Remove Download Remove Malware Remove Open Source
article thumbnail

10 things to watch out for with open source gen AI

CIO Business Intelligence

Even if you don’t have the training data or programming chops, you can take your favorite open source model, tweak it, and release it under a new name. According to Stanford’s AI Index Report, released in April, 149 foundation models were released in 2023, two-thirds of them open source.

article thumbnail

Open-source developers targeted in sophisticated malware attack

Network World

For the past few months, developers who publish their code on GitHub have been targeted in an attack campaign that uses a little-known but potent cyberespionage malware. If allowed to execute, the macro code executed a PowerShell script that reached out to a remote server and downloaded a malware program known as Dimnie.

Malware 150
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Beyond human identities: Cybersecurity’s blind spot in the age of AI agents

CIO Business Intelligence

If agents are compromised, attackers can use them to move laterally across the network, escalate their privileges to steal data, deploy malware and hijack critical internal systems. Unfortunately, many of the permissions given to AI agents are far too broad. Machines, on the other hand, dont complain.

article thumbnail

Supply chain attack hits Mac users of HandBrake video converter app

Network World

Hackers compromised a download server for HandBrake, a popular open-source program for converting video files, and used it to distribute a macOS version of the application that contained malware. Because of this, users who downloaded HandBrake-1.0.7.dmg

Video 218
article thumbnail

The original Barcode Scanner app, seemingly mistaken for malware, is getting review-bombed

The Verge

It’s not quite clear what’s going on here, but the prevailing theory is that the 100 million-download strong app is getting mistaken for another one with the same exact name — one that might have been a clone of ZXing’s app and one that did add malware in a recent update, according to digital security firm MalwareBytes.

Barcode 116
article thumbnail

Lazarus APT Continues to Exploit Log4j Vulnerability

SecureWorld News

Log4j is a widely-used open source Java logging library, and the vulnerability allowed threat actors to execute remote code on servers, potentially leading to unauthorized access and data breaches. As part of Operation Blacksmith, Lazarus has introduced three previously unseen malware families written in the DLang programming language.

article thumbnail

The Rise of Insider Threat Automation: When Employees Weaponize AI

SecureWorld News

From simple breaches to complex automation Traditionally, insider threats involved straightforward breaches: an employee downloads sensitive files ( Stuxnet, anyone? ), leaks confidential information, or manipulates company data for personal gain. Create custom malware that adapts to countermeasures in real time.