Friendica in Luxembourg

Search

Items tagged with: Cybersecurity

Software Heritage

4 months ago

Software Heritage
4 months ago

🌟 We're Hiring a Chief Technology Officer (CTO)!

🚀 Embark on an extraordinary journey with Software Heritage! Our work supports #OpenScience, #AI, and #Cybersecurity.

Key Responsibilities:
- Develop and implement the technical strategy
- Oversee technical development and ensure stability
- Drive innovation and manage technical debt

Our Tech Stack: #GNU/#Linux, #Python, #Rust, #Debian, #Puppet, #Kubernetes, #Postgres, #Ceph, #Cassandra, #Kafka.

👉 For more info: https://www.softwareheritage.org/2024/06/28/chief-technology-officer-cto/

Chief Technology Officer (CTO)

Context — the Software Heritage Initiative Embark on an extraordinary journey with Software Heritage, a visionary non-profit initiative launched by Inria in partnership with UNESCO.

^{www.softwareheritage.org}

#python #Rust #cybersecurity #AI #Debian #gnu #OpenScience #cassandra #postgres #puppet #kafka #kubernetes #ceph

Please wait

View in context

Solène :flan_hacker:

6 months ago

Solène :flan_hacker:
6 months ago

A new attack was published, named TunnelVision, explaining how to snoop all the unencrypted VPN traffic through a local system.

In summary, the attack make the local DHCP server auto configuring workstations network to send a gateway address that is similar to the one used by the VPN but with a higher priority, so the operating system will send its VPN traffic to that address instead of the VPN server.

This attack is not discrete, it could be easily spotted in the network settings.

https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/

#Android seems unaffected.

#QubesOS is immune as long as you do not establish a VPN in the qube connected to the real world network (by defaut it's either sys-net or

Novel attack against virtually all VPN apps neuters their entire purpose

TunnelVision vulnerability has existed since 2002 and may already be known to attackers.

^{Ars Technica}

#infosec #Android #OpSec #cybersecurity #openbsd #qubesos @zgou

Please wait

View in context

Simone Zanella

7 months ago

Simone Zanella
7 months ago

Oggi ho catturato l'attenzione della mia quinta con un argomento "caldo": crackare le password su Linux dopo un ipotetico data breach.
Quando è entrato un collega si è preoccupato di cosa insegno ai ragazzi, penso sia difficile capire che l'ethical hacking è alla base della sicurezza informatica, e quando insegni Sistemi e Reti non puoi pensare di ridurla a switch e router, d'altronde se si studia il fascismo in Storia mica è per diventare un fascista, no?

#cybersecurity #scuola #hacking #linux

Snapshot del mio Registro Elettronico: "Autenticazione nei sistemi multiutente e distribuiti. Linux e l file passwd. Attacco alle password con rainbow table e con wordlist tramite John The Ripper. "

#Linux #Hacking #cybersecurity #scuola

Please wait

View in context

Redhotcyber

7 months ago

Redhotcyber
7 months ago

Adobe Magneto: una pericolosa minaccia RCE per i siti di e-commerce

Gli specialisti di Sicurezza Informatica hanno avvertito che gli #hacker stanno già sfruttando una nuova #vulnerabilità in #Magento (CVE-2024-20720) e l'utilizzatore per implementare una #backdoor persistente sui siti di e-commerce.

#redhotcyber #online #it #web #ai #hacking #privacy #cybersecurity #cybercrime #intelligence #intelligenzaartificiale #informationsecurity #ethicalhacking #dataprotection #cybersecurityawareness #cybersecuritytraining #cybersecuritynews #infosecurity

https://www.redhotcyber.com/post/adobe-magneto-una-pericolosa-rce-minaccia-i-siti-di-e-commerce/

Adobe Magneto: una pericolosa RCE minaccia i siti di e-commerce

Una pericolosa falla di sicurezza consente agli utenti malintenzionati di eseguire codice remoto sui siti web Adobe Magneto.

^{Redazione RHC (Red Hot Cyber)}

Please wait

View in context

Jon Ippolito

7 months ago

Jon Ippolito
7 months ago

A cybersecurity researcher finds that 20% of software packages recommended by GPT-4 are fake, so he builds one that 15,000 code bases already depend on, to prevent some hacker from writing a malware version.

Disaster averted in this case, but there aren't enough fingers to plug all the AI-generated holes 😬

https://it.slashdot.org/story/24/03/30/1744209/ai-hallucinated-a-dependency-so-a-cybersecurity-researcher-built-it-as-proof-of-concept-malware

#AIethics #Cybersecurity #GPT #OpenAI #LLM #GenAI #GenerativeAI #Python #NodeJS #Ruby #Golang

A computer network with a missing component

AI Hallucinated a Dependency. So a Cybersecurity Researcher Built It as Proof-of-Concept Malware - Slashdot

"Several big businesses have published source code that incorporates a software package previously hallucinated by generative AI," the Register reported Thursday "Not only that but someone, having spotted this reoccurring hallucination, had turned…

^{it.slashdot.org}