and Garuda Ventures. The company was founded by Dr. Kia Khezeli (CEO) and Dr. John Kalantari (CTO), both of whom previously led machine learning projects with the Mayo Clinic, NASA, Intel, and Google.

Marketing 130
article thumbnail

Cyber Forensic Expert in 2k Cases Faces FBI Probe

Krebs on Security

A Minnesota cybersecurity and computer forensics expert whose testimony has featured in thousands of courtroom trials over the past 30 years is facing questions about his credentials and an inquiry from the Federal Bureau of Investigation (FBI).

article thumbnail

Critical flaw in Apache Parquet’s Java Library allows remote code execution

Security Affairs

Experts warn of a critical vulnerability impacting Apache Parquet’s Java Library that could allow remote code execution. Apache Parquet’s Java Library is a software library for reading and writing Parquet files in the Java programming language. Parquet is a columnar storage file format that is optimized for use with large-scale data processing frameworks, such as Apache Hadoop, Apache Spark, and Apache Drill.

Libraries 168
article thumbnail

Gemini Pro 2.5 is a stunningly capable coding assistant - and a big threat to ChatGPT

Collaboration 2.0

Google's previous AIs miserably failed my usual AI coding tests but not Gemini Pro 2.5. To my amazement, it passed them all, joining only one other AI in the winner's circle.

IT 318
article thumbnail

State of AI in Sales & Marketing 2025

AI adoption is reshaping sales and marketing. But is it delivering real results? We surveyed 1,000+ GTM professionals to find out. The data is clear: AI users report 47% higher productivity and an average of 12 hours saved per week. But leaders say mainstream AI tools still fall short on accuracy and business impact. Download the full report today to see how AI is being used — and where go-to-market professionals think there are gaps and opportunities.

article thumbnail

EU Pumps €1.3 Billion into Cybersecurity, AI, and Digital Skills to Fortify Europe’s Tech Future

eSecurity Planet

The European Commission is making a massive 1.3 billion ($1.4 billion) bet on Europes digital future, with a strong focus on shoring up cybersecurity defenses, boosting artificial intelligence, and closing the digital skills gap. The funding, part of the Digital Europe Programme (DIGITAL) for 2025-2027, aims to strengthen Europes tech sovereignty and protect critical infrastructure from growing cyber threats.

article thumbnail

An AI Image Generator’s Exposed Database Reveals What People Really Used It For

WIRED Threat Level

An unsecured database used by a generative AI app revealed prompts and tens of thousands of explicit imagessome of which are likely illegal. The company deleted its websites after WIRED reached out.

IT 243
article thumbnail

CERT-UA reports attacks in March 2025 targeting Ukrainian agencies with WRECKSTEEL Malware

Security Affairs

CERT-UA reported three cyberattacks targeting Ukraines state agencies and critical infrastructure to steal sensitive data. The Computer Emergency Response Team of Ukraine (CERT-UA) reported three cyberattacks in March 2025 targeting Ukrainian agencies and infrastructure to steal sensitive data. This activity is tracked under the identifier UAC-0219. “The Ukrainian government’s computer emergency response team, CERT-UA, is taking systematic measures to accumulate and analyze data on c

article thumbnail

Clicked on a phishing link? Take these 7 steps ASAP to protect yourself

Collaboration 2.0

Phishing scams are becoming brutally effective, and even technically sophisticated people can be fooled. Here's how to limit the damage immediately and what to do next.

Phishing 315
article thumbnail

How to Achieve High-Accuracy Results When Using LLMs

Speaker: Ben Epstein, Stealth Founder & CTO | Tony Karrer, Founder & CTO, Aggregage

When tasked with building a fundamentally new product line with deeper insights than previously achievable for a high-value client, Ben Epstein and his team faced a significant challenge: how to harness LLMs to produce consistent, high-accuracy outputs at scale. In this new session, Ben will share how he and his team engineered a system (based on proven software engineering approaches) that employs reproducible test variations (via temperature 0 and fixed seeds), and enables non-LLM evaluation m

article thumbnail

Scammers Target Netflix Users: Expert Issues Urgent Warning

eSecurity Planet

Streaming giant Netflix is at the center of a rising wave of online scams, cybersecurity experts warn. Fraudsters use increasingly sophisticated tactics from fake texts to deceptive emails and websites to steal Netflix users personal and financial information. With over 230 million subscribers worldwide, Netflix has become one of the most impersonated brands by cybercriminals.

article thumbnail

Cybersecurity Experts Slam Oracle's Handling of Big Breach

Data Breach Today

Technology Giant Accused of Using 'Wordplay' to Previously Deny Breach Reports Cybersecurity experts have slammed Oracle's handling of a large data breach that it's reportedly confirming to 140,000 affected cloud infrastructure clients - but only verbally, and not in writing - following nearly two weeks of it having denied that any such breach occurred.

article thumbnail

Apple backported fixes for three actively exploited flaws to older devices

Security Affairs

Apple backports three critical vulnerabilities actively exploited in attacks against older iOS and macOS models. Apple has backported fixes for three actively exploited vulnerabilities to older devices and OS versions. The three vulnerabilities are: CVE-2025-24085 (CVSS score: 7.3) – In January, Apple released security updates to address 2025s first zero-day vulnerability, tracked as CVE-2025-24085 , actively exploited in attacks targeting iPhone users.

Security 151
article thumbnail

I changed 12 Android phone settings to dramatically increase battery life (and why they work)

Collaboration 2.0

No more battery anxiety - these 12 proven tips will help you maximize your Android's battery life.

301
301
article thumbnail

Zero Trust Mandate: The Realities, Requirements and Roadmap

The DHS compliance audit clock is ticking on Zero Trust. Government agencies can no longer ignore or delay their Zero Trust initiatives. During this virtual panel discussion—featuring Kelly Fuller Gordon, Founder and CEO of RisX, Chris Wild, Zero Trust subject matter expert at Zermount, Inc., and Principal of Cybersecurity Practice at Eliassen Group, Trey Gannon—you’ll gain a detailed understanding of the Federal Zero Trust mandate, its requirements, milestones, and deadlines.

article thumbnail

Cybersecurity Professor Faced China-Funding Inquiry Before Disappearing, Sources Say

WIRED Threat Level

A lawyer for Xiaofeng Wang and his wife says they are safe after FBI searches of their homes and Wangs sudden dismissal from Indiana University, where he taught for over 20 years.

article thumbnail

Rational Astrologies and Security

Schneier on Security

John Kelsey and I wrote a short paper for the Rossfest Festschrift : “ Rational Astrologies and Security “: There is another non-security way that designers can spend their security budget: on making their own lives easier. Many of these fall into the category of what has been called rational astrology. First identified by Randy Steve Waldman [Wal12], the term refers to something people treat as though it works, generally for social or institutional reasons, even when theres little e

article thumbnail

China-linked group UNC5221 exploited Ivanti Connect Secure zero-day since mid-March

Security Affairs

Ivanti addressed a critical remote code execution flaw in Connect Secure, which has been exploited since at least mid-March 2025. Ivanti released security updates to address a critical Connect Secure remote code execution vulnerability tracked as CVE-2025-22457. The vulnerability has been exploited by a China-linked threat actor since at least mid-March 2025.

Security 163
article thumbnail

ChatGPT Plus is free for students now - how to grab this deal before finals

Collaboration 2.0

Claim this ChatGPT Plus offer before it expires. You can save $20 a month at a time when it matters most.

IT 290
article thumbnail

Prevent Data Breaches With Zero-Trust Enterprise Password Management

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

article thumbnail

The Heart of Information Management: Focus on the Problem, Not the Technology

AIIM

In my decades of experience in information management, one truth has remained constant: we need to focus on the problem trying to be solved, not the new and shiny object - even if that object is AI.

article thumbnail

Microsoft Intune Workshop - Take Control of Mobile Security

Daymark

Is your organization struggling to balance mobile security with employee productivity? Are you confident that only secure, compliant devices can access your business applications? You are not alone. In todays hybrid and mobile-first work environment, organizations face the challenge of securing corporate data while ensuring employees can work efficiently from anywhere.

MDM 79
article thumbnail

UK government tries to placate opponents of AI copyright bill

The Guardian Data Protection

Economic impact assessment is one concession aiming to head off opposition from MPs, peers and creatives such as Paul McCartney and Tom Stoppard The UK government is trying to placate peer and Labour backbencher concerns about copyright proposals by pledging to assess the economic impact of its plans. Creative professionals including Sir Paul McCartney, Sir Tom Stoppard and Kate Bush have strongly criticised ministers proposals to let artificial intelligence companies train their models on copyr

article thumbnail

Why this Bluetooth transmitter is a must-have for frequent travelers - especially at this price

Collaboration 2.0

The Twelve South AirFly Pro 2 brings upgraded audio quality, connectivity, and usability for in-flight entertainment systems, so you can stress less about poor signals.

284
284
article thumbnail

Maximizing Profit and Productivity: The New Era of AI-Powered Accounting

Speaker: Yohan Lobo and Dennis Street

In the accounting world, staying ahead means embracing the tools that allow you to work smarter, not harder. Outdated processes and disconnected systems can hold your organization back, but the right technologies can help you streamline operations, boost productivity, and improve client delivery. Dive into the strategies and innovations transforming accounting practices.

article thumbnail

23andMe Bankruptcy: Should DNA Data Go to the Top Bidder?

Data Breach Today

Lawyer Jonathan Armstrong on Legal, Ethical Fallout From Looming 23andMe Auction The financial collapse of personal genomics giant 23andMe raises an urgent question: What happens to your most intimate data when the company holding it goes bankrupt? Jonathan Armstrong, partner at Punter Southall Law, warns of cascading legal, ethical and security consequences.

Security 147
article thumbnail

Stay ahead with Titanium X and OpenText Cybersecurity Cloud

OpenText Information Management

Cybersecurity threats dont stand still - and neither do we. Since Cloud Editions (CE) 23.1, OpenText Cybersecurity has delivered continuous innovation to help organizations detect threats accurately and proactively, respond immediately and strategically, and adapt faster to continually improve their security posture. Because in todays environment, a security-first mindset isnt optional - its the difference between preventing threats and recovering from them.

Cloud 69
article thumbnail

What Information Leaders (and Developers) Should Know About TWAIN Group Imaging Technology Standards

AIIM

As a developer venturing into the world of imaging technology, understanding industry standards is crucial. The TWAIN Working Group has been at the forefront of creating and maintaining these standards for nearly three decades. Here's what you need to know about TWAIN and its importance in modern software development.

IT 132