48 karma · joined February 24, 2023
"It calls for an “immediate pause” on the “training of AI systems more powerful than GPT-4" for at least six months."
Completely unrealistic to expect this to happen and living in a dreamland if they think orgs are going to even remotely slow down on this generative AI hype train.
This was always going to happen. Can't count the number of articles and hot-takes on social media over the potential use of LLM's to create malicious code and whatnot.
Like any other cybercrime-related issue, law enforcement will be playing a perpetual game of cat and mouse.
"Day one of the 2023 competition, hosted in Vancouver, saw 12 unique zero-day vulnerabilities exploited in Microsoft SharePoint, Windows 11, Adobe Reader, Oracle VirtualBox, Tesla Gateway, and macOS."
Some interesting events at the Pwn2Own contest yesterday with a raft of vulnerabilities - including a Tesla Gateway bug - exploited.
Will be interesting to see how these are rectified from a vendor perspective
"This PowerShell script simplifies the process of securing WinRE images against attempts to exploit the CVE-2022-41099 flaw that enables attackers to bypass the BitLocker Device Encryption feature system storage devices."
Informative explainer here from Bleeping Computer on WinRE Bitlocker bypass flaw fix
Long story short, I'd say it doesn't deserve a 'last chance'.
Recent blog posts from the company show it's been all round mess. Glad I use Bitwarden. If I was a LastPass user I would've run for the hills in August.
Fascinating discovery here and a cool insight on the development of steel-based tools etc dating back far older than perhaps previously thought.
Must've seen a half dozen articles on fake ad sites for cloud vendors and various services in the last couple of weeks alone.