I'll just leave this here.

Oopsy! Nobody could see this coming...

"Viral social network 'Moltbook' built entirely by artificial intelligence leaked authentication tokens, private messages and user emails through missing security controls in production environment."

https://thecyberexpress.com/moltbook-platform-exposes-1-5-mn-api-keys/

#ai #aislop #moltbook #hack #breach #secuirty #darwinaward

Ars Technica: AI models can acquire backdoors from surprisingly few malicious documents. “The research involved training AI language models ranging from 600 million to 13 billion parameters on datasets scaled appropriately for their size. Despite larger models processing over 20 times more total training data, all models learned the same backdoor behavior after encountering roughly the same […]

https://rbfirehose.com/2025/10/19/ars-technica-ai-models-can-acquire-backdoors-from-surprisingly-few-malicious-documents/

Reading the #springboot 3.5 release notes one part make me smile a little:

"The heapdump actuator endpoint now defaults to access=NONE. The aims to help reduce the likelihood of a misconfiguration application leaking sensitive information."

Had to think about the #Volkswagen hack last year where this was an entry point.

Looks like the new default is way more secure.

#secuirty #softwaredevelopment

Draft SP 800-228 Available for Public Comment | CSRC https://buff.ly/nPAPy94

"The initial public draft (ipd) of NIST Special Publication (SP) 800-228, Guidelines for API Protection for Cloud-Native Systems, is now available for public comment."

#NIST #secuirty

I've got to say something about a post that @zicklepop posted yesterday in regards to the newest Apple Intelligence Report feature that Apple silently added, and turned on by default none-the-less.

All she was trying to do in warn people about the potential security risk that could come of such a feature. Just like anyone else, she was making a post and informing people of a risk.

What she got in the subsequent replies I feel was not justified. I know we all have our own opinions and that we are absolutely free to those but, how you express those make a different.

Let's please be kind to each other here on the #Fediverse. That is what makes it different than the Bird site.

#Secuirty #Privacy #AppleIntelligence #BeKind

For anyone reading https://arstechnica.com/gadgets/2024/07/loss-of-popular-2fa-tool-puts-security-minded-grapheneos-in-a-paradox/ on Android/Play Integrity and finding my reddit thread linked in it (https://www.reddit.com/r/LineageOS/comments/1e8m2a2/comment/ledtg3a/) you might want to check out my better thread on the subject: https://www.reddit.com/r/LineageOS/comments/n7yo7u/a_discussion_about_bootloader_lockingunlocking/

#android #bootloader #relock #secuirty #lineageos