Security Bulletin

Microsoft, Google, OpenAI, and 13 other major artificial intelligence firms have committed to ensure safety and transparency in developing AI models at the AI Seoul Summit, The Associated Press reports.

The Cybersecurity and Infrastructure Security Agency has updated its Known Exploited Vulnerabilities catalog to include security issues impacting NextGen Healthcare Mirth Connect and Google Chrome instances, according to Security Affairs.

Updates have been issued by GitHub to remediate a maximum severity security vulnerability impacting its self-hosted software development platform GitHub Enterprise Server, tracked as CVE-2024-4985, which could be exploited to evade authentication...

Australia's Western Sydney University had information from nearly 7,500 students and academic staff compromised following a cyberattack against the university's Microsoft 365 environment, reports BleepingComputer.

U.S. mobile virtual network operator and the country's sole "Christian conservative wireless provider" Patriot Mobile had the personal information of its subscribers reportedly exposed following a data breach, according to TechCrunch.

BleepingComputer reports that Canadian pharmacy and retail chain London Drugs was admitted to have been breached by the LockBit ransomware group in an attack last month that resulted in the temporary closure of all its stores across Western Canada.

Discover the Future of Tech at Cisco Live 2024, where subject matter experts will explore trends in Government, Education, and Healthcare. Get ready to explore a rich lineup of sessions designed to propel digital growth.

The severe security vulnerability (CVE-2024-4701, CVSS 9.9) gives remote attackers a way to burrow into Netflix's Genie open source platform, which is a treasure trove of information and connections to other internal services.

Going back a year or so, I wrote a story on the passive recon, specifically the IPINFO API ( https://isc.sans.edu/diary/28596).  This API returns various information on an IP address: the registered owning organization and ASN...

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

AI safety platform startup WitnessAI claims to help enterprises use AI safely and effectively with its platform addressing AI privacy, governance, and security.

As a newly independent company, SAGE Cyber will offer a platform that helps CISOs make data-driven decisions and optimize their security defenses.