Security Analytics

Analytics and Intelligence

NIST CSF vulnerabilities ransomware backlog

NIST Deprioritizes Pre-2018 CVEs as Backlog Struggles Continue

NIST, which for more than a year has been struggling to address a backlog of CVEs in its database following budget cuts, is now putting pre-2018 vulnerabilities on the back burner to ...
Security Boulevard
So, How is your LLM Today?

So, How is your LLM Today?

So, How is your LLM Today?3 min read·17 hours ago--Got AI Governance?AI continues to become the gold rush of technology or a never-before-seen solution. A lot can be said for the world ...
ransomware RaaS Columbus Rhysida

Hunters International Dumps Ransomware, Goes Full-on Extortion

Hunters International, the RaaS group that some believe evolved from Hive, appears to be rebranding and shifting operations, moving away from an unprofitable and risky ransomware business and focusing solely on exfiltrating ...
Security Boulevard
When AI Agents Start Whispering: The Double-Edged Sword of Autonomous Agent Communication

When AI Agents Start Whispering: The Double-Edged Sword of Autonomous Agent Communication

AI agents develop their own communication channels beyond our monitoring frameworks, we face a pivotal challenge: harnessing their collaborative problem-solving potential while preventing security breaches and compliance violations that could arise when ...
domain Major DNS Threats: Preventing DNS Hijacking

Longtime ‘Fast Flux’ Evasion Technique Now a National Security Threat

CISA, the FBI, and NSA issued an advisory about the national security threat posed by "fast flux," a technique used by threat actors to evade detection of their C2 infrastructures that has ...
Security Boulevard

AIs as Trusted Third Parties

This is a truly fascinating paper: “Trusted Machine Learning Models Unlock Private Inference for Problems Currently Infeasible with Cryptography.” The basic idea is that AIs can act as trusted third parties: Abstract: ...
Yes, GitHub's Copilot can Leak (Real) Secrets

Yes, GitHub’s Copilot can Leak (Real) Secrets

Researchers successfully extracted valid hard-coded secrets from Copilot and CodeWhisperer, shedding light on a novel security risk associated with the proliferation of secrets ...
tool, atlantis, credentials, protecting data

Hackers Use Atlantis AIO Tool to Automate Account Takeover Attacks

Atlantis AIO, a tool available to hackers on the dark web, gives threat actors an automated tool to rapidly test millions of stolen credentials against email, ecommerce, and other online accounts on ...
Security Boulevard