New Index Finds AI Models Are Murky, Not Transparent At All

Despite the growing demand for AI transparency, 10 of the better-known models did not score very highly on Stanford's new Foundation Model Transparency Index.

https://www.darkreading.com/tech-trends/...ent-at-all

20 Years Later, Is Patch Tuesday Enough?

Microsoft's longstanding practice isn't enough to handle its vulnerability problem.

https://www.darkreading.com/vulnerabilit...day-enough

'Elektra-Leak' Attackers Harvest AWS Cloud Keys in GitHub Campaign

Cyber adversaries are scanning public GitHub repositories in real-time, evading Amazon quarantine controls, and harvesting AWS keys.

https://www.darkreading.com/cloud/elektr...b-campaign

Survey: AppSec Maturity Hindered by Staffing, Budgets, Vulnerabilities

Report highlights the challenges impeding the applications industry from achieving AppSec maturity.

https://www.darkreading.com/vulnerabilit...rabilities

Arid Viper Camouflages Malware in Knockoff Dating App

The APT group uses updates from the app to get the user to download the malware.

https://www.darkreading.com/dr-global/ar...dating-app

'Prolific Puma' Hacker Gives Cybercriminals Access to .us Domains

Cybercriminals are upping their phishing with shortened links and showing that coveted, regulated top-level domains aren't as exclusive as you'd think.

https://www.darkreading.com/threat-intel...us-domains

The Changing Landscape of CIOs: A Glimpse into the Acora 2023 CIO Report

In a rapidly evolving digital landscape, the role of Chief Information Officers (CIOs) within mid-market…

The Changing Landscape of CIOs: A Glimpse into the Acora 2023 CIO Report on Latest Hacking News | Cyber Security News, Hacking Tools and Penetration Testing Courses.

Exploit released for critical Cisco IOS XE flaw, many hosts still hacked


Public exploit code is now available for the critical Cisco IOS XE vulnerability tracked as CVE-2023-20198 that was leveraged as a zero-day to hack tens of thousands of devices. [...]


https://www.bleepingcomputer.com/news/se...ll-hacked/

Malicious NuGet packages abuse MSBuild to install malware


A new NuGet typosquatting campaign pushes malicious packages that abuse Visual Studio's MSBuild integration to execute code and install malware stealthily. [...]


https://www.bleepingcomputer.com/news/se...l-malware/

Canada bans WeChat and Kaspersky products on govt devices


Canada has banned the use of Kaspersky security products and Tencent's WeChat app on mobile devices used by government employees, citing network and national security concerns. [...]


https://www.bleepingcomputer.com/news/se...t-devices/