Chris Butera, CISA's acting executive assistant director for cybersecurity, told reporters on Wednesday that the goal of the directive is to help agencies prioritize, so they can address the most problematic vulnerabilities first while taking more time to remediate bugs that pose a less-pressing ri… …
… Security experts also say that the moment presents an opportunity to address shortcomings in how software is currently developed. “For decades, we have built an enormous global industry to defend, detect, and respond to ‘vulnerabilities’—flaws and defects in software—that should never have existed … …
… In April, though, Daniel Stenberg, the founder and lead developer of Curl, said in a LinkedIn post that the quality of submissions had improved. “Over the last few months, we have stopped getting AI slop security reports in the Curl project,” he wrote. “Instead we get an ever increasing amount of r… …
… Done not carefully, this could be a meaningfully accelerant for attackers.” Project Glasswing partners, including some of Anthropic's competitors, struck a collaborative tone in statements as part of the launch. “Google is pleased to see this cross-industry cybersecurity initiative coming together,… …
… OpenAI says that the initiative fits into its broader security efforts, including an application security AI agent launched last month known as Codex Security, a cybersecurity grants program that began in 2023, a recent donation to the Linux Foundation to support open source security, and the “Prep… …
… Meanwhile, the United States Cybersecurity and Infrastructure Security Agency issued a new directive to federal agencies this week in reaction to new AI threats that includes a requirement to fix the most urgent software vulnerabilities in as little as three days. …
… It's really too easy.” An Apple spokesperson told WIRED in a statement that “every day Apple's security teams around the world work tirelessly to protect users' devices and data,” and noted that Apple had released security updates that would protect users from both Coruna and DarkSword, including e… …
… But day-to-day, North Korea’s cyber operators have repeatedly been caught using commercial, off-the-shelf AI tools. “North Korea is using AI as a force multiplier, and it is helping with every aspect—building resumes, building websites, building exploits, testing vulnerabilities—and they're doing i… …
… According to the complaint, he also led a jet-set life, traveling from Dubai to Thailand to New York and appearing in one photo wearing a diamond-studded necklace that read “HACK THE PLANET.” Medicare Database Exposes Health Care Providers’ Social Security Numbers A Medicare database left accessibl… …
… On Reddit channels related to cybersecurity and iOS, some self-identified iPhone owners discussing DarkSword argued that Apple seemed to be taking advantage of the DarkSword hacking campaigns to push them onto its latest OS version, which some have found to be slow or overly animated. “Apple is try… …