CYBERSECURITY

→ View original post on X — @fogoros

SANS Report Reveals ICS/OT Cybersecurity Landscape 2022

By

@fogoros

–

13 January 2023 19h01

The SANS’ ‘State of ICS/OT Cybersecurity in 2022 and Beyond’ report presents the responses of 332 ICS/OT organizations representing a range of industrial verticals across the ICS/OT community. Check it out! http://
ow.ly/4m1t50Mq957 @ptrancyber #sponsored #xona_ics #cybersecurity

→ View original post on X — @ibmdata

Data Governance Policy: Quality, Privacy, Security and AI

By

@ibmdata

–

13 January 2023 16h21

"At its core, a data #governance policy shapes protocols around data quality, #privacy, and security; it leverages #AI and streamlines regulatory compliance." #IBM Global Chief Data Officer Inderpal Bhandari on @CarruthersJacks 2022 Data Maturity Index: https://t.co/kOAZVXfww5 pic.twitter.com/LEu9qMSmPg
— IBM Data, AI & Automation (@IBMData) 13 janvier 2023

"At its core, a data #governance policy shapes protocols around data quality, #privacy, and security; it leverages #AI and streamlines regulatory compliance." #IBM Global Chief Data Officer Inderpal Bhandari on @CarruthersJacks 2022 Data Maturity Index: https://
ibm.co/3QEuK8T

→ View original post on X — @steve_rosenbush

Economic Pressure Drives Cyber Provider Consolidation and Cost Efficiency

By

@steve_rosenbush

–

13 January 2023 15h21

Tighter belts and a shift from single-use products could reshape the cyber provider market, bringing more consolidation of smaller firms, as CISOs seek to do more with less. #cybersecurity #CISO https://
wsj.com/articles/econo
mic-uncertainty-weighs-on-cyber-chiefs-11673562985
…

→ View original post on X — @andreasklinger

GPT-Based Pentesting: AI for Security Vulnerability Discovery

By

@andreasklinger

–

13 January 2023 13h13

GPT like pentesting sounds nonironic amazing. Continuous feed of 0days combined w/ telling it not to bruteforce Additionally it can learn the software it (ab)uses based on its sourcecode It could also use social engineering. If anyone does this for real i’d love to talk

Camouflage Poisoning Attack on Machine Learning Models

By

–

13 January 2023 12h58

For more details, please check out the paper and the code! And definitely remember the names of the first authors, Waterloo undergrads Jimmy Di (applied to grad schools this year) and Jack Douglas. https://
arxiv.org/abs/2212.10717 https://
github.com/Jimmy-di/camou
flage-poisoning
… 10/10

Dataset Poisoning Attack via Malicious Machine Unlearning

By

–

13 January 2023 12h58

Here's how it works. The adversary first poisons the dataset, and the victim trains a model on it. Everything behaves as normal. But the adversary later requests some of their points to be unlearned. Only after the unlearning, then the model behaves in some malicious way. 4/n

Camouflage Data Poisoning Attacks in ML Unlearning Systems

By

–

13 January 2023 12h58

But when you add something new to an ML pipeline, there's new ways for adversaries to wreak havoc. We introduce a new type of data poisoning attack exploiting the dynamic nature of unlearn requests: a "camouflage" attack, which lies dormant until triggered by the adversary. 3/n

Machine Unlearning Vulnerability Enables Poisoning Attacks

By

–

13 January 2023 12h58

New paper led by Jimmy Di & Jack Douglas, co-advised with @AcharyaJayadev @ayush_sekhari
: "Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks" The adaptive nature of machine unlearning opens a new attack vector for adversaries. https://
arxiv.org/abs/2212.10717 1/n