Author Archives: [email protected]

Microsoft introduces Phi-3 family of models that outperform other models of its class

Back in December 2023, Microsoft released Phi-2 model with 2.7 billion parameters that delivered state-of-the-art performance among base language models with less than 13 billion parameters. In the past four months, several other models that got released outperformed Phi-2. Recently, Meta released Llama-3 family of models that outperformed all the previously released open-source models. Last […]

Fake files on Github might be malware – even from “Microsoft”

Security researchers have identified a vulnerability in GitHub’s comment file upload system that malicious actors are exploiting to spread malware. Here’s how it works: When a user uploads a file to a GitHub comment (even if the comment itself is never posted), a download link is automatically generated. This link includes the name of the repository and its owner, […]

Russia’s APT28 Exploited Windows Print Spooler Flaw to Deploy ‘GooseEgg’ Malware

The Russia-linked nation-state threat actor tracked as APT28 weaponized a security flaw in the Microsoft Windows Print Spooler component to deliver a previously unknown custom malware called GooseEgg. The post-compromise tool, which is said to have been used since at least June 2020 and possibly as early as April 2019, leveraged a now-patched flaw that allowed for

Reducing the environmental impact of Windows devices

We live in a world where technology is constantly evolving and improving our lives, and at the same time we need to be thoughtful and disciplined about minimizing the required resources and waste generated from these products. How can we balance the benefits of innovation with the environmental impact of our products? This fundamental question […]

Russian FSB Counterintelligence Chief Gets 9 Years in Cybercrime Bribery Scheme

The head of counterintelligence for a division of the Russian Federal Security Service (FSB) was sentenced last week to nine years in a penal colony for accepting a USD $1.7 million bribe to ignore the activities of a prolific Russian cybercrime group that hacked thousands of e-commerce websites. The protection scheme was exposed in 2022 […]