// security
$ tail -f ./security
Headlines from early disclosure channels, research labs and curated news, each with a short summary.
# Today
-
Senators say targeted ads are a security risk. Ad groups say the critics are off base.
Some senators and Citizen Lab researchers linked targeted ads to security risks, while IAB Europe and Google defended industry vetting practices.
# Yesterday
-
Exclusive: Bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber
A bipartisan U.S. bill would direct federal agencies to develop guidance on AI distillation attacks and convene industry on defensive cybersecurity.
-
eMudhra kills its certificate business after researchers cracked its private keys in under a second
eMudhra shut down its certificate business after researchers said its private keys were weak enough to be cracked in under a second.
-
Encryption isn’t enough to protect data wherever it goes
An opinion piece argues that pseudonymization may reduce the value of stolen data when encryption cannot protect information in use.
-
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
Microsoft attributes a ConnectWise supply-chain attack to a China-aligned group that used an automated AI framework to reach many tenants.