Regulation & compliance
Shady AI: The Next Big Governance Problem in Cybersecurity
The increasing use of approved AI tools in unapproved ways is creating a new governance problem for cybersecurity teams, known as 'shady AI'
#Regulation & compliance
Every Cybersecurity story tagged Regulation & compliance.
Regulation & compliance
Cloudflare Workers Vulnerable to Spectre Attack, Leaking JWT at 12 Bits/Second
Cybersecurity researchers have disclosed a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second.
Regulation & compliance
TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT, which abuses SharePoint and Teams to steal credentials and move across networks.
Regulation & compliance
Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
Cybersecurity researchers have discovered a new typosquatting campaign targeting RubyGems users with a Windows-based information stealer. The campaign, dubbed StubMaker, has been tracked by OpenSourceMalware and has been found to harvest browser credentials, cryptocurrency wallets, seed phrases, and Telegram data.
Regulation & compliance
One Attacker Scrapes Salesforce and ServiceNow Portals
A single attacker has been scraping records from both Salesforce and ServiceNow customer portals across multiple industries for over a year.