Month: April 2025
-
SK.com allegedly hacked by Qilin
SK Inc. invests heavily in the U.S. It claims to be investing $50 billion in U.S. businesses, with investment in…
-
LLMs can’t stop making up software dependencies and sabotaging everything
#### [AI + ML](/software/ai_ml/)**23** LLMs can’t stop making up software dependencies and sabotaging everything=========================================================================**23** Hallucinated package names fuel ‘slopsquatting’———————————————–[Thomas Claburn](/Author/Thomas-Claburn…
-
The Expanding Attack Surface: Why Collaboration Tools Are the New Front Line in Cyberattacks
Share with your network! April 11, 2025 Tim Bedard *The modern workplace has expanded beyond email. Attackers now exploit collaboration…
-
AI-hallucinated code dependencies become new supply chain risk
A new class of supply chain attacks named ‘slopsquatting’ has emerged from the increased use of generative AI tools…
-
Tycoon2FA phishing kit targets Microsoft 365 with new tricks
Phishing-as-a-service (PhaaS) platform Tycoon2FA, known for bypassing multi-factor authentication on Microsoft 365 and Gmail accounts, has received updates that…
-
Leak confirms OpenAI’s GPT 4.1 is coming before GPT 5.0
OpenAI is working on yet another AI model reportedly called GPT-4.1, a successor to GPT-4o, which is expected to come…
-
Pentagon hits Accenture, Booz Allen and Deloitte with contract cancellations
Pentagon hits Accenture, Booz Allen and Deloitte with contract cancellations============================================================================ Gettyimages.com/Westend61 | Get the latest federal technology news delivered to…
-
Trump likely to propose pay freeze for federal workers in 2026
Trump likely to propose pay freeze for federal workers in 2026==============================================================![The Office of Management and Budget’s response to an agency…
-
GOFFEE Leveraging PowerModul Tool to Attack Government & Energy Organizations
The threat actor known as GOFFEE has escalated its malicious campaign in 2024, introducing a new implant dubbed ‘PowerModul’ to…
-
Symbolic Link trick lets attackers bypass FortiGate patches, Fortinet warns
Fortinet warns attackers can keep read-only access to FortiGate devices even after the original vulnerability is patched.————————————————————————————————————————-Fortinet warns that threat…