Cyber Security News: AI Flaws, Malware Exploits, and AI Workforce Development

AI Security Vulnerabilities and Patches

• 💡 OpenAI has patched a critical security flaw in its ChatGPT deep research agent that could have exposed Gmail data.
• ⚠️ Attackers could have exploited the feature by embedding hidden instructions in emails, tricking the agent into extracting personal information.
• 🔍 While no evidence of exploitation exists, the incident highlights the potential for AI agents to be abused.

Exploited Vulnerabilities and Malware

• 🚨 CISA has released details on malware used to exploit two Ivanti Endpoint Manager Mobile (EPMM) flaws, which were quickly abused after proof-of-concept exploits appeared.
• 💻 The vulnerabilities, an authentication bypass and a remote code execution bug, were chained for unauthenticated RCE, with China-linked UNCC 5221 tied to the campaigns.
• 🛡️ WatchGuard has patched a critical flaw in its Firebox firewalls that could allow remote attackers to take control without authentication, urging immediate updates.

Cybersecurity Recruitment and Recruitment Challenges

• 🎯 The Department of Defense aims to cut its cybersecurity job hiring time from 70 to 25 days due to a significant shortfall of nearly 20,000 cyber professionals.
• 🧠 DoD is shifting to skills-based hiring using cyber range assessments instead of degrees or certifications to address the talent gap.
• 🌐 MI6 has launched Silent Courier, a dark web portal for informants to securely share secrets, aiming to recruit sources globally.

AI Workforce Development and Critical Thinking

• 🌱 Torq's Chief People Officer, Karin Ophir Zimet, discusses the challenge of upleveling AI skills in the current workforce.
• 🚀 The company is developing an internship program to equip students with relevant coding and AI platform skills for a rapidly evolving tech landscape.
• 🧐 Emphasis is placed on developing critical thinking skills alongside technical expertise, as AI jobs increasingly demand the ability to analyze and question AI-generated outputs.
• 📈 Leveraging AI effectively offers significant benefits in speed and accuracy for building features, writing emails, and improving overall team productivity.

International Cyber Incidents and Policy

• 🕵️ A UK teenager faces accusations of involvement with the Scattered Spider gang, allegedly extorting over $115 million from numerous organizations.
• 🏛️ The Senate confirmed Katherine Sutton as the Pentagon's new assistant secretary of defense for cyber policy.
• 📄 A former CIA officer is accused of selling classified information to private clients, highlighting misuse of security clearances.
• 🎭 Russia's Ministry of Defense TV channel has launched Plet Stacker, a weekly AI-generated show featuring deep fakes and surreal skits, raising questions about propaganda versus parody.