Author Archives: [email protected]

Cloud Security Alliance, News

Multimodal AI at Risk: New Report Exposes Critical Risks

Posted on by [email protected]
Originally published by Enkrypt AI.

Written by Prashanth Harshangi, CTO, Enkrypt AI.

 

Red teaming tests expose major gaps in multimodal AI safety.

 

As generative AI rapidly evolves to process both text and images, a new Multimodal Safety Report released by Enkrypt AI reveals critical risks that threaten the integrity and safety of multimodal systems.

The red teaming exercise was conducted on several multimodal models, and tests across several safety and …

Continue reading →
Hacker News, News

DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints

Posted on by [email protected]
The threat actors behind the DragonForce ransomware gained access to an unnamed Managed Service Provider’s (MSP) SimpleHelp remote monitoring and management (RMM) tool, and then leveraged it to exfiltrate data and drop the locker on multiple endpoints.
It’s believed that the attackers exploited a trio of security flaws in SimpleHelp (CVE-2024-57727, CVE-2024-57728, and CVE-2024-57726) that were
Continue reading →
Hacker News, News

Chinese APT41 Exploits Google Calendar for Malware Command-and-Control Operations

Posted on by [email protected]
Google on Wednesday disclosed that the Chinese state-sponsored threat actor known as APT41 leveraged a malware called TOUGHPROGRESS that uses Google Calendar for command-and-control (C2).
The tech giant, which discovered the activity in late October 2024, said the malware was hosted on a compromised government website and was used to target multiple other government entities.
“Misuse of cloud
Continue reading →
Hacker News, News

Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin

Posted on by [email protected]
Cybersecurity researchers have disclosed a critical unpatched security flaw impacting TI WooCommerce Wishlist plugin for WordPress that could be exploited by unauthenticated attackers to upload arbitrary files.
TI WooCommerce Wishlist, which has over 100,000 active installations, is a tool to allow e-commerce site customers to save their favorite products for later and share the lists on social
Continue reading →
This site uses cookies to offer you a better browsing experience. By browsing this website, you agree to our use of cookies. Click More Info to view Privacy Policy.
More info Accept