AI
Your training data is boring: Anomaly detection with LLMs
The Sophos AI team presents new research on anomaly detection
Sophos News ·
Today, page 4
Reduce alert fatigue by customizing threat detection features in Amazon GuardDuty
The teams responsible for security today don’t have a problem with the number of alerts they receive; they have a problem turning those alerts into something truly actionable.
AWS Security Blog ·
AI
Detecting sleeper agents hiding in AI model neurons
Microsoft Research has released new threat research detailing how a capable agent model could be turned into a sleeper agent by editing fewer than ten neurons to inject a short payload; Microsoft Research has also found that this threat is detectable by…
Microsoft Security Blog ·
Governance
CISA director pick already drawing concern from Hill Dems over Palantir connection
Others touted Michael LoSapio as a fit for the job due to his technical credentials as CISO for the company. The post CISA director pick already drawing concern from Hill Dems over Palantir connection appeared first on CyberScoop .
CyberScoop ·
Vulnerabilities
November Patch Tuesday boasts over 1,000 bugs but only one zero-day so far
The Register Security ·
Vulnerabilities
Railway breach leads to $740,000 in fraudulent AI charges
Cloud hosting provider Railway says hackers exploited vulnerabilities in its infrastructure to steal customer authentication secrets and generate approximately $740,000 in fraudulent AI usage, potentially exposing credentials for up to 100,000 workspaces.
BleepingComputer ·
Vulnerabilities
Microsoft Fixes Nearly 1,100 Security Vulnerabilities
Microsoft did another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in its Windows operating systems and supported software.
Krebs on Security + 1 outlet ·
AppSec
The US wants its quantum lead to turn into factories and supply chains
There’s bipartisan support for further investment in the U.S. quantum industry, along with worries that America’s industrial capacity won’t keep up with demand.
CyberScoop ·
Ring robots ready to patrol paranoids’ pads
The Register Security ·
Cloud
AWS refreshes ProcessUnity Global Risk Exchange assessment to enhance customer’s third-party due diligence
Amazon Web Services (AWS) is pleased to announce renewal of the AWS ProcessUnity Global Risk Exchange assessment. This validated assessment report helps customers perform effective cloud supplier due diligence on AWS and enhances their third-party risk…
AWS Security Blog ·
US Army member arrested in UK over allegations of spying for Russia
The unnamed soldier was arrested by British counterterrorism police “working closely” with U.S. authorities, including the FBI and the military, the Metropolitan Police said in a statement.
The Record ·
Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI
Ars Technica Security ·
Vulnerabilities
Microsoft’s Patch Tuesday surpasses 1,000 bugs for second month in a row
An exploited Outlook vulnerability drew most of the attention in Microsoft's latest Patch Tuesday, which listed 1,093 bugs total.
The Record ·
Threat Intel
Japanese furniture giant Nitori says hackers stole 37.6M customer records
Nitori, a major Japanese furniture and home accessories retailer, discovered that an attacker accessed a system on its network and may have stolen 37.62 million customer records. [...]
BleepingComputer ·