Warning issued over vulnerability in cardiac device monitoring software

Categories: Exploits and vulnerabilities

Categories: News

Tags: Medtronic

Tags: Paceart Optima

Tags: CVE-2023-31222

Tags: deserialization

Tags: update

Tags: messaging

A vulnerability in Medtronic’s Paceart Optima software could lead to further network penetration, RCE, and DoS attacks

(Read more…)

The post Warning issued over vulnerability in cardiac device monitoring software appeared first on Malwarebytes Labs.

Read more

Top Suspect in 2015 Ashley Madison Hack Committed Suicide in 2014

Credit to Author: BrianKrebs| Date: Fri, 07 Jul 2023 19:55:45 +0000

When the marital infidelity website AshleyMadison.com learned in July 2015 that hackers were threatening to publish data stolen from 37 million users, the company’s then-CEO Noel Biderman was quick to point the finger at an unnamed former contractor. But as a new documentary series on Hulu reveals [SPOILER ALERT!], there was just one problem with that theory: Their top suspect had killed himself more than a year before the hackers began publishing stolen user data.

Read more

OpenAI launches new alignment division to tackle risks of superintelligent AI

OpenAI is opening a new alignment research division, focused on developing training techniques to stop superintelligent AI — artificial intelligence that could outthink humans and become misaligned with humans ethics — from causing serious harm.

“Currently, we don’t have a solution for steering or controlling a potentially superintelligent AI, and preventing it from going rogue,” Jan Leike and Ilya Sutskever wrote in a blog post for OpenAI, the company behind the most well-known generative AI large language model, ChatGPT. They  added that although superintelligence might seem far off, some experts believe it could arrive this decade.

To read this article in full, please click here

Read more

Tailing Big Head Ransomware’s Variants, Tactics, and Impact

Credit to Author: Ieriz Nicolle Gonzalez| Date: Fri, 07 Jul 2023 00:00:00 +0000

We analyze the technical details of a new ransomware family named Big Head. In this entry, we discuss the Big Head ransomware’s similarities and distinct markers that add more technical details to initial reports on the ransomware.

Read more

Lawyers and Incident Response can be a dangerous combo

Credit to Author: eschuman@thecontentfirm.com| Date: Fri, 07 Jul 2023 03:30:00 -0700

Lawyers and C-suite leaders have the same basic mission: protect the enterprise from bad actors who want to do harm. But they often often approach the job in such polar opposite ways that they wind up fighting each other instead of working together. 

A new academic report on the topic from researchers at the University of Edinburgh, the University of Innsbruck, Tufts University and the University of Minnesota tried to document how stark those differences have become.

“Cyber insurance sends work to a small number of [incident response] firms, drives down the fees paid and appoints lawyers to direct technical investigators,” the report noted. “Lawyers, when directing incident response often introduce legalistic contractual and communication steps that slow down incident response, advise IR practitioners not to write down remediation steps or to produce formal reports and restrict access to any documents produced.”

To read this article in full, please click here

Read more

Warning issued over vulnerability in cardiac devices

Categories: Exploits and vulnerabilities

Categories: News

Tags: Medtronic

Tags: Paceart Optima

Tags: CVE-2023-31222

Tags: deserialization

Tags: update

Tags: messaging

A vulnerability in Medtronic’s Paceart Optima cardiac device could lead to further network penetration, RCE, and DoS attacks

(Read more…)

The post Warning issued over vulnerability in cardiac devices appeared first on Malwarebytes Labs.

Read more

Update Android now! Google patches three actively exploited zero-days

Categories: Exploits and vulnerabilities

Categories: News

Tags: Google

Tags: Android

Tags: 2023-07-05

Tags: CVE2021-29256

Tags: CVE-2023-26083

Tags: CVE-2023-2136

Tags: CVE-2023-21250

Tags: ARM

Tags: Skia

Google has patched 43 vulnerabilities in Android, three of which are actively exploited zero-day vulnerabilities.

(Read more…)

The post Update Android now! Google patches three actively exploited zero-days appeared first on Malwarebytes Labs.

Read more