اخبار امنیتی

Help Net Security

Ghostunnel: Open-source TLS proxy with mutual authentication

۱۴۰۵/۰۸/۱۳ · ۲ ساعت پیش امنیت سایبری Help Net Security

Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. It works in two directions. In server mode it sits in front of a backend, accepts TLS connections, checks the client’s certificate, then passes traffic to the service behind it over TCP or a UNIX socket. In client mode it does the reverse, listening for plain local connections, wrapping them in TLS…

Help Net Security

NIST publishes cybersecurity guide for businesses too small to have IT staff

۱۴۰۵/۰۸/۱۳ · ۴ ساعت پیش امنیت سایبری Help Net Security

The National Institute of Standards and Technology (NIST) released cybersecurity guidance for small businesses with no paid employees other than their owners. These businesses include freelancers, sole proprietors, and independent contractors. About 82% of the 34.8 million small businesses in the United States fall into this category, according to the U.S. Small Business Administration’s Office…

Help Net Security

Anthropic open-sources FlashProve, its provable inference prototype for MoE models

۱۴۰۵/۰۸/۱۳ · ۴ ساعت پیش امنیت سایبری Help Net Security

Anthropic’s Frontier Red Team, with collaborators at EPFL, MIT and StarkWare, built FlashProve, a prototype that produces a cryptographic proof that one specific language model generated one specific reply. The prover, two verifiers, the formal proofs behind them and a protocol specification are on GitHub under the Apache 2.0 license. Source: Anthropic When you send a prompt to a hosted API, you…

Security Affairs

NIS2 Makes Board Members Personally Liable for Access Control Decisions

۱۴۰۵/۰۸/۱۲ · ۱ روز پیش امنیت سایبری Security Affairs

NIS2 Article 20 makes management bodies answerable for the access controls they approve, and boards are starting to ask for proof that those controls work. NIS2 board accountability gives directors a more direct role in cybersecurity. Under Article 20, the management bodies of essential and important entities must approve the cybersecurity risk-management measures required by […]

Security Affairs

New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia

۱۴۰۵/۰۸/۱۱ · ۱ روز پیش امنیت سایبری Security Affairs

A new wave of fridge cyberattacks hit supermarket refrigeration systems across five European countries, raising temperatures and causing food losses. A new wave of fridge cyberattacks has affected supermarket refrigeration systems in several European countries. Fridges and freezers suddenly rose in temperature overnight, with some incidents suspected to be caused by hackers. On Monday, November…

Security Affairs

Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens

۱۴۰۵/۰۸/۱۱ · ۱ روز پیش امنیت سایبری Security Affairs

Hackers reportedly hit Ukraine ‘s and Russia ‘s emergency alert apps, sending fake nuclear and attack warnings and raising concerns over public safety. Ukraine and Russia both said on Sunday night that hackers had compromised their emergency alert apps and used them to send fake warnings about air raids and other attacks, including nuclear threats. […]