Latest Hacking News
Researchers caught a serious security vulnerability in the R programming language that could allow arbitrary code execution. Given the extensive application of this language, particularly for AI/ML projects, the vulnerability could have a huge impact
DarkReading
While attackers have targeted AI systems, failures in AI design and implementation are far more likely to cause headaches, so companies need to prepare.
Security Affairs
A flaw in the R programming language enables the execution of arbitrary code when parsing specially crafted RDS and RDX files.
Bleeping Computer
A new vulnerability has been discovered in the R programming language that allows arbitrary code execution upon deserializing specially crafted RDS and RDX files.
SecurityWeek
A vulnerability (CVE-2024-27322) in the R programming language implementation can be exploited to execute arbitrary and be used as part of a supply chain attack.
DarkReading
The CVE-2024-27322 security vulnerability in R's deserialization process gives attackers a way to execute arbitrary code in target environments via specially crafted files.
SecurityWeek
Professionalization could be a solution to the increased cybersecurity risk for corporate and national security; and the mental health and even physical liberty of CISOs. But it’s not easy.
The Hacker News
A critical vulnerability (CVE-2024-27322) has been discovered in the R programming language. It could allow attackers to execute arbitrary code.
DarkReading
While some cybercriminals have bypassed guardrails to force legitimate AI models to turn bad, building their own platforms and making use of open source models are a greater threat.
DarkReading
Machine-learning platforms like Hugging Face are suspectible to the same kind of attacks that threat actors have executed successfully for years via npm, PyPI, and other open source repos.
Cyber Security News
Researchers discovered multiple vulnerabilities in Google's Gemini Large Language Model (LLM) family, including Gemini Pro and Ultra, that allow attackers to manipulate the model's response through prompt injection.
DarkReading
Research is latest in a growing body of work to highlight troubling weaknesses in widely used generative AI tools.
The Hacker News
Google's Gemini large language model faces vulnerabilities that could lead to security breaches, including leaking system prompts & generating harmful
DarkReading
Like ChatGPT and other GenAI tools, Gemini is susceptible to attacks that can cause it to divulge system prompts, reveal sensitive information, and execute potentially malicious actions.
SC Magazine
Files containing malicious prompts could be used to manipulate interactions, researchers say.
The Hacker News
Hugging Face vulnerability allows attackers to hijack machine learning models.
SecurityWeek
A new Israeli startup called Aim Security has raised $10 million in seed financing to help with the secure deployment of generative-AI tech.
SecurityWeek
SecurityWeek interviews a wide spectrum of security experts on AI-driven cybersecurity use-cases that are worth immediate attention.
Computerworld
It's no secret that enterprise IT in recent years has been disappointed in corporate clouds. But in general they've not done anything about it. That could soon change.
SecurityWeek
The volume of cybersecurity transactions increased in 2023 compared to 2022, but the total amount of funding decreased significantly.
SecurityWeek
A total of more than 28,000 CVE IDs were assigned in 2023 and 84 new CVE Numbering Authorities (CNAs) were named.
SecurityWeek
Former SpaceX cybersecurity engineers launch Wraithwatch, an AI-based security firm that received $8 million in seed funding.
SecurityWeek
AI cybersecurity firm Cranium has raised $25 million in Series A funding, which brings the total investment in the company to $32 million.
SecurityWeek
The British startup is working on software to mitigate against the ‘wild west’ of unregulated AI apps harvesting company data at scale.
SecurityWeek
Silicon Valley startup lands $4 million in seed funding from SYN Ventures, Okta Ventures and Secure Octane.
SecurityWeek
Texas startup attracts major investor interest to build an MLMDR (machine learning detection and response) technology.
SecurityWeek
Current AI models are simply too unwieldy, brittle and malleable, academic and corporate research shows.
DarkReading
Threat actors can weaponize code within AI technology to gain initial network access, move laterally, deploy malware, steal data, or even poison an organization's supply chain.