article thumbnail

Cybersecurity Snapshot: ChatGPT Gets So-So Grade in Code Analysis Test, while JCDC Pledges To Focus on Protecting Critical Infrastructure

Tenable

Check out why ChatGPT’s code analysis skills left Carnegie Mellon researchers unimpressed. Meanwhile, CISA and OpenSSF shine a spotlight on the security of software package repositories. 1 - ChatGPT’s code analysis skills? Not great Thinking of using ChatGPT to detect flaws in your code? Review ChatGPT 3.5’s

ChatGPT 71
article thumbnail

Cybersecurity Snapshot: CISA Shines Light on Cloud Security and on Hybrid IAM Systems’ Integration

Tenable

Here’s the latest: The nation-state hacking group accessed Microsoft source code repositories and breached internal systems – and the attack is ongoing. According to an Associated Press article, the stolen information includes “cryptographic secrets” such as passwords, certificates and authentication keys. “A

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

ChatGPT and Your Organisation: How to Monitor Usage and Be More Aware of Security Risks

CIO

People are looking to the AI chatbot to provide all sorts of assistance, from writing code to translating text, grading assignments or even writing songs. In another example , Samsung staff leveraged ChatGPT to fix errors in some source code but leaked confidential data, including notes from meetings and performance-related data.

ChatGPT 204
article thumbnail

Cybersecurity Snapshot: New Guide Explains How To Assess If Software Is Secure by Design, While NIST Publishes GenAI Risk Framework

Tenable

Is the software your company wants to buy securely designed? But how can you determine if the manufacturer built the software following secure-by-design principles? The authoring agencies define the secure-by-design principles that software manufacturers should follow when building digital products and services. And much more!

article thumbnail

How to manage cloud exploitation at the edge

CIO

Good Dog Communications in Partnership with Verizon and Edgio recently hosted a webinar, “The Rise of Cloud Exploitation, ” that spoke directly to cyberthreats targeting web apps and security best practices. This can occur due to insecure configurations, inadequate access controls, or vulnerabilities in cloud storage or databases.

Cloud 228
article thumbnail

Cybersecurity Snapshot: U.S. Gov’t Revises, Seeks Input on Security Assessment Questionnaire for Software Vendors

Tenable

Uncle Sam wants your input on the latest version of the “Secure Software Development Attestation Form” that federal agencies will use to assess the security of software vendors. government will evaluate the security practices of its software vendors – and offer your two cents. In addition, there’s a new zero trust certification.

article thumbnail

Leverage Two-Factor Authentication for Maximized Security

Kaseya

Did you know that 81 percent of data breaches are due to weak or stolen passwords? Phishing, social engineering and unsecured networks have made password based authentication insecure for some time. In today’s age where security breaches have become an everyday occurrence, password-only authentication is not sufficient.