Dark Reading Daily -- December 16, 2024

A new side-channel attack method is a computationally practical way to infer the structure of a convolutional neural network — meaning that cyberattackers or rival companies can plagiarize AI models and take their data for themselves.

LATEST SECURITY NEWS & COMMENTARY

With 'TPUXtract,' Attackers Can Steal Orgs' AI Models

Cleo MFT Zero-Day Exploits Are About to Escalate, Analysts Warn

Defenders running the Cleo managed file transfer are urged to be on the lookout for the Cleopatra backdoor and other indicators of an ongoing ransomware campaign, as patching details remain foggy, and no CVE has been issued.

'Dubai Police' Lures Anchor Wave of UAE Mobile Attacks

A sophisticated social engineering cybercrime campaign bent on financial gain was observed being run from Tencent servers in Singapore.

Lloyd's of London Launches New Cyber Insurance Consortium

Under the program, HITRUST-certified organizations gain access to exclusive coverage and rates.

OData Injection Risk in Low-Code/No-Code Environments

As the adoption of LCNC grows, so will the complexity of the threats organizations face.

(Sponsored Article) We Need CI/CD for Data Security

To handle the modern data environment, we need an approach to data security that integrates continuous visibility and control.

MORE NEWS / MORE COMMENTARY


HOT TOPICS
Researchers Crack Microsoft Azure MFA in an Hour A critical flaw in the company's rate limit for failed sign-in attempts allowed unauthorized access to a user account, including Outlook emails, OneDrive files, Teams chats, Azure Cloud, and more. Cultivating a Hacker Mindset in Cybersecurity Defense Security isn't just about tools — it's about understanding how the enemy thinks and why they make certain choices. Chinese Cops Caught Using Android Spyware to Track Mobile Devices Law enforcement across mainland China have been using EagleMsgSpy surveillance tool to collect mobile device data since at least 2017, new research shows. MORE

PRODUCTS & RELEASES

Zerto Introduces Cloud Vault Solution for Enhanced Cyber Resilience Through MSPs

Versa Introduces Integrated Endpoint Data Loss Prevention in SASE Solution

MORE PRODUCTS & RELEASES

EDITORS' CHOICE

336K Prometheus Instances Exposed to DoS, 'Repojacking'

Open source Prometheus servers and exporters are leaking plaintext passwords and tokens, along with API addresses of internal locations.

LATEST FROM THE EDGE

Test Your Cyber Skills With the SANS Holiday Hack Challenge

Open to players of all skill levels, the "Snow-mageddon" cybersecurity competition takes place in the world of Santa, elves, and Christmas mayhem.

LATEST FROM DR TECHNOLOGY

Generative AI Security Tools Go Open Source

Businesses deploying large language models and other GenAI systems have a growing collection of open source tools for testing AI security.

LATEST FROM DR GLOBAL

Governments, Telcos Ward Off China's Hacking Typhoons

Infiltrating other nations' telecom networks is a cornerstone of China's geopolitical strategy, and it's having the unintended consequence of driving the uptake of encrypted communications.

WEBINARS

View More Dark Reading Webinars >>

WHITE PAPERS

View More White Papers >>

FEATURED REPORTS

View More Dark Reading Reports >>