4.8K Followers
1,001 Following
15.3K Posts
Metacurity.com (https://metacurity.com) is the one-stop destination for leading infosec news and cybersecurity developments. Run by infosec writer and columnist Cynthia Brumfield, Metacurity draws from thousands of sources every day to deliver aggregated summaries of the latest infosec developments. If anyone wants to get in touch with me, on or off the record, you can reach me at cynthia [at] digitalcrazytown.com or on Signal via Cynthia.507. Sign up for our free daily emails at https://www.metacurity.com. Searchable
Metacurityhttps://metacurity.com
Blueskyhttps://bsky.app/profile/msbrumfield.bsky.social
Columnshttps://www.csoonline.com/author/Cynthia-Brumfield/
Bookhttps://www.amazon.com/Cybersecurity-Risk-Management-Mastering-Fundamentals/dp/1119816289
Coursehttps://www.oreilly.com/live-events/cybersecurity-risk-management-with-the-nist-20-framework/0636920081497/
Cynthia's Personal Ramblingshttps://bsky.app/profile/msbrumfield.bsky.social
Great aesthetic at this year’s #sleuthcon .

Before you leave for the weekend, don't miss today's Metacurity for the most crucial infosec developments you should know, including

--Anthropic: AI is advancing too fast to leave unchecked,
--Whistleblower says IBM and AT&T hid repeated attacks from foreign hackers,
--Anthropic engineers are embedded in NSA,
--Hegseth is still determined to block Anthropic,
--Cloudflare CEO says agentic bots outnumber humans online,
--New threat group Pink uses voice phishing and fake help-desk calls,
--Fake websites impersonate Ghidra, dnSpy, and SpiderFoot in malware campaign,
--Authorities took down online marketplace selling fake identity documents to migrant smuggling rings,
--Manitoba ombudsman blasts the government for 2024 cyberattack,
--Cisco warns of zero day in Catalyst SD-WAN Manager,
--Supply-chain attack infected 36 npm index packages with IronWorm infostealer,
--Dashlane explains how it got hacked,
--Atlas Menu Grand Theft Auto V got hacked,
--New Magecart campaign exploits Stripe API to steal credit cards,
--Trump reportedly considers Palantir CTO as CISA chief,
--Filtr blocks ads across all Apple products,
--Weaponized AI capabilities are for sale on the dark web,
--Hackers keep stealing from Guam
https://www.metacurity.com/anthropic-ai-is-advancing-too-fast-to-leave-unchecked/

Anthropic: AI is advancing too fast to leave unchecked

Whistleblower says IBM and AT&T hid repeated attacks from foreign hackers, Anthropic engineers are embedded in NSA, Hegseth is still determined to block Anthropic, Cloudflare CEO says agentic bots outnumber humans online, New threat group Pink uses voice phishing and fake help-desk calls, much more

Metacurity
computers used to connect to the internet through screaming matches. I miss those days.

As much as I think Palantir is the Darth Vader of Silicon Valley, the CSO of Coinbase was formerly the CISO at Palantir, and that dude is wickedly fierce when it comes to cybersecurity.

Trump considers Palantir exec to lead CISA
https://therecord.media/trump-considers-palantir-exec-to-lead-cisa

Trump considers Palantir exec to lead CISA

Shyam Sankar, the chief technology officer at Palantir Technologies, has emerged as a lead contender for the long vacant Cybersecurity and Infrastructure Security Agency (CISA) director role, according to the sources, who requested anonymity to discuss the administration’s search.

‘Bots have now passed human traffic online,’ Cloudflare boss laments — says agentic traffic wasn’t expected to eclipse real people until next year
https://www.tomshardware.com/tech-industry/artificial-intelligence/bots-have-now-passed-human-traffic-online-cloudflare-boss-laments-says-agentic-traffic-wasnt-expected-to-eclipse-real-people-until-next-year
‘Bots have now passed human traffic online,’ Cloudflare boss laments — says agentic traffic wasn’t expected to eclipse real people until next year

Bot (automated) vs. human HTTP requests are split 57.5 vs. 42.5 percent, according to the firm’s latest data.

Tom's Hardware

This is more color on a scoop that Axios had quite a while ago.

The company installed about half a dozen staff within the NSA as so-called forward-deployed engineers to guide the use of the technology and customize models for specific applications.
https://www.ft.com/content/d02d91b3-2636-454e-9442-dc7e69f51815?syn-25a6b1a6=1

Stay ahead of the curve by checking out today's Metacurity for the most important infosec developments you should know, including

--Five Eyes issues unusual warning on China's online recruitment tactics,
--Meta AI's chatbot hacking seems to have continued,
--OpenAI asks for mandatory models' evaluations,
--CISA to release AI directive tomorrow,
--Mullin wants CISA to hire 600 more personnel,
--Hackers accessed Ultrahuman's customer data,
--Peptide promoters seek to poison chatbots by Reddit postings,
--Two-thirds of banned Anthropic accounts were making malware,
--US sanctions Iranian crypto exchange Nobitex,
--HTTP/2 Bomb DoS can take down a machine in seconds,
--Chinese cybercrime group TA4922 is now targeting Europe,
--Musk wants to unmask deepfake victims,
--CISA warns of hackers targeting automatic tank gauge systems,
--S. Korea now has access to Mythos,
--Dragos bought IoT firm Phosphorous,
--CrowdStrike beat Wall Street estimates,
--AI execs warn of biological threats,
--Trump admin is starving states of election threats data,
--Bellingcat founder won't accept gifted cookies
https://www.metacurity.com/6a205e53dc19480001f9b05b/

Five Eyes issues unusual warning on China's online recruitment tactics

Meta AI's chatbot hacking seems to have continued, OpenAI asks for mandatory models' evaluations, CISA to release AI directive tomorrow, Mullin wants CISA to hire 600 more personnel, Hackers accessed Ultrahuman's customer data, Peptide promoters seek to poison chatbots by Reddit postings, much more

Metacurity
I have been getting so many spam voice calls that I have had to block communications with anyone who is not in my contact list. If anyone needs to actually call, send an email instead or message me on Signal; info in bio.

Stay ahead of the curve by checking out today's Metacurity for the most important infosec developments you should know, including

--Five Eyes issues unusual warning on China's online recruitment tactics,
--Meta AI's chatbot hacking seems to have continued,
--OpenAI asks for mandatory models' evaluations,
--CISA to release AI directive tomorrow,
--Mullin wants CISA to hire 600 more personnel,
--Hackers accessed Ultrahuman's customer data,
--Peptide promoters seek to poison chatbots by Reddit postings,
--Two-thirds of banned Anthropic accounts were making malware,
--US sanctions Iranian crypto exchange Nobitex,
--HTTP/2 Bomb DoS can take down a machine in seconds,
--Chinese cybercrime group TA4922 is now targeting Europe,
--Musk wants to unmask deepfake victims,
--CISA warns of hackers targeting automatic tank gauge systems,
--S. Korea now has access to Mythos,
--Dragos bought IoT firm Phosphorous,
--CrowdStrike beat Wall Street estimates,
--AI execs warn of biological threats,
--Trump admin is starving states of election threats data,
--Bellingcat founder won't accept gifted cookies
https://www.metacurity.com/6a205e53dc19480001f9b05b/

Five Eyes issues unusual warning on China's online recruitment tactics

Meta AI's chatbot hacking seems to have continued, OpenAI asks for mandatory models' evaluations, CISA to release AI directive tomorrow, Mullin wants CISA to hire 600 more personnel, Hackers accessed Ultrahuman's customer data, Peptide promoters seek to poison chatbots by Reddit postings, much more

Metacurity