Paul Barker

Aug 15, 2024 | csoonline.com | Lucian Constantin |Paul Barker |Dan Roberts |Shweta Sharma

An analysis of build artifacts generated by GitHub Actions workflows inside open-source repositories belonging to major companies revealed sensitive access tokens to third-party cloud services, as well as GitHub itself. In addition, a change made this year in the GitHub artifacts feature has introduced a race condition that attackers can exploit to abuse previously unusable GitHub tokens.

Aug 15, 2024 | csoonline.com | Lucian Constantin |Paul Barker |Dan Roberts |Shweta Sharma

Researchers have found that several thousand Oracle NetSuite customers are inadvertently leaking sensitive data to unauthenticated users through externally facing stores built with NetSuite SuiteCommerce or NetSuite Site Builder. The exposure is likely caused by a deficient understanding of access controls for custom record types in NetSuite, one of the most popular SaaS enterprise resource planning (ERP) platforms in use today.

Aug 15, 2024 | csoonline.com | Paul Barker |Dan Roberts |Evan Schuman |Shweta Sharma

A group of Massachusetts Institute of Technology (MIT) researchers have opted to not just discuss all of the ways artificial intelligence (AI) can go wrong, but to create what they described in an abstract released Wednesday as “a living database” of 777 risks extracted from 43 taxonomies. According to an article in MIT Technology Review outlining the initiative, “adopting AI can be fraught with danger. Systems could be biased or parrot falsehoods, or even become addictive.

Feb 7, 2024 | itbusiness.ca | Paul Barker |Paul Barker

As generative artificial intelligence (GenAI) continues to reshape the digital landscape, CIOs and IT leaders are at a pivotal point, tasked with navigating the profound opportunities and challenges this disruptive technology presents, a new report from Info-Tech Research Group concludes.