Showing posts with label cybersecurity. Show all posts
Showing posts with label cybersecurity. Show all posts

Wednesday, September 23, 2026

Hackers Say They Stole Thousands of Sensitive F.B.I. Personnel Records; The New York Times, September 23, 2026

 , The New York Times; Hackers Say They Stole Thousands of Sensitive F.B.I. Personnel Records

"Former F.B.I. officials and cybersecurity experts who track criminal groups said that the breach appeared authentic and that it amounted to a potentially devastating security lapse and counterintelligence danger for the bureau. Among other concerns, the personnel information of F.B.I. officials, if posted on the dark web, could be acquired by foreign intelligence agencies in China, Russia or elsewhere and weaponized for espionage operations."

Sunday, August 9, 2026

OpenAI to pause some work on AI model Astra due to security concerns; The Guardian, August 8, 2026

 Eric Berger, The Guardian ; OpenAI to pause some work on AI model Astra due to security concerns

"OpenAI will pause some work on an artificial intelligence model because of security concerns, the company stated on Friday, following a series of incidents in which AI agents have escaped containment.

The company had evaluated the agent, Astra, and found “significant advancements in agentic coding and cybersecurity”, which had moved to a “critical” threshold where it can find and exploit vulnerabilities without human intervention, or devise and execute cyber-attacks when given only a “high level desired goal”."

Sunday, July 26, 2026

OPENAI ROGUE INCIDENT A CALL TO ‘DO MORE’ AS FUTURE THREATS LOOM, SAYS CATHOLIC AI ETHICS EXPERT; OSV News, July 24, 2026

 Gina Christian  . OSV News; OPENAI ROGUE INCIDENT A CALL TO ‘DO MORE’ AS FUTURE THREATS LOOM, SAYS CATHOLIC AI ETHICS EXPERT

"A recent OpenAI security incident that saw a test model go rogue may be a sign of more to come, and a call to double down on preventing future attacks, a Catholic expert on artificial intelligence ethics told OSV News.

“Cases like these are going to keep popping up, and each one of those should motivate us to do more,” said Brian Patrick Green, director of technology ethics at the Markkula Center for Applied Ethics at Santa Clara University...

The “whole thing is very significant,” Green added, noting that “there are a lot of softer targets than Hugging Face that are likely to be hit and have bad things happen.”

He said the OpenAI incident took place, providentially, within the context of a test, and that it was “significant enough for people to notice it.”

“It’s important that these are news stories,” Green said.

Given Pope Leo XIV’s recently released encyclical “Magnifica Humanitas,” which urged AI development to remain centered in God-given human dignity and the principles of Catholic social teaching, the faithful have a role to play in shaping this technology, Green said...

“For example, if you’re a Catholic who’s working in the security industry, then this is something you should work on,” he said. “If you’re a Catholic who’s working on AI models, then this is something that you should be aware of. If you’re a Catholic who’s in charge of protecting something, then it becomes particularly important for you to have adequate AI models on your side.”

Even those who are not directly involved in AI development and implementation can help, he said.

“Contact your congressperson and say, ‘Hey, I want better cybersecurity,'” said Green. “We’re super reliant on computers, and all of those systems are reliant on being secure. And if all of a sudden you make everything unsecure, then there are so many different kinds of disasters that could happen.”"

Saturday, April 11, 2026

How AI is getting better at finding security holes; NPR, April 11, 2026

 , NPR; How AI is getting better at finding security holes

"In the past few months, AI models have gone from producing hallucinations to becoming effective at finding security flaws in software, according to developers who maintain widely used cyber infrastructure. Those pieces of software, among other things, power operating systems and transfer data for things connected to the internet.

While these new capabilities can help developers make software more secure, they can also be weaponized by hackers and nation states to steal information and money or disrupt critical services.

The latest development of AI's cyber capability came on Tuesday, when AI lab Anthropic announced it had developed a powerful new model the company believes could "reshape cybersecurity." It said that its latest model, Mythos Preview, was able to find "high-severity vulnerabilities, including some in every major operating system and web browser." Not only that, the model was better at coming up with ways to exploit the vulnerabilities it found, which means malicious actors can more effectively achieve their goals.

For now, the company is limiting the access to the model to around 50 select companies and organizations "in an effort to secure the world's most critical software." They're calling the collaboration Project Glasswing, naming it after a butterfly species with transparent wings.

Anthropic says the risk for misuse is so high that it has no plans to release this particular model to the general public, according to the announcement, but it will release other related models. "Our eventual goal is to enable our users to safely deploy Mythos-class models at scale," the company wrote."

Tuesday, January 13, 2026

Personal Details of Thousands of Border Patrol and ICE Goons Allegedly Leaked in Huge Data Breach; The Daily Beast, January 13, 2026

 Tom Latchem , The Daily Beast; Personal Details of Thousands of Border Patrol and ICE Goons Allegedly Leaked in Huge Data Breach

"Sensitive details of around 4,500 ICE and Border Patrol employees—including almost 2,000 agents working in frontline enforcement—have allegedly been released by a Department of Homeland Security whistleblower following last week’s fatal shooting of Renee Nicole Good...

Prior to the Monday’s leak, which Skinner said he received on Monday, ICE List had been in possession of details of around 2,000 federal immigration staff, including names it has chosen not to make public. 

Roughly 800 of these, he said, are frontline agents or are permitted to deputise for them on the ground. The latest leak brings details of the total number of federal immigration staff in its possession to around 6,500...

He added: “We will make exceptions on a case-by-case basis, the best examples of which will be those who work in childcare within the agency, and nurses. There will be more exceptions, but we will have a discussion once the team flags a position as something we need to think twice about...

He said his project was important because DHS refuses to hold its own agents accountable for violations of the law."

Friday, November 3, 2023

An Apparent Cyberattack Hushes the British Library; The New York Times, November 3, 2023

  Alex Marshall, The New York Times; An Apparent Cyberattack Hushes the British Library

"Tasmina Islam, a lecturer in cybersecurity education at King’s College London said in an email that the motivation for attacking a library could be financial.

“Cybercriminals can access a lot of information from a library, including users’ personal data,” she said. Libraries also “store electronic books, research articles and various intellectual properties, all of which cybercriminals can exploit for illegal distribution,” Islam added.

The British Library incident “served as a warning for other libraries and institutions to assess their own security measures thoroughly,” she said."

Wednesday, February 26, 2020

Feds to US Firms: Watch Out for Employees Trying to Steal Trade Secrets for China; PC Mag, February 26, 2020

Michael Kan, PC Mag; Feds to US Firms: Watch Out for Employees Trying to Steal Trade Secrets for China

"“It’s not a spy versus spy game anymore,” said William Evanina, Director of the National Counterintelligence and Security Center, during the panel. “This is the businessman, the engineer, the scientist, the student, the professor.” ...

To stop the intellectual property theft, the feds are urging US companies to protect against insider threats, which can be spurred on both by foreign governments and domestic rivals, they noted. But the answer isn’t to profile employees or stop hiring staffers from certain countries, [John] Demers[US Assistant Attorney General for National Security] said. He suggests companies develop internal systems that can track when employees are accessing sensitive company files, which can help pinpoint when a IP theft might be occurring. For example, if a soon-to-be ex-staffer is suddenly accessing a huge trove of a confidential documents, the system should immediately flag the download to company administrators."

Friday, January 31, 2020

Users Lament PAIR Changes During USPTO Forum; IP Watchdog, January 30, 2020

Eileen McDermott, IP Watchdog; Users Lament PAIR Changes During USPTO Forum

"Jamie Holcombe, Chief Information Officer at the U.S. Patent and Trademark Office (USPTO), seemed surprised to learn on Wednesday that both the Public and Private versions of the USPTO’s Patent Application Information Retrieval (PAIR) System have serious issues that are making workflows untenable for users.

Holcombe was participating in a public Forum on the PAIR system, where USPTO staff listened to stakeholders’ experiences since the Office implemented major security changes to the system on November 15, 2019. “The USPTO disabled the ability to look up public cases outside of a customer number using Private PAIR,” explained Shawn Lillemo, Software Product Manager at Harrity LLP, who attended the Forum. “Most patent professionals prior to the change could retrieve all the PAIR information they needed from Private PAIR. That is no longer true.”"

Thursday, January 10, 2019

Pennsylvania High Court Decision Regarding Data Breach Increases Litigation Risk for Companies Storing Personal Data; Lexology, January 8, 2019

Ropes & Gray LLP , Lexology; Pennsylvania High Court Decision Regarding Data Breach Increases Litigation Risk for Companies Storing Personal Data

"This decision could precipitate increased data breach class action litigation against companies that retain personal data. No state Supreme Court had previously recognized the existence of a negligence-based duty to safeguard personal information, other than in the narrow context of health care patient information."

Monday, November 19, 2018

Yes, Facebook made mistakes in 2016. But we weren’t the only ones.; The Washington Post, November 17, 2018

Alex Stamos, The Washington Post; Yes, Facebook made mistakes in 2016. But we weren’t the only ones.

"Alex Stamos is a Hoover fellow and adjunct professor at Stanford University. He served as the chief security officer at Facebook until August...

It is time for us to come together to protect our society from future information operations. While it appears Russia and other U.S. adversaries sat out the 2018 midterms, our good fortune is unlikely to extend through a contentious Democratic presidential primary season and raucous 2020 election.

First, Congress needs to codify standards around political advertising. The current rules restricting the use of powerful online advertising platforms have been adopted voluntarily and by only a handful of companies. Congress needs to update Nixon-era laws to require transparency and limit the ability of all players, including legitimate domestic actors, to micro-target tiny segments of the population with divisive political narratives. It would be great to see Facebook, Google and Twitter propose helpful additions to legislation instead of quietly opposing it.

Second, we need to draw a thoughtful line between the responsibilities of government and the large technology companies. The latter group will always need to act in a quasi-governmental manner, making judgments on political speech and operating teams in parallel to the U.S. intelligence community, but we need more clarity on how these companies make decisions and what powers we want to reserve to our duly elected government. Many areas of cybersecurity demand cooperation between government and corporations, and our allies in France and Germany provide models of how competent defensive cybersecurity responsibility can be built in a democracy."

 

Wednesday, March 7, 2018

Top priest shares ‘The Ten Commandments of A.I.’ for ethical computing; internet of business, February 28, 2018

Chris Middleton, internet of business; Top priest shares ‘The Ten Commandments of A.I.’ for ethical computing

"A senior clergyman and government advisor has written what he calls “the Ten Commandments of AI”, to ensure the technology is applied ethically and for social good.

AI has been put forward as the saviour of businesses and national economies, but how to ensure that the technology isn’t abused? The Rt Rev the Lord Bishop of Oxford (pictured below), a Member of the House of Lords Select Committee on Artificial Intelligence, set out his proposals at a policy debate in London, attended by representatives of government, academia, and the business world.

Speaking on 27 February at a Westminster eForum Keynote Seminar, Artificial Intelligence and Robotics: Innovation, Funding and Policy Priorities, the Bishop set out his ten-point plan, after chairing a debate on trust, ethics, and cybersecurity."

Monday, March 6, 2017

Ethics And Hacking: What You Need To Know; Forbes, March 6, 2017

Forbes Technology Council, Forbes; 

Ethics And Hacking: What You Need To Know


"The term hacking gets bandied about a great deal in both the industry and in the media. Some stories carry the image of bored tweens, building skills while bragging about tearing up someone else’s hard work. Other stories talk more about offshore groups using server farms to mass phish for information.

The kinds of damage that hackers can cause is as varied as functions of a computer or device: Lost finances, trade secrets, and files swapped or erased are only the tip of what could be done to a person or company. Sometimes, just being one of the few people aware that different companies are talking to each other about business can mean opportunities for the unethical.

So the question gets raised: Can the arts of hacking be used to improve lives on a broader scale, or is it a purely destructive activity? Below, Forbes Technology Council members weigh in on ethics and hacking."

Thursday, January 19, 2017

Russia’s radical new strategy for information warfare; Washington Post, 1/18/17

David Ignatius, Washington Post; Russia’s radical new strategy for information warfare

"Krutskikh’s comments may have been a precursor of a new doctrine for information operations announced publicly by the Kremlin in December. The senior administration official described the Russian strategy: “They think of information space as a domain of warfare. In the U.S, we tend to have a binary view of conflict — we’re at peace or at war. The Russian doctrine is more of a continuum. You can be at different levels of conflict, along a sliding scale.”...

In Russia’s view, America is pushing just as aggressively in the information space, but denies it. “Things we perceive as free speech, they perceive as aggressive behavior from the West,” noted the senior U.S. official."

Friday, December 23, 2016

IBM's Astonishing Patent Strategy Shows Where It's Going Next; Nasdaq, 12/23/16

Prableen Bajpai, Nasdaq; IBM's Astonishing Patent Strategy Shows Where It's Going Next:
"IBM (IBM) is set to top the list of patent holders for the 24th year in a row in the U.S. This is no ordinary feat. IBM is the only company to have ever exceeded over 7,000 U.S. patent grants during a single year. During 2016 year-to-date, IBM has already crossed the 7,000-patent mark for the third consecutive year.
Against this backdrop, IBM is fundamentally reorganizing its business, leaving behind the image of ‘hardware, software, services’ company to emerge as a leader in ‘cognitive solutions and cloud computing.’ Here’s a look at how IBM is transforming its business, changing its patent portfolio and re-inventing to be IBM 2.0...
Patents are like the seeds of technological innovations that were planted years ago with a futuristic vision in mind. IBM has been active in doing so and what we see today in practice are the saplings. The real rewards will come with time but IBM is making sure that it keeps planting those seeds for the future."