Attackers used deepfake video to impersonate senior executives at Arup, resulting in a fraudulent transfer of approximately $25mil. A familiar voice is no longer reliable proof of identity, which is why deepfake defense has to move into trusted processes. https://t.co/2sdvwcsTMd
Thank you so much to all who attended last night's hack::soho. A big shoutout to Barrie Dempster, IOActive Director of Penetration Testing, for a wonderful presentation on 'Ham Radio for Hackers'.
Stay up-to-date sign up for our newsletter! https://t.co/1AVuGr9ids
Publicly available info now gives attackers powerful opportunities to target high-value individuals with highly credible social engineering campaigns. Our OSINT Threat Simulation for High-Value Targets helps organizations understand & reduce this risk. https://t.co/2sdvwcsTMd
A new security bulletin on 'RISAF limitation about PCIe region protection on STM32MP25xx' was published by Andrew Zonenberg, IOActive Principal Security Consultant, and STMicroelectronics. Check out the full bulletin at the following link. https://t.co/xrRZmqTIKP
Join IOA for our summer Hog Roast taking place Thursday, 4 June, at our Cheltenham Hardware Lab, Unit 4, Furlong Business Park, Bishops Cleeve GL528TW. Enjoy complimentary food & drink, check out some amazing cybersecurity research, & listen to live music! https://t.co/EoOW4LWicA
π€ The Security Gap in AI-Generated Code π
Interesting results after evaluating 27 AI models and AI-powered coding tools using 730 real-world programming prompts (27 languages and 219 vuln categories).
[WHITEPAPER] https://t.co/1z5zxWOpvQ
#cybersecurity#AISecurity
Our team comprises world-class AI researchers & seasoned pen testers. This deep, cross-disciplinary expertise is the cornerstone of our approach. Learn more by visiting our website! https://t.co/lMzjVjo4dQ
ICYMI: IOActive evaluated 27 leading AI models and AI-powered coding tools using 730 real-world programming prompts across 27 languages and 219 vulnerability categories. Check out our findings in our latest whitepaper! https://t.co/FCn2InV7qQ
#ThrowbackThursday to March's hack::soho where guest speaker Viola Lykova presented 'Auth Under Attack, Designing AI-Ready Login Flows That Don't Collapse in the Real World.' Full presentation video link in the comments!
"... Bounties provide discovery. Professional services provide an established level of confidence. Mature programs run both and can explain..." Check out our latest post discussing bug bounty programs and professional cybersecurity services. https://t.co/TzovXeVnUB
We are excited to announce that our next hack::soho will take place on 28/5! This month's hack::soho features a talk from Barrie Dempster. The abstract of the talk, 'Ham Radio for Hackers: It's illegal to push this button' is on the registration page! https://t.co/OhCVpxtvie
Dragos, Inc. published recent findings on an attack, using AI, compromising infrastructure in Mexico. https://t.co/sKSQ7vaAR6
Learn more about threats to infrastructure through this whitepaper. https://t.co/iJzp4ag9AJ
IOActive delivers a suite of services that cover every facet of AI security: https://t.co/lMzjVjo4dQ
β Threat Modeling & Architecture Review
β AI/ML Code Review & Vuln Assessment
β App & Device Pen Testing
β AI Infrastructure Security
β Customizable Engagement Options