Tag: #cybersecurity

Preprint: Sparse parameter backdoors in image models can be computationally hard to detect

An arXiv preprint argues that tiny, noise-masked parameter changes can hide backdoors in pre-trained image classifiers, making tampering hard to detect.

#ai, #machinelearning, #cybersecurity, #modelsecurity

Alleged China-linked Hacker Behind HAFNIUM Extradited from Italy, Appears in Houston Court

A Chinese national accused of taking part in the HAFNIUM Microsoft Exchange campaign and stealing COVID-19 research was extradited from Italy and appeared in Houston federal court.

#cybersecurity, #china, #extradition, #hafnium

Preprint Says Federated-Learning Clients Could Remotely Trigger Rowhammer Bit Flips on Servers

An arXiv preprint claims manipulated federated-learning clients can cause Rowhammer bit flips on a server. The work is under review and unverified.

#cybersecurity, #federatedlearning, #rowhammer, #aisecurity

LayerZero links $292M Kelp DAO exploit to DPRK-linked Lazarus Group

LayerZero says a forged cross‑chain message let attackers drain 116,500 rsETH (~$292M) from Kelp DAO on April 18; private attribution points to DPRK-linked Lazarus.

#crypto, #defi, #layerzero, #cybersecurity, #lazarus

Researchers say nearly-inaudible audio can hijack voice AIs; paper claims demos on Mistral, Microsoft

A new paper says nearly-inaudible audio prompts can steer voice AI into unauthorized actions; authors report demos on Mistral and Microsoft.

#ai, #cybersecurity, #voiceai, #mistral, #microsoft

OpenAI expands Trusted Access for Cyber, unveils GPT‑5.4‑Cyber and pledges $10M in credits

OpenAI scales its Trusted Access for Cyber program, launches GPT‑5.4‑Cyber for vetted defenders and commits $10M in API credits to security teams.

#openai, #cybersecurity, #ai, #gpt5

ShinyHunters Leak Linked to Rockstar Mostly Reveals Cloud Analytics, Not GTA 6 Assets

ShinyHunters exposed Rockstar-related cloud analytics via an Anodot–Snowflake integration on April 13, not GTA 6 code or player data.

$TTWO, #cybersecurity, #gaming, #cloud, #data-breach

Anthropic’s New AI Finds Thousands of Vulnerabilities, Launches Project Glasswing

Anthropic says its Claude Mythos model uncovered thousands of previously unknown software flaws; Project Glasswing gives vetted partners guarded access for defensive work.

#ai, #cybersecurity, #open-source, #anthropic

EU Commission Confirms Data Theft From Europa.eu Cloud Platform After Intrusion

EU officials say attackers stole data from the cloud systems behind Europa.eu. ShinyHunters claims a 350GB haul as investigators assess impact.

#cybersecurity, #europeanunion, #databreach, #cloud, #aws

FERC Approves Sweeping Cybersecurity Overhaul for the U.S. Power Grid

Federal regulators approved tougher NERC security rules for low-impact devices, virtualized control systems and more control rooms—reshaping grid compliance.

#cybersecurity, #powergrid, #ferc, #nerc, #criticalinfrastructure

Hasbro Cyber Incident Forces System Shutdowns, Risks Weeks of Shipping Delays

Hasbro says it contained unauthorized network access but took systems offline, warning of shipment delays as it navigates new SEC cyber disclosure rules.

#cybersecurity, #hasbro, #sec, #supplychain, #databreach

QualDerm cyberattack triggers 3.1 million patient breach notices across 17 states

A cyberattack on dermatology manager QualDerm may have exposed data on 3.1 million patients, raising questions about delays, oversight and PE consolidation.

#cybersecurity, #healthdata, #hipaa, #dermatology, #privacy

Google Closes $32 Billion Wiz Deal, Making Cloud Security a Centerpiece of Its AI Push

Alphabet’s Google finalizes its $32B cash purchase of Wiz, betting on multi-cloud security to boost Google Cloud and deepen its AI strategy.

#google, #cybersecurity, #cloud, #mna, #ai

TELUS Digital probes suspected cloud data theft as ShinyHunters claims massive trove

TELUS Digital says it is investigating unauthorized access after ShinyHunters claimed a near‑petabyte cloud theft tied to earlier supply‑chain breaches.

#cybersecurity, #databreach, #telus, #cloudsecurity, #privacy

LexisNexis Probes Cloud Breach After Hackers Claim Theft of Millions of Legal and Government Records

LexisNexis is investigating an AWS breach tied to a known software flaw after FulcrumSec claimed it stole millions of records, including .gov users.

#cybersecurity, #databreach, #aws, #lexisnexis, #government