Author: HackWatchit

In this Help Net Security video, Lee Waskevich, VP of Security at ePlus, discusses how AI deployment demands enhanced governance and stricter controls, particularly in managing data. The recent ePlus AI Readiness survey revealed that the top data concerns among participants were data quality (61%), data security (54.5%), and data governance (52%), emphasizing the need for a strong data management strategy. To successfully implement AI initiatives, organizations must first identify the relevant data for each AI objective, determine its location, break down data silos, and enforce proper tagging and governance. Establishing this alignment is essential for ensuring secure AI deployment…

Elections are the bedrock of democratic societies, but historically, they have been vulnerable to various forms of manipulation and fraud. Over the last decade, there have only been 1,465 proven cases of election fraud out of the hundreds of millions of votes cast, but election interference through tactics like deliberately spreading disinformation has become increasingly more common. Election Day for determining the next U.S. President isn’t until November 5th, but early voting starts as early as September 6th in some states. With election season officially underway, understanding past election scams and current threats is crucial for safeguarding the future of…

Canadian banks are set to announce their quarterly earnings this week, and while analysts are optimistic about the results, they note that potential U.S. tariffs may dampen the mood. The Big Six banks — namely, Royal Bank of Canada, Toronto-Dominion Bank, Bank of Nova Scotia, Bank of Montreal, Canadian Imperial Bank of Commerce and the National Bank of Canada — are expected to post moderate earnings growth overall for their first quarter, according to a Monday (Feb. 24) report from The Wall Street Journal (WSJ). However, a possible trade war with the U.S. means that these banks will need to shore…

Google Cloud is putting technology into its key management tool to protect its encryption systems from threats posed by quantum computing.The major cloud provider said Monday that quantum-safe digital signatures – FIPS 204 and 205 – are in Google Cloud Key Management Service (Cloud KMS) for software-based keys, a capability that’s now available in preview. At the same time, the company is laying out some details of its post-quantum cryptography strategy for Google Cloud encryption products, which includes not just Cloud KMS but also its Hardware Security Modules.The cybersecurity industry for years has been concerned with what would happen when…

I was introduced to Ethereum some time in 2017. I remember the excitement and awe I felt for this technology—a network of untrusted machines capable of creating the world’s most reliable computer. But what fascinated me even more was the promise of a new web: Web3.This new web would be owned by its users rather than controlled by large corporations. It was envisioned as perfectly democratic. Web3 represented the real web—the way the Internet was originally imagined.Ethereum’s model at the time suggested that this new web would run on a massive virtual computer (the World Computer), with Swarm acting as…

Why Customize LLMs? Large Language Models (Llms) are deep learning models pre-trained based on self-supervised learning, requiring a vast amount of resources on training data, training time and holding a large number of parameters. LLM have revolutionized natural language processing especially in the last 2 years, demonstrating remarkable capabilities in understanding and generating human-like text. However, these general purpose models’ out-of-the-box performance may not always meet specific business needs or domain requirements. LLMs alone cannot answer questions that rely on proprietary company data or closed-book settings, making them relatively generic in their applications. Training a LLM model from scratch is…

The post Talkin’ About Infosec News – 1/10/24 appeared first on Black Hills Information Security.

Getting caught in a social media faux pas seems to be the new normal. It’s not uncommon for old social media posts from celebrities, influencers, and politicians to resurface and spark public outcry. They find themselves under fire for past comments or behaviors that, viewed through today’s lens, were deemed offensive or inappropriate. In our fast-moving digital world, today’s conversations can take on new meanings years down the line. Then you might find yourself explaining posts that no longer reflect who you are. This reality makes it crucial to start a conversation in your family about social media archives. Teens…

A new botnet-powered cyber attack is putting Microsoft 365 users at risk. Security researchers at SecurityScorecard have reported that over 130,000 compromised devices are being used to launch coordinated password-spraying attacks against Microsoft 365 accounts. What’s Happening? Instead of relying on the usual login mechanisms that trigger alerts through repeated failed attempts, the attackers are using non-interactive sign-ins for their campaigns. This method is normally meant for automated processes or background services and does not invoke the usual MFA checks. As a result, suspicious activities may go unnoticed by security monitoring systems that focus on standard user log-ins. What’s more,…