Feb 28, 2025Ravie LakshmananAPI Security / AI Security Microsoft on Thursday unmasked four of the individuals that it said were behind an Azure Abuse Enterprise scheme that involves leveraging unauthorized access to generative artificial intelligence (GenAI) services in order to… Read More "Microsoft Exposes LLMjacking Cybercriminals Behind Azure AI Abuse Scheme"
A dataset used to train large language models (LLMs) has been found to contain nearly 12,000 live secrets, which allow for successful authentication. The findings once again highlight how hard-coded credentials pose a severe security risk to users and organizations… Read More "12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training"
Feb 27, 2025Ravie LakshmananCybercrime / Android Cybersecurity researchers have discovered an updated version of an Android malware called TgToxic (aka ToxicPanda), indicating that the threat actors behind it are continuously making changes in response to public reporting. “The modifications seen… Read More "New TgToxic Banking Trojan Variant Evolves with Anti-Analysis Upgrades"
