Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning

Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning,

Cybersecurity researchers have disclosed six security flaws in the Ollama artificial intelligence (AI) framework that could be exploited by a malicious actor to perform various actions, including denial-of-service, model poisoning, and model theft.
« Collectively, the vulnerabilities could allow an attacker to carry out a wide-range of malicious actions with a single HTTP request, including

,

Cybersecurity researchers have disclosed six security flaws in the Ollama artificial intelligence (AI) framework that could be exploited by a malicious actor to perform various actions, including denial-of-service, model poisoning, and model theft.
« Collectively, the vulnerabilities could allow an attacker to carry out a wide-range of malicious actions with a single HTTP request, including

, ,
https://thehackernews.com/2024/11/critical-flaws-in-ollama-ai-framework.html

German Police Disrupt DDoS-for-Hire Platform dstat[.]cc; Suspects Arrested

German Police Disrupt DDoS-for-Hire Platform dstat[.]cc; Suspects Arrested,

German law enforcement authorities have announced the disruption of a criminal service called dstat[.]cc that made it possible for other threat actors to easily mount distributed denial-of-service (DDoS) attacks.
« The platform made such DDoS attacks accessible to a wide range of users, even those without any in-depth technical skills of their own, » the Federal Criminal Police Office (aka

,

German law enforcement authorities have announced the disruption of a criminal service called dstat[.]cc that made it possible for other threat actors to easily mount distributed denial-of-service (DDoS) attacks.
« The platform made such DDoS attacks accessible to a wide range of users, even those without any in-depth technical skills of their own, » the Federal Criminal Police Office (aka

, ,
https://thehackernews.com/2024/11/german-police-disrupt-ddos-for-hire.html

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Oct 28 – Nov 03)

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Oct 28 – Nov 03),

This week was a total digital dumpster fire! Hackers were like, « Let’s cause some chaos! » and went after everything from our browsers to those fancy cameras that zoom and spin. (You know, the ones they use in spy movies? 🕵️‍♀️)
We’re talking password-stealing bots, sneaky extensions that spy on you, and even cloud-hacking ninjas! 🥷 It’s enough to make you want to chuck your phone in the ocean.

,

This week was a total digital dumpster fire! Hackers were like, « Let’s cause some chaos! » and went after everything from our browsers to those fancy cameras that zoom and spin. (You know, the ones they use in spy movies? 🕵️‍♀️)
We’re talking password-stealing bots, sneaky extensions that spy on you, and even cloud-hacking ninjas! 🥷 It’s enough to make you want to chuck your phone in the ocean.

, ,
https://thehackernews.com/2024/11/thn-recap-top-cybersecurity-threats.html

Cyber Threats That Could Impact the Retail Industry This Holiday Season (and What to Do About It)

Cyber Threats That Could Impact the Retail Industry This Holiday Season (and What to Do About It),

As the holiday season approaches, retail businesses are gearing up for their annual surge in online (and in-store) traffic. Unfortunately, this increase in activity also attracts cybercriminals looking to exploit vulnerabilities for their gain. 
Imperva, a Thales company, recently published its annual holiday shopping cybersecurity guide. Data from the Imperva Threat Research team’s

,

As the holiday season approaches, retail businesses are gearing up for their annual surge in online (and in-store) traffic. Unfortunately, this increase in activity also attracts cybercriminals looking to exploit vulnerabilities for their gain. 
Imperva, a Thales company, recently published its annual holiday shopping cybersecurity guide. Data from the Imperva Threat Research team’s

, ,
https://thehackernews.com/2024/11/cyber-threats-that-could-impact-retail.html

Google’s AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine

Google’s AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine,

Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large language model (LLM) assisted framework called Big Sleep (formerly Project Naptime).
The tech giant described the development as the « first real-world vulnerability » uncovered using the artificial intelligence (AI) agent.
« We believe this is the first public example of an AI agent finding

,

Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large language model (LLM) assisted framework called Big Sleep (formerly Project Naptime).
The tech giant described the development as the « first real-world vulnerability » uncovered using the artificial intelligence (AI) agent.
« We believe this is the first public example of an AI agent finding

, ,
https://thehackernews.com/2024/11/googles-ai-tool-big-sleep-finds-zero.html

Contourner la censure Internet : faites le choix évident du VPN

Contourner la censure Internet : faites le choix évident du VPN,

Bon Plan NordVPN

La censure d’Internet est présente partout, à différents niveaux. Découvrez comment la contourner facilement avec un VPN de qualité.

,

Bon Plan NordVPN

La censure d’Internet est présente partout, à différents niveaux. Découvrez comment la contourner facilement avec un VPN de qualité.

, ,
https://www.01net.com/bons-plans/contourner-la-censure-internet-faites-le-choix-evident-du-vpn.html

Réalité mixte : Samsung lancera son offensive contre le Vision Pro en 2025

Réalité mixte : Samsung lancera son offensive contre le Vision Pro en 2025,

Samsung XR casque 2

Samsung a bien l’intention de se frotter à nouveau au marché de la réalité virtuelle et mixte et ce, dès l’année prochaine. Le constructeur l’a fait savoir dans ses derniers résultats financiers — reste à savoir sous quelle forme.

,

Samsung XR casque 2

Samsung a bien l’intention de se frotter à nouveau au marché de la réalité virtuelle et mixte et ce, dès l’année prochaine. Le constructeur l’a fait savoir dans ses derniers résultats financiers — reste à savoir sous quelle forme.

, ,
https://www.01net.com/actualites/realite-mixte-samsung-lancera-son-offensive-vision-pro-2025.html

Grosses performances en vue pour les puces Apple M4

Grosses performances en vue pour les puces Apple M4,

Apple M4

La commercialisation des nouveaux Mac M4 débutera le 8 novembre, mais sans attendre, les premiers benchmarks annoncent du lourd pour les nouvelles puces.

,

Apple M4

La commercialisation des nouveaux Mac M4 débutera le 8 novembre, mais sans attendre, les premiers benchmarks annoncent du lourd pour les nouvelles puces.

, ,
https://www.01net.com/actualites/grosses-performances-en-vue-pour-puces-apple-m4.html

ChatGPT 5 : OpenAI fait taire les rumeurs

ChatGPT 5 : OpenAI fait taire les rumeurs,

Chatgpt Store

OpenAI a de nouveau évoqué ChatGPT 5, la prochaine version de son IA. Sur Reddit, le PDG Sam Altman a démenti les rumeurs tout en teasant les prochaines nouveautés de l’incontournable chatbot.

,

Chatgpt Store

OpenAI a de nouveau évoqué ChatGPT 5, la prochaine version de son IA. Sur Reddit, le PDG Sam Altman a démenti les rumeurs tout en teasant les prochaines nouveautés de l’incontournable chatbot.

, ,
https://www.01net.com/actualites/chatgpt-5-openai-fait-taire-rumeurs.html

Ne l’appelez plus Microsoft Copilot, mais « Windows Intelligence »

Ne l’appelez plus Microsoft Copilot, mais « Windows Intelligence »,

Copilot Plus Microsoft

Microsoft pourrait abandonner le nom de de Copilot pour son intelligence artificielle. La firme de Redmond réfléchirait à la renommer Windows Intelligence.

,

Copilot Plus Microsoft

Microsoft pourrait abandonner le nom de de Copilot pour son intelligence artificielle. La firme de Redmond réfléchirait à la renommer Windows Intelligence.

, ,
https://www.01net.com/actualites/microsoft-copilot-windows-intelligence.html