OODA Analysis and Briefs

Home > OODA Analysis and Briefs

Analysis

Sharing (Again)

Nearly five years after 9/11, reports show the federal government has made limited progress on sharing terrorism information because of uncertainty about what to share, and how to do so without infringing on civil liberties. States are filling in some of the gaps by setting up intelligence fusion centers, though those activities also are stirring…
Iraqi WMDs (Again)

FronPage Symposium. Gaubatz goes off the end a bit, but the rest do a crack-up job. Key points: Ledeen: The truly amazing fact is that the White House is very obviously opposed to revisiting these questions. They say they want to look forward, not back into the past. But this wrongheaded view undermines a good…
The Geezer Brigade

The Federal Page addresses issues related to retirees and in particular IC staffers. With substantial numbers of baby boomers likely to leave government for retirement in the next 10 years, the Bush administration and Congress are looking for ways to keep experienced hands. Most federal agencies have plans to ensure that critical jobs are filled…
A Very Smart Start

The FBI broke with one of its most storied traditions Wednesday, announcing changes in its top management that, rather than elevating onetime agents, tapped officials with extensive experience outside of the bureau for several key positions. The realignment, unveiled by Director Robert S. Mueller III, put nonagents — including one who is a former oil…
Classic

(Thanks to Tom for a well-needed laugh) What do you do when people stop listening to your drivel? Start a slap-fight. I’ll let you all decide which character is Larry and which is Michael.
This is what happens . . .

. . . when ex-single-source analysts try to deal with multi-source intel: In a screed Rolling Stone is passing off as journalism, James Bamford becomes the latest in a growing crowd of hacks to smear our friend Michael Ledeen. […] But this [Italian documents] forgery nonsense is a sideshow compared to Bamford’s ludicrous account of…
Just snippets for now

Man oh man, you take 48 hours for a business trip and 480 hours of work pile up. For the time being you’ll have to be satisfied with a few snippets I can post during lunch and too-brief down-periods. Right now just a note of comfort for everyone on the west coast that CTU…
HLS: Serious or Not Serious XVII

You could be on a secret government database or watch list for simply taking a picture on an airplane. Some federal air marshals say they’re reporting your actions to meet a quota, even though some top officials deny it. The air marshals, whose identities are being concealed, told 7NEWS that they’re required to submit at…
Another Indicator

Courtesy of Ralph Peters in the NY Post: * Famed for its penetration, Israeli intelligence failed this time. It didn’t detect the new weapons Iran and Syria had provided to Hezbollah, from anti-ship missiles to longer-range rockets. And, after years of spying, it couldn’t find Hezbollah. This should set off global alarm bells: If Hezbollah…
How Much Pain?

Fighting cyber-crime requires an Enron-like scandal to force the hand of legislators, the FBI argued today. Only after such an event could the necessary reforms be made to allow authorities to effectively battle online criminals, according to FBI special agent Shéna Boswell-Crowe. […] “I do not think that [cyber-crime] has had its day. There has…
There is no talking to some people (Update)

The Weekly Standard posts a well done bit of research (got to get me a think-tank job) on what is really needed in our war efforts from an intelligence perspective. Since I think it deserves a full read I’m not going to post an extract, suffice it to say that when presented with an opportunity…
Pretenders

Army STRATCOM tries and fails: Information Operations Newsletter Compiled by: Mr. Xxxx Xxxxxx US Army Strategic Command G3 Plans, Operations, and Exercises Information Operations Branch Table of Contents […long list of somewhat relevant IO-related news stories . . .] Everyone wants to be TWI-3; no one wants to make the effort. Guys, if your audience…
Two Steps Back (Update)

Welcome OTB readers . . . Christine Axsmith, a software contractor for the CIA, considered her blog a success within the select circle of people who could actually access it. Only people with top-secret security clearances could read her musings, which were posted on Intelink, the intelligence community’s classified intranet. Writing as Covert Communications, CC…
Info Sharing: Still Not Getting It

U.S. officials said Tuesday the U.S. intelligence community was grappling with policies to effectively share information. […] Rep. Rob Simmons, R-Conn., chairman of the Homeland Security Intelligence Subcommittee of the U.S. House of Representatives, said he was not satisfied with progress on reforming national intelligence capabilities to counter threats. […] The U.S. Congress mandated modernization…
Location, Location, Location

Director of National Intelligence John D. Negroponte may have his eye on history as he attempts to secure a prime downtown Washington property – Navy Hill, overlooking the Potomac River – for his headquarters. During World War II, the property’s gracious Central Building, constructed in 1910, served as the home office for William “Wild Bill”…

Briefs

Generative AI outperforms hackers but not their creativity

Generative AI was a major theme in the 2023 report, with 55% of respondents saying that it can already outperform hackers or will be able to do so within the next five years. However, hackers aren’t worried about being replaced, with 72% of respondents saying that generative AI will not be able to replicate the…
Actors say Hollywood studios want their AI replicas — for free, forever

During today’s press conference in which Hollywood actors confirmed that they were going on strike, Duncan Crabtree-Ireland, SAG-AFTRA’s chief negotiator, revealed a proposal from Hollywood studios that sounds ripped right out of a Black Mirror episode. In a statement about the strike, the Alliance of Motion Picture and Television Producers (AMPTP) said that its proposal included…
China accuses US of militarizing space following protest over Navy plane’s Taiwan Strait transit

Amid a freeze in military-to-military contacts, China is accusing the United States of militarizing outer space, a day after it protested the passage of a U.S. Navy P-8A Poseidon anti-submarine aircraft through the Taiwan Strait. Chinese Defense Ministry spokesperson Col. Tan Kefei said on Friday that U.S. actions, including the establishment of the Space Force…
How Do Companies Use Artificial Intelligence?

By now, AI-based tools have totally changed the way companies operate across all industries. The use of AI in them to streamline operations, make informed decisions, and enhance customer experiences. Companies utilize AI in a multitude of ways, such as automating repetitive tasks, predicting customer behavior, and optimizing supply chain management. The use of AI in…
China finalizes first-of-its-kind rules governing generative A.I. services like ChatGPT

Chinese regulators on Thursday finalized first-of-its-kind rules governing generative artificial intelligence as the country looks to ramp up oversight of the rapidly growing technology. The powerful Cyberspace Administration of China (CAC) said it worked with several other regulators to come up with the new regulation that will come into effect on Aug. 15. Generative AI…
Syria seeks to assert control over UN aid deliveries

Syria will allow UN humanitarian aid into rebel-held territory through its main border crossing which closed during a political impasse at the UN. 4.1 million people in north-west Syria depend on this aid from the UN. the UN Security Council failed to agree on Thursday on extending the operation, it says it is studying Syria’s…
Wagner head Prigozhin rejected offer to join Russia’s army

The head of Wagner mercenary group, Yevgeny Prigozhin has rejected an offer for his fighters to serve as a unit in Russia’s army, according to President Vladimir Putin. Putin told newspapers that many group commanders backed the plan to be led by a senior Wagner figure, but Prigozhin rejected the offer. These talks were held…
India launches historic Chandrayaan-3 mission to land spacecraft on the moon

India is hoping to become the fourth country to execute a controlled landing on the moon with its successful launch of the Chandrayaan-3 mission on Friday. Chandrayaan launched from the Satish Dhawan Space Center at Sriharikota in southern Andhra Pradesh state around 2:30 p.m. local time. Crowds gathered to watch the take off at the…
Hackers Target Reddit Alternative Lemmy via Zero-Day Vulnerability

In recent days, several instances of the Reddit alternative Lemmy were hacked due to a zero-day vulnerability that attackers exploited. The open source software, which facilitates self-hosted news aggregation and discussion forums, consists of interconnected servers run by different individuals and organizations. The attacker took advantage of a cross-site scripting (XSS) vulnerability related to custom…
Critical Cisco SD-WAN Vulnerability Leads to Information Leaks

A critical vulnerability has been discovered in the Cisco SD-WAN vManage software, posing a significant risk to organizations. Tracked as CVE-2023-20214 with a CVSS score of 9.1, the flaw stems from the inadequate validation of REST API requests in vManage. This allows unauthenticated attackers to exploit the vulnerability and retrieve sensitive information or manipulate the…
Industry Reactions to EU-US Data Privacy Framework: Feedback Friday

The European Union and the United States have recently reached an agreement on the Data Privacy Framework, which focuses on facilitating secure data transfers from Europe to the US. The framework aims to address concerns over the storage and protection of European citizen data held by tech giants in the US, such as Google and…
Zluri Raises $20 Million for SaaS Management Platform

SaaS management platform Zluri has raised $20 million in a Series B funding round led by Lightspeed, with participation from existing investors. The US-based startup helps organizations manage their SaaS applications, optimize costs, and mitigate risks. Zluri’s SaaS operations platform offers SaaS management, cloud-first identity governance, automated onboarding and offboarding, application usage analytics, and real-time…
How to Put Generative AI to Work in Your Security Operations Center

Generative AI is taking the IT security industry by storm. Every vendor has a story to tell about new use cases or how they are incorporating generative AI and large language models (LLMs) into their security offerings, including Microsoft and Google. Generative AI and LLM training are multimillion-dollar endeavors. Although ChatGPT is frequently discussed, it is…
India readies moon mission aimed to stake claim as a space power

India’s space agency is readying to launch a rocket as soon as Friday that will attempt to land a rover on the moon and mark the country’s arrival as a power in space exploration and the new frontier of space commerce. Only the United States, the former Soviet Union and China have made successful lunar…
Ripple wins case against SEC as judge rules XRP is not a security

Ripple Labs scored a victory in the United States District Court in the Southern District of New York on July 13 as Judge Analisa Torres ruled in favor of the company in a case brought forth by the Securities and Exchange Commission dating back to 2020. According to documents filed on July 13, Judge Torres…
The FTC is investigating whether ChatGPT harms consumers

The Federal Trade Commission has opened an expansive investigation into OpenAI, probing whether the maker of the popular ChatGPT bot has run afoul of consumer protection laws by putting personal reputations and data at risk. The agency this week sent the San Francisco company a 20-page demand for records about how it addresses risks related…
Elon Musk Announces Artificial Intelligence Company xAI

Twitter owner and Tesla CEO Elon Musk has announced a new artificial intelligence company, xAI. “Announcing formation of @xAI to understand reality,” Musk tweeted Wednesday. The xAI website adds that the company’s goal is to “understand the true nature of the universe.” xAI has tweeted only once so far, to ask: “What are the most fundamental unanswered…
Founder of crypto lender Celsius Network arrested, charged with fraud

Alex Mashinsky, the founder and former CEO of bankrupt cryptocurrency lender Celsius Network, was arrested and charged with fraud, a U.S. prosecutor in New York said Thursday morning, as three federal regulatory agencies sued him and his company. Mashinsky, 57, was charged with seven criminal counts – including securities fraud, commodities fraud and wire fraud…
Russian leadership suffers ‘friction and confusion’ since mutiny, US general says

General Mark Milley, the chairman of the Joint Chiefs of Staff, stated that Russian leadership is experiencing a significant amount of ‘”friction and confusion” following the Wagner group’s brief mutiny last month. The impact of internal turmoil on the front lines in Ukraine is still uncertain. The general added that conflict at senior levels in…
Thailand’s Pita defeated in parliament in bid for PM

Thailand’s Pita Limjaroenrat failed to secure his initial bid for the Prime Minister’s office on Thursday. He was derailed by a high-stakes parliamentary vote that featured many no-shows and almost 200 abstentions. Despite support from his eight-party alliance, the leader of the Move Forward party was unable to secure 375 votes in the bicameral parliament.…
Egypt president, Ethiopia PM aiming to finalize dam agreement within four months

Egyptian President Abdel Fattah al-Sisi and Ethiopian Prime Minister Abiy Ahmed met on Thursday to discuss the Grand Ethiopian Renaissance Dam (GERD) and its rules of operations. The two leaders sought to initiate urgent negotiations between their countries and Sudan, and want to finalize agreements within four months. Egypt and Ethiopia have butted heads for…
Saudi Arabia imports record Russian fuel oil in June as trade grows

Saudi Arabia imported 910,000 metric tons of fuel oil from Russia in June according to analytics firm Kpler, marking a new record high. Russian fuel oil imports to the country hit 2.86 million metric tons in June, already exceeding the 1.63 million metric tons for all of last year. Saudi Arabia dramatically increased their Russian…
US Navy plan flies through Taiwan Strait, China carries out more drills

China began its third day of military exercises today just south of Taiwan. A U.S. Navy patrol plane that flew through the Taiwan Strait was closely monitored by Chinese fighter jets. The P-8A Poseidon patrol and reconnaissance plane is also capable of anti-submarine missions. The Chinese military characterized the move as “public hype” after the…
Apple Re-Releases Urgent Zero-Day Patches With Fix for Website Access Issue

Apple re-released its recent Rapid Security Response updates for iOS and macOS after the original patches caused a website access issue. MacOS Ventura 13.4.1 (a), iOS 16.5.1 (a), iPadOS 16.5.1 (a), and Safari 16.5.2 addressed the actively exploited WebKit vulnerability CVE-2023-37450. The bug allowed attackers to exploit arbitrary code attacks after users accessed malicious content…
Ransomware Extortion Skyrockets in 2023, Reaching $449.1 Million and Counting

Chainalysis reported that ransomware is the only cryptocurrency-based crime that has grown in 2023. Cybercriminals have extorted about $176 million more than they did this time last year. At the current pace, hackers are expected to extort almost $900 million from victims in 2023. Other illicit industries, such as malware, darknet markets, and fraud shops…
APT Exploit Targeting Rockwell Automation Flaws Threatens Critical Infrastructure

Rockwell Automation issued an advisory in conjunction with the US government regarding an exploit capability in its ControlLogix EtherNet/IP communication modules. Tracked as CVE-2023-3595, the flaw allows attackers to achieve remote code execution with persistence in the 1756 EN2 and 1756 EN3 products. Threat actors might take advantage of this flaw through the use of…
Hardcoded Accounts Allow Full Takeover of Technicolor Routers

The CERT Coordination Center (CERT/CC) reported that multiple hardcoded credentials in the Technicolor TG670 DSL gateway router allow hackers to completely take over the devices. The TG670 router is designed for homes and small offices, and allows administrators to authenticate via HTTP, SSH, or Telnet. The vulnerability specifically impacts Technicolor TG670 DSL routers running firmware…
Autonomous Security Robots Are Starting to Patrol Schools and Cities, Despite Controversies

The demand for enhanced security measures has prompted an increasing number of sectors to turn to autonomous security robots to bolster public safety. From schools to police departments in major cities, these novel security robots equipped with artificial intelligence (AI) are being deployed to monitor and identify potential threats, turning what would have been once…
China beats rivals to successfully launch first methane-liquid rocket

A private Chinese company launched into orbit on Wednesday the world’s first methane-liquid oxygen rocket, beating U.S. rivals in sending what could become the next generation of launch vehicles into space. The Zhuque-2 carrier rocket blasted off at 9 a.m. (0100 GMT) from the Jiuquan Satellite Launch Center in northwest China and completed its flight…
Crime Down 65% Overall, But Ransomware Headed for Huge Year Thanks to Return of Big Game Hunting

2023 so far has been a year of recovery for cryptocurrency after a chaotic 2022, with prices of digital assets like Bitcoin up over 80% on the year as of June 30. And that’s not the only good news for the industry. Our data shows that cryptocurrency-related crime is down significantly this year. Through the…
KPMG Plans $2 Billion Investment in AI and Cloud Services

KPMG plans to invest $2 billion in artificial intelligence and cloud services across its business lines globally over the next five years through an expanded partnership with Microsoft, the latest move by a Big Four accounting firm to double down on the technologies. The professional-services company on Tuesday said it expects the partnership to bring in…
Ukraine Is Using Highly Advanced Artificial Intelligence In Its War With Russia: It’s “Out Of This World”

Artificial intelligence is showing up all over the place. And now, Ukraine is using it in its war against Russia. Ukraine has successfully engineered and deployed its unique artificial intelligence (AI) platforms. Brett Velicovich, a Fox News contributor in Ukraine, reported that the innovation on the Ukrainian battlefield is so advanced that Western governments struggle…
Bulgari apologises to China after Taiwan listing sparks fury

Luxury fashion brand Bulgari has issued an apology to China for listing Taiwan as a country on its website. The brand posted the apology on China’s social media platform Weibo, expressing respect for China’s sovereignty. Brands that refer to Taiwan as a separate country often face backlash and boycotts from the Chinese government and internet…
‘Like a jailhouse’: Afghans languish in US detention centres

Afghan asylum seekers arriving at the US-Mexico border after the Taliban takeover have found themselves trapped in the US immigration detention system, facing possible expulsion. With limited options for legal immigration, many Afghans have resorted to dangerous irregular entry. The US’s broken immigration system and closed border policies have left them in limbo. Afghan asylum…
North Korea fires intercontinental ballistic missile after threatening US

North Korea fired a suspected intercontinental ballistic missile (ICBM) that flew for over an hour before landing in the sea west of Japan. The launch follows North Korea’s threats of retaliation against US spy plane incursions and its attempt to shoot down such planes. Security concerns have escalated as North Korea has conducted numerous missile…
Prayuth Chan-ocha: Thailand coup leader departs the stage

Prayuth Chan-ocha, the army chief who staged a coup and has ruled Thailand for nine years, has announced his retirement from politics. Despite initially promising a temporary tenure, Prayuth remained in power as prime minister, reshaping the country’s power structures and suppressing dissent. His conservative political party performed poorly in the recent election, and his…
Fortinet Patches Critical FortiOS Vulnerability Leading to Remote Code Execution

Fortinet has released security updates to address a critical-severity vulnerability in FortiOS and FortiProxy that could lead to remote code execution (CVE-2023-33308). The bug is a stack-based overflow issue affecting deep inspection in proxy mode. By disabling deep inspection on proxy policies or firewall policies with proxy mode, exploitation can be prevented. Fortinet also announced…
Citrix Patches Critical Vulnerability in Secure Access Client for Ubuntu

Citrix has released patches for critical-severity vulnerabilities in its Secure Access client for Ubuntu and Windows. The Ubuntu vulnerability, tracked as CVE-2023-24492, requires user interaction to exploit and could lead to remote code execution. The Windows vulnerability, tracked as CVE-2023-24491, allows an attacker with access to an endpoint and a vulnerable client to elevate privileges.…
CISO Conversations: CISOs of Identity Giants IDEMIA and Ping

SecurityWeek interviews Dennis Kallelis, CSO at Idemia, and Jason Kees, CISO at Ping, to discuss the role of the modern CISO. Both Kallelis and Kees entered the cybersecurity field by chance, but their engineering backgrounds have been instrumental in their success. They emphasize the importance of leadership skills for CISOs and the benefits of diverse…
Chinese Cyberspies Used Forged Authentication Tokens to Hack Government Emails

Microsoft has reported that a Chinese cyberespionage group, known as Storm-0558, used forged authentication tokens to hack government email accounts. The hackers gained access to approximately 25 organizations, including government agencies and consumer accounts associated with the targeted entities. The threat actor exploited a token validation issue in Outlook Web Access and Outlook.com, using a…
How Broadcom’s acquisition of VMware will accelerate multi-cloud adoption

First impressions can be misleading. Case in point: when Broadcom first announced its plan to acquire VMware, initial concerns from regulators focused on perceived anti-competitive effects resulting from the deal. Others suggested that VMware’s value proposition could be diluted. Fortunately, since then, Broadcom has been making its strategic case with regulators and customers. Most notably, Broadcom…
The Next Challengers Joining Nvidia in the AI Chip Revolution

Nvidia has emerged as the leader in powering the early days of the artificial-intelligence revolution, but rivals big and small are looking to close the gap. Heavyweights such as Advanced Micro Devices and Intel are spending billions of dollars to enhance their AI offerings, while startups are attracting investors eager to get into the next…
AI’s Impact on Security, Risk and Governance in a Hybrid Cloud World

AI is a transformative technology that is reshaping the landscape of security, risk management, compliance and governance in hybrid cloud environments. It is emerging as a powerful force, revolutionizing the way organizations safeguard their digital assets and navigate the complexities of modern computing. Hybrid cloud architectures have introduced unprecedented challenges in maintaining robust security measures,…
SpaceX sets a new reusability record

SpaceX launched one of its Falcon 9 rockets for a record-setting sixteenth time this week, as the sooty booster lofted another batch of Starlink internet satellites into space. The booster, designated B1058 by SpaceX, first made its debut in May 2020, as it carried two NASA astronauts — Bob Behnken and Doug Hurley — into space.…
27% of jobs at high risk from AI revolution, says OECD

More than a quarter of jobs in the OECD rely on skills that could be easily automated in the coming artificial intelligence revolution, and workers fear they could lose their jobs to AI, the OECD said on Tuesday. The Organisation for Economic Co-operation and Development (OECD) is a 38-member bloc, spanning mostly wealthy nations but…
ChatGPT Is Losing Users. Is The Artificial Intelligence Craze Over?

The Washington Post reported that traffic to ChatGPT’s website and app fell 9.7% in June from the previous month. It’s an indication that artificial intelligence, introduced to a wide consumer audience with the launch of ChatGPT only six months before, has been a fad and now it’s peaked and declining. It’s a neat theory and it…
Russian-Linked RomCom Hackers Targeting NATO Summit Guests

The Russian-linked threat actor RomCom has been targeting entities supporting Ukraine in a recently identified cyber operation. The targets include guests of the 2023 NATO Summit, which will take place July 11-12. The NATO Summit plans to discuss the war in Ukraine, Ukraine’s NATO accession, and Sweden’s recently-announced membership. RomCom created malicious documents and tested…
Eastern African bloc seeks summit to deploy regional force in Sudan

The Intergovernmental Authority on Development (IGAD), comprised of eight states in Eastern Africa, called on Monday for a regional summit. The group is considering deploying troops in Sudan to protect civilians. Meetings kicked off in the Ethiopian capital Addis Ababa to discuss resolutions to the Sudan conflict. Sudan’s army did not attend the first day…
US to move forward with transfer of F-16 jets to Turkey

A day after Ankara gave approval for Sweden to join NATO, U.S. National Security Adviser Jake Sullivan announced the U.S. will move forward with transferring F-16 fighter jets to Turkey. Turkey requested $20 billion worth of Lockheed Martin F-16 fighters and 80 modernization kits in October 2021. Both Turkish and U.S. officials have rejected notions…
TPG to Acquire Forcepoint’s Government Cybersecurity Business Unit

Private equity firm TPG announced plans to acquire Forcepoint’s Global Governments and Critical Infrastructure (G2CI) business on Monday. The business was created in 2018 to act as Forcepoint’s government cybersecurity unit and will be spun out as an independent entity. According to the Wall Street Journal, the deal is reportedly valued at around $2.5 billion.…
Europe Signs off on a New Privacy Pact That Allows People’s Data to Keep Flowing to US

The European Union signed a new agreement on Monday regarding the privacy of personal information shared across the Atlantic. The deal attempts to ease European concerns over spying from American intelligence agencies. The EU-U.S. Data Privacy Framework provides stringent data protection standards similar to the EU’s own policies. President Biden signed an executive order in…
Apple Ships Urgent iOS Patch for WebKit Zero-Day

Apple released an urgent software update for iOS and iPadOS on Monday. The operating system updates defend against a zero-day exploitation that has already been detected. The vulnerability is tagged as CVE-2023-37450. The exploitation was found in WebKit, which serves as a browser engine for Safari, Mail, AppStore, and other apps on iOS and macOS…
Wagner fighters neared Russian nuclear base during revolt

Videos and witness accounts have revealed that on June 24, a contingent of Wagner military vehicles diverted east toward a Russian nuclear weapons base. Surveillance went cold after Wagner fighters reached the rural region surrounding Voronezh-45, but Western officials affirmed that Russian nuclear weapons were never in danger. Kyrylo Budanov, head of Ukrainian military intelligence,…
Indonesia seizes Iranian-flagged tanker suspected of illegal oil transhipment

The Indonesian Coast Guard (Bakamla) announced on Tuesday it has seized an Iranian-flagged tanker involved in illegal crude oil transshipment. In a statement, Bakamla outlined how MT Arman 114 was carrying 272,569 metric tons of light crude oil. The ship was spotted transferring oil to another vessel, the Cameroon-flagged MT STinos, without authorization. MT Arman…
U.S. concern about generative AI risks prompts NIST study

As we previously discussed, earlier this year the National Institute of Standards and Technology (NIST) launched the Trustworthy and Responsible AI Resource Center. Included in the AI Resource Center is NIST’s AI Risk Management Framework (RMF) alongside a playbook to assist businesses and individuals in implementing the framework. The RMF is designed to help users…
The UN holds a robot press conference about the state of AI

At the AI for Good 2023 global summit, a panel of robots and their creators sat in front of the press to answer journalists’ questions on topics such as job automation, artificial intelligence (AI) leadership and collaboration with humans for a better future. The summit was hosted by the International Telecommunication Union (ITU), the tech…
DeFi Traders Lost $228 Million to Hackers in 3 Months

Hackers intensified their efforts to hack cryptocurrency projects in the past year and mostly had DeFi in their crosshairs, according to a new report from Immunefi. The report, compiled by the bug bounty platform Immunefi, found that overall hacks across blockchains went up by 63% in the second quarter of 2023 compared to the same…
Apocalypse not now? AI’s benefits may yet outweigh its very real dangers

Stephen Cave has considerable experience of well-intentioned actions that have unhappy consequences. A former senior diplomat in the foreign office during the New Labour era, he was involved in treaty negotiations which later – and unexpectedly – unravelled to trigger several international events that included Brexit. “I know the impact of well-meant global events that…
Sarah Silverman is suing OpenAI and Meta for copyright infringement

Comedian and author Sarah Silverman, as well as authors Christopher Golden and Richard Kadrey — are suing OpenAI and Meta each in a US District Court over dual claims of copyright infringement. The suits alleges, among other things, that OpenAI’s ChatGPT and Meta’s LLaMA were trained on illegally-acquired datasets containing their works, which they say were…
PoC Exploit Published for Recent Ubiquiti EdgeRouter Vulnerability

A heap overflow vulnerability, tracked as CVE-2023-31998, has been discovered in Ubiquiti EdgeRouter and AirCube devices, allowing for arbitrary code execution. The vulnerability resides in the MiniUPnPd service and can be exploited over a LAN connection, potentially interrupting UPnP service. Proof-of-concept code targeting the issue is available, and although the vulnerability has been patched in…