Scott Ikeda

1 week ago | cpomagazine.com | Scott Ikeda

New AI data security guidelines approved by the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency’s Artificial Intelligence Security Center (NSA AISC), and Federal Bureau of Investigation (FBI) have been issued and are aimed at assisting organizations of all types that intend to (or already) handle AI training data. The paper goes into detail on a variety of ways that training data may become compromised, including active targeting by attackers.

1 week ago | cpomagazine.com | Scott Ikeda

A major threat actor has been crippled by an international law enforcement action, as the Lumma infostealer malware operation saw its control panel seized along with infrastructure dwelling in Europe and Japan. This was supplemented by Microsoft seizing some 2,300 domains belonging to the group, which has infected over 394,000 Windows computers globally.

1 week ago | cpomagazine.com | Scott Ikeda

Researchers with WithSecure are warning that a rogue version of password manager KeePass is the likely source of numerous ransomware attacks, and also contains the capability to exfiltrate the contents of password databases. The tainted version contains a trojan and was distributed via a “malvertising” campaign that made it appear to be a legitimate download of the software.

2 weeks ago | cpomagazine.com | Scott Ikeda

Use of AI chatbots by malicious hackers has largely been limited to polishing up their English (or other non-native languages) to send phishing emails to this point, but the emergence of “Venice.ai” may mark the beginning of a new stage of the security race. Available for free via the “clear web,” the service promises capabilities on par with ChatGPT and other popular models but with no guardrails or security restrictions in place.

2 weeks ago | cpomagazine.com | Scott Ikeda

Temu is facing a ₩1.37 billion ($982,420) fine in South Korea over its data transfers to other countries. The privacy law violations are due to failure to adhere to the terms of the Personal Information Protection Act (PIPA), the law of the land that saw significant amendments come into force in 2023 that put it roughly on par with the protections provided by the GDPR.