For providers

Threat actors have been targeting macOS devices with the Atomic Stealer information-stealing malware, also known as AMOS, through fraudulent web browser updates as part of the new "ClearFake" campaign, The Hacker News reports.

Today, in a landmark collaboration, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the UK National Cyber Security Centre (NCSC) are proud to announce the release of the Guidelines for Secure AI System Development. Co-sealed by 23 domestic and international cybersecurity organizations, this publication marks a significant step in addressing the intersection of artificial intelligence (AI), cybersecurity, and critical infrastructure. The Guidelines, complementing the U.S. Voluntary Commitments on Ensuring Safe, Secure, and Trustworthy AI, provide essential recommendations for AI system development and emphasize the importance of adhering to Secure by Design principles. The approach prioritizes ownership of security outcomes for customers, embraces radical transparency and accountability, and establishes organizational structures where secure design is a top priority. The Guidelines apply to all types of AI systems, not just frontier models. We provide suggestions and mitigations that will help data scientists, developers, managers, decision-makers, and risk owners make informed decisions about the secure design, model development, system development, deployment, and operation of their machine learning AI systems. This document is aimed primarily at providers of AI systems, whether based on models hosted by an organization or making use of external application programming interfaces. However, we urge all stakeholders—including data scientists, developers, managers, decision-makers, and risk owners make—to read this guidance to help them make informed decisions about the design, deployment, and operation of their machine learning AI systems. CISA invites stakeholders, partners, and the public to explore the Guidelines for Secure AI System Development as well as our recently published Roadmap for AI to learn more about our strategic vision for AI technology and cybersecurity. To access learn more, visit CISA.gov/AI.

I had to figure out when a OVA file was published (for a virtual machine). The Open Virtualization Format (OVF) is the standard for these files.

About 10 days ago, new versions of Wireshark were released.

Almost 8.5 million individuals across the U.S. had their personal data compromised after Denver-based patient engagement firm Welltok had its MOVEit file transfer system subjected to a widespread hack by the Cl0p ransomware operation, BleepingComputer reports.

The newly discovered InfectedSlurs botnet is being built through the exploitation of two zero-day RCE vulnerabilities in routers and network video recorder devices.

A 2023. 47. hetére vonatkozó hírválogatás, amely az NBSZ NKI által 2023.11.17. és 2023.11.23. között kezelt incidensek statisztikai adatait is tartalmazza.

This is just an annual reminder that DShield, the engine behind the SANS Internet Storm Center, was originally coded over the Thanksgiving weekend in 2000 and made life shortly after. Below is an early screenshot (not the earliest one, but the earliest one I am not too embarrassed to post :) ).  The domain was registered a few months before I started coding the site (July 7th, so probably July 4th weekend), but I didn't get around to coding it before. The first "submission agent" was a one-liner shell script grepping logs from Syslog and piping them to sendmail to submit them :). There are not a lot of projects that have survived this long, and well, some of the early code (and certainly design decisions) may still live on today.