Aggregator

Google Docs AI Features: Vulnerabilities and Risks

Embrace The Red
2 years 11 months ago

Google Docs is a popular word processing tool that is used by millions of people around the world. Recently Google added new AI features to Docs (and a couple of other products), such as the ability to generate summaries, and write different kinds of creative content.

Check out Google Labs for more info.

These features can be very helpful, but they also introduce new security risks.

At the moment there are not too many degress of freedom an adversary has, but operating your AI on untrusted data can have unwanted consequences:

企业软件供应链安全建设价值闭门研讨会

航行笔记
2 years 11 months ago
闭门研讨会安排和参与方式如文。希望通过交流对企业软件供应链安全建设价值有更全面和清晰的认知，为软件供应链安全技术发展做出一点点贡献。更深度了解大厂甲方安全软件供应链建设价值

MOVEit Critical SQL Injection Vulnerability

X-Force Exchange - Collection Feed
2 years 11 months ago
Summary ***UPDATED OVERVIEW with PoC and CVSS Score*** Progress, the vendor that provides MOVEit, has released a fix for additional vulnerabilities in their product, once of which being a critical SQL injection flaw. Threat Type Vulnerability Overview ***UPDATE #1, July 11, 2023*** A proof-of-concept (PoC) has been reported for MOVEit's CVE-2023-36934. At this time, there is no further information on the PoC. In addition to the above, the vulnerability has been assessed and now carries a CVSSv3 score 9.1, c

企业软件供应链安全建设价值

航行笔记
2 years 11 months ago
这篇文章想通过一个完整的框架说清楚企业软件供应链安全建设价值分析思路。组织一场交流会探讨各自业务场景下软件供应链安全建设对企业安全带来的价值

年中总结和规划应该怎么写？

航行笔记
2 years 11 months ago
这篇文章分享一点点我自己在工作总结和规划分享汇报的思考和总结。 如果你正在做年中总结或者下半年的规划，恰好你又是做信息安全相关方向的业务，咱们可以对具体您当前负责的事项进行深入的探讨

Managed ad