Apr 26, 2024 TikTok, Flowmon, Arcane Door, Brokewell, RuggedCom, Deepfakes, Non-Competes, Aaran Leyland, and More, on this edition of the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-381 The post TikTok, Flowmon, Cisco, Brokewell, RuggedCom, Deepfakes, Non-Competes, Aaran Leyland – SWN #381 appeared first on DIGITALIVE.WORLD ..read more

The healthcare giant Kaiser Permanente is notifying more than 13 million customers that their personal information may have been shared with third-party vendors. In an April 12 notice to the Department of Health and Human Services, first reported by TechCrunchthe company said the information may include IP addresses, names, “information that could indicate a member or patient was signed into a Kaiser Permanente account or service, information showing how a member or patient interacted with and navigated through the website and mobile applications, and search terms used in the health encyclop ..read more

In the April 2024 survey we received responses from 1,092,963,063 sites across 267,934,761 domains and 12,872,291 web-facing computers. This reflects a gain of 2.8 million sites, a loss of 3.9 million domains, and a gain of 244,716 web-facing computers. OpenResty was the only vendor to gain sites this month. It gained 5.0 million sites (+4.69%), increasing its market share to 10.2% (+0.43pp) of sites seen by Netcraft. Cloudflare suffered the largest loss of 8.4 million sites (-6.84%) this month, reducing its market share to 10.4% (-0.80pp). Its loss was primarily driven by Freenom exiting th ..read more

© 2022 Packet Storm. All rights reserved. The post The Not-So-Silent Type appeared first on DIGITALIVE.WORLD ..read more

Alibaba released Qwen1.5-110B, the first large model with hundreds of billions of parameters. It has previously released versions with different scale parameters of 0.5B, 1.8B, 4B, 7B, 14B and 72B. Alibaba said that the Qwen1.5-110B model is comparable to Meta-Llama3-70B in basic capability evaluation and performs well in Chat evaluation, including MT-Bench and AlpacaEval 2.0. Qwen1.5-110B is similar to other Qwen1.5 models and uses the same Transformer decoder architecture. It includes Grouped Query Attention (GQA), which is more efficient during model inference. The model supports a contex ..read more

Unlock the dynamic interplay between cybersecurity and agility in today’s business landscape. Explore how organizations can fortify their defenses, foster innovation, and thrive amidst uncertainty. In an era defined by rapid technology advances, geopolitical complexities, and economic uncertainties, organizations face a daunting challenge: how to thrive amidst constant disruption and change. As businesses look to digital transformation to drive innovation, efficiency, and growth, they must deal with growing cybersecurity risks. From sophisticated cyber attacks to the complexities of mod ..read more

Experts warn of an ongoing malware campaign targeting WP-Automatic plugin A critical vulnerability in the WordPress Automatic plugin is being exploited to inject backdoors and web shells into websites WordPress security scanner WPScan warns that threat actors are exploiting a critical SQL injection vulnerability in the plugin WordPress Automatic to inject malware into websites. The premium plugin “Automatic” developed by ValvePress enables users to automatically post content from any website to WordPress, including RSS feeds. It has over 38,000 paying customers. The vulnerability, tracked ..read more

By Will Song The Trail of Bits cryptography team is pleased to announce the open-sourcing of our pure Rust and Go implementations of Leighton-Micali Hash-Based Signatures (LMS)a well-studied NIST-standardized post-quantum digital signature algorithm. If you or your organization are looking to transition to post-quantum support for digital signatures, both of these implementations have been engineered and reviewed by several of our cryptographers, so please give them a try! For the Rust codebasewe’ve worked with the RustCrypto team to integrate our implementation into the RustCrypto/signature ..read more

Spring is not just a time for dusting off shelves and donating old clothes; it’s also the perfect season to declutter and organize your digital space. A cluttered digital space can lead to stress, decreased productivity, and even make you more susceptible to cyber threats. So, let’s dive into the comprehensive guide to mastering your digital wellbeing this spring with our ultimate cyber spring-cleaning series. Decluttering your digital home Digital clutter, while not visible, can weigh just as heavily on your mind and devices. Start by deleting duplicate files and tidying up your desktop wit ..read more

Kaiser Permanente data breach may have impacted 13.4 million patients Healthcare service provider Kaiser Permanente disclosed a security breach that may impact 13.4 million individuals in the United States. Kaiser Permanente is an American integrated managed care consortium, it is made up of three distinct but interdependent groups of entities: the Kaiser Foundation Health Plan, Inc. (KFHP) and its regional operating subsidiaries; Kaiser Foundation Hospitals; and the regional Permanente Medical Groups. The health giant operates 39 hospitals and more than 700 medical offices, with ove ..read more