More stories

  • in

    Singapore is working on technical guidelines for securing AI systems

    Just_Super/Getty Images Singapore plans to soon release instructions it says will offer “practical measures” to bolster the security of artificial intelligence (AI) tools and systems. The Cyber Security Agency (CSA) is slated to publish its draft Technical Guidelines for Securing AI Systems for public consultation later this month, according to Janil Puthucheary, Singapore’s senior minister […] More

  • in

    US car dealerships are recovering from massive cyberattack: 3 things you should know

    welcomia/Getty Images A massive cyberattack caused chaos for US car dealerships, and it’s still affecting both dealers and customers. According to BleepingComputer, a notorious extortion organization called the BlackSuit ransomware gang carried out a cyberattack on CDK Global on June 19. BlackSuit has conducted a number of high-profile attacks in the past several years, mostly against health […] More

  • in

    5 ChromeOS settings you should change for a more secure Chromebook – here’s how

    Ed Bott/ZDNETChromeOS is not merely a simplified operating system. ChromeOS is also a relatively secure operating system — thanks to its multiple layers of protection for preventing things like viruses and malware from harming your device and accessing your data.Can you improve upon ChromeOS’s already impressive default settings? You sure can! I’ve identified five settings you can work with to take ChromeOS to even higher levels of security. Also: Google might abandon ChromeOS Flex. Here’s why – and what you can do about itLet’s dive in.1. 2-step verificationThis is an essential security move, whether or not you use ChromeOS. Two-step verification (aka 2FA) adds yet another layer of security to the login process of online accounts. When 2FA is added to a Google account, it requires a mobile device associated with your Google account to serve as the 2FA authentication mechanism.However, there’s a trick to using this on a Chromebook. First, make sure you’ve enabled 2FA on your Google account. Then open Settings on your Chromebook and go to Privacy And Security > Manage Other People. On that page, disable the “Show usernames and photos on the sign-in screen” option. Once you’ve done that, reboot the device and you should be required to use 2FA to log in. More

  • in

    Over 14M servers may be vulnerable to OpenSSH’s regreSSHion RCE flaw. Here’s what you need to do

    Qualys Hold onto your SSH keys, folks! A critical vulnerability has just rocked OpenSSH, Linux’s secure remote access foundation, causing seasoned sysadmins to break out in a cold sweat. Dubbed “regreSSHion” and tagged as CVE-2024-6387, this nasty bug allows unauthenticated remote code execution (RCE) on OpenSSH servers running on glibc-based Linux systems. We’re not talking […] More

  • in

    Do you still need to pay for antivirus software in 2024?

    Bloomberg Creative/Getty Images Last month, the United States Department of Commerce announced a ban on Kaspersky software. As of September 29, ZDNET’s Lance Whitney reported, Kaspersky will no longer be able to provide antivirus signature updates and code updates for the banned products to customers in the United States. When I read that news, I […] More

  • in

    Generative AI is new attack vector endangering enterprises, says CrowdStrike CTO

    skynesher/Getty Images Cybersecurity researchers have been warning for quite a while now that generative artificial intelligence (GenAI) programs are vulnerable to a vast array of attacks, from specially crafted prompts that can break guardrails, to data leaks that can reveal sensitive information.  The deeper the research goes, the more experts are finding out just how […] More

  • in

    A new MOVEit vulnerability is igniting hacking attempts. Companies should patch ASAP

    Rob Dobi/Getty Images MOVEit, a popular file transfer platform used by thousands of companies and government entities, is once again in the news for all the wrong reasons. MOVEit developer Progress Software earlier this week said that it had discovered a critical vulnerability in its software that, if not patched with its latest software update, […] More