Homeland Security Uses AI Tool to Analyze Social Media of Citizens and Refugees by JumpCrisscross

Hacking. Disinformation. Surveillance. CYBER is Motherboard’s podcast and reporting on the dark underbelly of the internet.Customs and Border Protection (CBP) is using an invasive, AI-powered monitoring tool to screen travelers, including U.S. citizens, refugees, and people seeking asylum, which can in some cases link their social media posts to their Social Security number and location

ByHackTechSeptember 10, 20230Comments

News

LLM Security by ep_jhu

LLM security is the investigation of the failure modes of LLMs in use, the conditions that lead to them, and their mitigations.Here are links to large language model security content – research, papers, and news – posted by @llm_secGot a tip/link? Open a pull request or send a DM.AttacksAdversarialA LLM Assisted Exploitation of AI-GuardianAdversarial Examples

ByHackTechAugust 28, 20230Comments

News

Skiff Security – Cryptography and decentralization to keep your data private by samwillis

Become a part of our 600,000+ community and j

ByHackTechJune 26, 20230Comments

News

Security Research to Protect the Modern Software Supply Chain by mooreds

JFrog Security Research Our dedicated team of security engineers and researchers are committed to advancing software security through discovery, analysis, and exposure of new vulnerabilities and attack methods. Our dedicated team of security engineers and researchers are committed to advancing software security through discovery, analysis, and exposure of new vulnerabilities and attack methods. Latest from

ByHackTechJune 23, 20230Comments

News

Improve Win32 app security via app isolation by ingve

We are thrilled to announce the public preview launch of Win32 app isolation. This blog post provides an overview of the topic. To learn more about the developer experience and engage with the team, please visit our GitHub page. It is worth noting that Win32 app isolation is an addition to the family of existing

ByHackTechJune 14, 20230Comments

News

About the security content of iOS 16.5 and iPadOS 16.5 by nateb2022

Released May 18, 2023 Accessibility Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: An app may be able to bypass Privacy preferences Description: A privacy issue was addressed with improved private data redaction for

ByHackTechMay 18, 20230Comments

News

How to do a security review of cloud infrastructure by varunjain99

The challenge of prioritization The review process Phase 1: Cloud Providers Stage 1: Identify the primary CSP Stage 2: Understand the high-level hierarchy Stage 3: Understand what is running in the Accounts Stage 4: Understand the network architecture Stage 5: Understand the current IAM setup Stage 6: Understand the current monitoring setup Stage 7: Understand

ByHackTechApril 3, 20230Comments

News

About the security content of iOS 16.4 and iPadOS 16.4 by doener

Released March 27, 2023 Accessibility Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private

ByHackTechMarch 29, 20230Comments

News

OpenSIPS Security Audit Report is fully disclosed and out there by campuscodi

It’s almost a year since the OpenSIPS project published a minimized version of our security audit report from 2022. Now, the full version has been published, with all the information intact on how to reproduce the vulnerabilities and extra details in an 80+ page report.The OpenSIPS security audit report can be found here.What is the

ByHackTechMarch 20, 20230Comments

News

A case against Layer 4 security tools by CKMo

By Colin Mo March 1, 2023 We often talk about how Layer 4 tooling such as VPNs are bad for security, so this post is going to dig into why. If you just want the conclusion, it’s simple: Layer 4 tooling is fundamentally blind to its own traffic and Layer 7 tooling is not, which

ByHackTechMarch 3, 20230Comments

Sign Up to Our Newsletter