The Open Source Security Foundation (OpenSSF), in collaboration with LF Education, announces the general availability of LFEL1001, a free online course designed to help software developers understand and prepare for the requirements of the European Union (EU) Cyber Resilience Act (CRA). Continue reading
Christopher Patrick Hawkins, University of Staffordshire
In the modern world we are all constantly connected, but this comes with risks. As most cybersecurity specialists will tell you, the biggest vulnerability in any system is the user – whether at home or work.
Walt Szablowski, Founder and Executive Chairman of Eracent, cautions that there is a blind spot for software asset procurement and management teams when selecting and managing software products. It’s imperative for all application users and developers to understand what licensing requirements and potential security risks are involved in widely used open-source software (OSS). Maintaining compliance and protecting against vulnerabilities requires complete visibility and constant vigilance to ensure legal compliance, protect intellectual property, and avoid costly litigation and security breaches. Continue reading
Alpesh Bhudia, Royal Holloway University of London; Anna Cartwright, Oxford Brookes University; Darren Hurley-Smith, Royal Holloway University of London, and Edward Cartwright, De Montfort University
In May 2023, the Dallas City Government was hugely disrupted by a ransomware attack. Ransomware attacks are so-called because the hackers behind them encrypt vital data and demand a ransom in order to get the information decrypted.
April 26, 2023 /Technology/ — Prompt Engineering is considered one of the hottest new tech skills. It refers to communicating with AI systems by using natural human language, such as English, to make them respond to some specific action or task. Talking to AI software can be done for legitimate reasons, it can also be done for harmful purposes.
Here are some examples of AI prompt injection attacks that have been used for harmful instructions: Continue reading
Avast, a leading global digital security and privacy consumer brand by Gen™ (NASDAQ: GEN), anticipates an increased risk of ransomware attacks in 2023 threatening to leak people’s and businesses’ valuable data if ransom demands aren’t paid. Additionally, Avast researchers foresee optimization of social engineering used in scam attacks, taking advantage of economic hardships and energy crisis fears. The experts also expect increased malicious activity overall, as open-source malware becomes more accessible, and cybergangs recruit hacktivists to join their causes. Continue reading