Security News
![LLM hype fades as enterprises embrace targeted AI models](/static/build/img/news/llm-hype-fades-as-enterprises-embrace-targeted-ai-models-small.jpg)
The failure of LLMs to live up to their hype will be the story of 2024, as generic models become relegated to consumer-centric applications and enterprise users turn to smaller, more targeted AI models, purpose-built to meet their business needs. Recognizing the value of the data they hold, companies will seek to secure it by taking a "Hybrid cloud by design" approach, rather than "Hybrid cloud by default." Ultimately, data protection will emerge as a key pillar in a successful AI strategy, and companies will move towards prioritizing AI solutions that are trustworthy and responsible.
![Major T-Mobile outage takes down account access, mobile app](/static/build/img/news/major-t-mobile-outage-takes-down-account-access-mobile-app-small.jpg)
A major T-Mobile outage is preventing customers from logging into their accounts and using the company's mobile app. T-Mobile users trying to access their accounts receive an error warning that the mobile carrier's website has been "Unplugged."
![Framework discloses data breach after accountant gets phished](/static/build/img/news/framework-discloses-data-breach-after-accountant-gets-phished-small.jpg)
Framework Computer disclosed a data breach exposing the personal information of an undisclosed number of customers after Keating Consulting Group, its accounting service provider, fell victim to a...
![eBay to cough up $3M after cyber-stalking couple who dared criticize the souk](/static/build/img/news/ebay-to-cough-up-3m-after-cyber-stalking-couple-who-dared-criticize-the-souk-small.jpg)
Under the agreement [PDF], eBay admits responsibility for the actions of six of its former employees, and a contractor, all of whom previously pleaded guilty to physically and electronically harassing Ina and David Steiner. Ina and David Steiner in 1999 co-founded EcommerceBytes, a website and newsletter that reports on and scrutinizes ecommerce companies, including eBay.
![Over 150k WordPress sites at takeover risk via vulnerable plugin](/static/build/img/news/over-150k-wordpress-sites-at-takeover-risk-via-vulnerable-plugin-small.jpg)
Two vulnerabilities impacting the POST SMTP Mailer WordPress plugin, an email delivery tool used by 300,000 websites, could help attackers take complete control of a site authentication. Based on statitics from wordpress.org, there are roughly 150,000 sites that run a vulnerable version of the plugin that is lower than 2.8.
![Halara probes breach after hacker leaks data for 950,000 people](/static/build/img/news/halara-probes-breach-after-hacker-leaks-data-for-950000-people-small.jpg)
Popular athleisure clothing brand Halara is investigating a data breach after the alleged data of almost 950,000 customers was leaked on a hacking forum. Halara told BleepingComputer that it is aware that customer data was allegedly stolen and leaked online and is investigating a potential breach.
![Microsoft testing Windows 11 USB 80Gbps support, Copilot on login](/static/build/img/news/microsoft-testing-windows-11-usb-80gbps-support-copilot-on-login-small.jpg)
Microsoft is now testing support for the USB4 Version 2.0 specification in Windows 11, enabling transfer speeds of up to 80 Gbps over USB Type-C cables. USB 80Gbps is now being tested in the Windows 11 Insider Preview Build 23615, which was released today in the Dev Channel.
![Bitwarden adds passkey support to log into web password vaults](/static/build/img/news/bitwarden-adds-passkey-support-to-log-into-web-password-vaults-small.jpg)
The open-source Bitwarden password manager has announced that all users can now log into their web vaults using a passkey instead of the standard username and password pairs. "This technology sources an encryption key from a passkey in relation to a particular site, which can then be used to reliably encrypt and decrypt data" - Bitwarden.
![Microsoft shares script to update Windows 10 WinRE with BitLocker fixes](/static/build/img/news/microsoft-shares-script-to-update-windows-10-winre-with-bitlocker-fixes-small.jpg)
Microsoft has released a PowerShell script to automate updating the Windows Recovery Environment partition in order to fix CVE-2024-20666, a vulnerability that allowed for BitLocker encryption bypass. As Microsoft explains, this happens because instead of displaying a CBS E INSUFFICIENT DISK SPACE error when the WinRE partition is not large enough, Windows Update incorrectly says the generic "0x80070643 - ERROR INSTALL FAILURE" error message instead. ?This happens because the WinRE image file deployed when installing the KB5034441 security update is too large for the recovery partition.
![New Balada Injector campaign infects 6,700 WordPress sites](/static/build/img/news/new-balada-injector-campaign-infects-6700-wordpress-sites-small.jpg)
A little over 6,700 WordPress websites using a vulnerable version of the Popup Builder plugin have been infected with the Balada Injector malware in a campaign that launched in mid-December. Initially documented by researchers at Dr. Web who observed coordinated attack waves leveraging known flaws in WordPress themes and addons, it was later discovered that Balada Injector was a massivee operation running since 2017 that had compromised more than 17,000 WordPress sites.