Agregátor RSS

How MFA Failures are Fueling a 500% Surge in Ransomware Losses

The Hacker News - 2 Červenec, 2024 - 13:00
The cybersecurity threat landscape has witnessed a dramatic and alarming rise in the average ransomware payment, an increase exceeding 500%. Sophos, a global leader in cybersecurity, revealed in its annual "State of Ransomware 2024" report that the average ransom payment has increased 500% in the last year with organizations that paid a ransom reporting an average payment of $2 million, up from
Kategorie: Hacking & Security

How MFA Failures are Fueling a 500% Surge in Ransomware Losses

The Hacker News - 2 Červenec, 2024 - 13:00
The cybersecurity threat landscape has witnessed a dramatic and alarming rise in the average ransomware payment, an increase exceeding 500%. Sophos, a global leader in cybersecurity, revealed in its annual "State of Ransomware 2024" report that the average ransom payment has increased 500% in the last year with organizations that paid a ransom reporting an average payment of $2 million, up from The Hacker Newshttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Buď zaplatíte 240 Kč, nebo vás budeme šmírovat. Meta podle Evropské komise porušuje DMA

Živě.cz - 2 Červenec, 2024 - 12:45
Evropská komise došla k předběžnému závěru ohledně Mety •Meta porušuje Digital Markets Act a má teď možnost se bránit •Facebook a Instagram musí být poskytovány i s necílenou reklamou
Kategorie: IT News

New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data

The Hacker News - 2 Červenec, 2024 - 12:28
Modern CPUs from Intel, including Raptor Lake and Alder Lake, have been found vulnerable to a new side-channel attack that could be exploited to leak sensitive information from the processors. The attack, codenamed Indirector by security researchers Luyi Li, Hosein Yavarzadeh, and Dean Tullsen, leverages shortcomings identified in Indirect Branch Predictor (IBP) and the Branch Target Buffer (BTB
Kategorie: Hacking & Security

New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data

The Hacker News - 2 Červenec, 2024 - 12:28
Modern CPUs from Intel, including Raptor Lake and Alder Lake, have been found vulnerable to a new side-channel attack that could be exploited to leak sensitive information from the processors. The attack, codenamed Indirector by security researchers Luyi Li, Hosein Yavarzadeh, and Dean Tullsen, leverages shortcomings identified in Indirect Branch Predictor (IBP) and the Branch Target Buffer (BTBNewsroomhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Top 5 AI employee fears and how to combat them

Computerworld.com [Hacking News] - 2 Červenec, 2024 - 12:00

As artificial intelligence adoption surges in business, employees are left to wonder how systems placed on “automatic” can be controlled and how long it will be before their jobs are on the chopping block.

Those were two top fears revealed in a recent study by Gartner about the five main concerns workers have over generative AI and AI in general. And those fears are warranted, according to survey data. For example, IDC predicts that by 2027, 40% of current job roles will be redefined or eliminated across Global 2000 organizations adopting genAI.

A remarkable 75% of employees said they are concerned AI will make certain jobs obsolete, and about two-thirds (65%) said they are anxious about AI replacing their job, according to a 2023 survey of 1,000 US workers by professional services firm Ernst & Young (EY). About half (48%) of respondents said they are more concerned about AI today than they were a year ago, and of those, 41% believe it is evolving too quickly, EY’s AI Anxiety in Business Survey report stated.

“The artificial intelligence (AI) boom across all industries has fueled anxiety in the workforce, with employees fearing ethical usage, legal risks and job displacement,” EY said in its report.

The future of work has shifted due to genAI in particular, enabling work to be done equally well and securely across remote, field, and office environments, according to EY.

Managing highly distributed teams doing complex, interdependent tasks is not easy; finding employees trained sufficiently well to offer effective IT support across a broad security threat landscape of applications, platforms, and endpoints is also not easy. That’s where AI promises to facilitate and automate repetitive tasks like coding, data entry, research, and content creation and also amplify the effectiveness of learning in the flow of work, according to EY.

Gartner’s recent study identified five unique fears employees have about how their company will apply AI:

  • Job displacement due to AI that makes their job harder, more complicated, or less interesting
  • Inaccurate AI that creates incorrect or unfair insights that negatively impact them
  • Lack of transparency around where, when, and how the organization is using AI, or how it will impact them
  • Reputational damage that occurs because the organization uses AI irresponsibly
  • Data insecurity because the implementation of AI solutions puts personal data at risk 

“Employees are concerned about losing their job to AI; even more think their job could be significantly redesigned due to AI,” said Duncan Harris, research director for Gartner’s HR practice. “When employees have these fears, they all have a substantial impact on either the engagement of the employee, their performance, or sometimes both.”

One problem Gartner cited in its report is that organizations aren’t being fully transparent about how AI will impact their workforce. Organizations can’t just provide information about AI; they also need to provide context and details on what risks and opportunities are influencing their AI policy and how AI relates to key priorities and company strategy. 

“We can say that the most common worry is that AI will impact an employee’s role – either making it obsolete entirely or changing it in a way which concerns the employee, For example, taking some of the challenge or excitement out of it,” Harris said. “And the point is, these perspectives are already having an impact – irrespective of what the future really holds.”

Harris said in another Gartner survey, employees indicated they were less likely to stay with an organization due to concerns about AI-driven job loss. That phenomenon has cost the average enterprise with 10,000 employees about $53 million a year in lost productivity, Harris said.

Gartner recommends organizations consider what tasks within roles are most likely to be disrupted by genAI. For example, GenAI will likely have the greatest immediate impact on tasks such as content creation, question answering and discovery, translation, document summarization and software coding. But this doesn’t mean wholesale replacement of employees in the near term, he said.

Organizations can also overcome employee AI fears and build trust by offering training or development on a range of topics, such as how AI works, how to create prompts and effectively use AI, and even how to evaluate AI output for biases or inaccuracies. And employees want to learn. According to the report, 87% of workers are interested in developing at least one AI-related skill.

AI has the potential to create high business value for organizations, but employee distrust of the technology is getting in the way, Gartner’s study found. Leaders involved in AI cite concerns about ethics, fairness, and trust in AI models as top barriers they face when implementing the technology.

Employee concerns are not fear of the technology itself, but fear about how their company will use the new technology.

“If organizations can win employees’ confidence, the benefits will extend beyond just AI projects. For example, high-trust employees have higher levels of inclusion, engagement, effort, and enterprise contribution,” Harris said.

One particular concern is that AI, especially GenAI can lead to organizations making inadvertent mistakes, according to Harris. “So, from an executive perspective, the biggest concern for the future in using GenAI is around data privacy – this is also one of the most common concerns for employees,” he said.

“We suggest that by 2026, enterprises that apply AI trust, risk and security management to AI applications will consume at least 50% less inaccurate or illegitimate information that leads to faulty decision making,” Harris said.

Companies should also work on partnering with employees to create AI solutions, which will reduce fears about inaccuracy. Companies that show how AI works, provide input on where it could be helpful or harmful, and test solutions for accuracy can allay fears. For example, many organizations are setting up sandbox environments for experimenting with AI solutions and are keen for employees to be involved in these.

Organizations also need to formalize accountability through new governance structures that demonstrate they are taking AI threats seriously.

“For example, to boost employee trust in organizational accountability, some companies have deputized AI ethics representatives at the business unit level to oversee implementation of AI policies and practices within their departments,” Harris said.

Organizations should also establish an employee data bill of rights to serve as a foundation for their AI policies.

“The bill of rights should cover the purpose for data collection, limit the data collected to the defined purpose, commit to use data in ways that reinforce equal opportunity, and recognize employees’ right to awareness about the data collected on them,” Harris said.

Investment in AI is going to continue and employees who lean into this trend will benefit, according to Harris. Instead of distancing themselves, Gartner found employees want to learn more and be involved in working with AI.

“In fact, when we asked employees in different industries whether they would swap jobs if they were nearly identical apart from the new role offering the ability to work with GenAI, the likelihood to swap was over 40% for employees in the finance, construction, telecom, and technology sectors,” Harris said.

Kategorie: Hacking & Security

Dobrá zpráva pro lovce mimozemšťanů. Terraformovanou planetu lze detekovat i s již existujícími technologiemi

Živě.cz - 2 Červenec, 2024 - 11:45
Pokročilé cizí civilizace teoreticky mohou terraformovat jiné planety • Takové planety by byly příhodnější k životu pozemského typu • Pokud by k tomu mimozemšťani používaly „skleníkové plyny,“ mohli bychom to zjistit
Kategorie: IT News

Mobilní Arrow Lake-H nabídne 8+16 jader jako desktopová verze

CD-R server - 2 Červenec, 2024 - 10:00
Intel nejdříve vydá úsporné mobilní procesory Lunar Lake, poté desktopový Arrow Lake-S a někdy poté dojde na výkonný mobilní Arrow Lake-H. Ten již, na rozdíl od Lunar Lake, nabídne plný počet jader…
Kategorie: IT News

Nový poplatek zdražil elektřinu. Platíme za datové centrum, které ještě nefunguje

Živě.cz - 2 Červenec, 2024 - 09:45
První červencový den přinesl nový poplatek na faktuře za elektřinu, který je úzce spojený se sdílením energie schváleném v Lex OZE II. Každé odběrné místo si měsíčně připlatí 5,10 Kč. Ceníky distributorů totiž obsahují položku Cena za provoz nesíťové infrastruktury, do které spadá jak již dříve ...
Kategorie: IT News

'Almost every Apple device' vulnerable to CocoaPods supply chain attack

The Register - Anti-Virus - 2 Červenec, 2024 - 09:32
Dependency manager used in millions of apps leaves a bitter taste

CocoaPods, an open-source dependency manager used in over three million applications coded in Swift and Objective-C, left thousands of packages exposed and ready for takeover for nearly a decade – thereby creating opportunities for supply chain attacks on iOS and macOS apps, according to security researchers.…

Kategorie: Viry a Červi

Recenze mobilu Motorola Edge 50 Ultra. Skoro bez kompromisů, přitom levnější než konkurence

Živě.cz - 2 Červenec, 2024 - 09:15
Jedná se o vlajkovou loď od Motoroly • Stojí méně než konkurence • Nemá přitom větší nedostatky ani kompromisy
Kategorie: IT News

Skvělý stojan a zajímavý puk. Test 4K monitoru pro kreativce BenQ PD2706UA

Živě.cz - 2 Červenec, 2024 - 08:45
Dobrý monitor nemusí zaujmout jen povedeným panelem, ale také držákem. Tento BenQ nemá nudný stojan, ale propracované rameno.
Kategorie: IT News

Slunce a vítr loni v EU vyrobily nejvíc elektřiny. Obnovitelné zdroje poprvé porazily fosilní paliva

Živě.cz - 2 Červenec, 2024 - 07:45
Na jedné straně nárůst větrných a solárních elektráren a na straně druhé prudký pokles elektráren spalujících fosilní paliva zásadně proměnil energetický mix Evropské unie. Podle předběžných údajů Eurostatu byly v loňském roce hlavním zdrojem elektřiny v EU obnovitelné zdroje. Obnovitelné zdroje ...
Kategorie: IT News

Nscale: GEMM tuning přináší Instinct MI300X až sedminásobný nárůst výkonu

CD-R server - 2 Červenec, 2024 - 07:40
Společnost Nscale zveřejnila výsledky vlastních měření demonstrujících vliv optimalizací na výkon akcelerátorů Instinct MI300X. Zjistila nárůst výkonu 7,3× v maximu a 3,4× v průměru…
Kategorie: IT News

Baddies hijack Korean ERP vendor's update systems to spew malware

The Register - Anti-Virus - 2 Červenec, 2024 - 07:31
Notorious 'Andariel' crew takes a bite of HotCroissant backdoor for fresh attack

A South Korean ERP vendor's product update server has been attacked and used to deliver malware instead of product updates, according to local infosec outfit AhnLab.…

Kategorie: Viry a Červi

Meta's 'Pay or Consent' Approach Faces E.U. Competition Rules Scrutiny

The Hacker News - 2 Červenec, 2024 - 07:10
Meta's decision to offer an ad-free subscription in the European Union (E.U.) has faced a new setback after regulators accused the social media behemoth of breaching the bloc's competition rules by forcing users to choose between seeing ads or paying to avoid them. The European Commission said the company's "pay or consent" advertising model is in contravention of the Digital Markets Act (DMA).
Kategorie: Hacking & Security

Meta's 'Pay or Consent' Approach Faces E.U. Competition Rules Scrutiny

The Hacker News - 2 Červenec, 2024 - 07:10
Meta's decision to offer an ad-free subscription in the European Union (E.U.) has faced a new setback after regulators accused the social media behemoth of breaching the bloc's competition rules by forcing users to choose between seeing ads or paying to avoid them. The European Commission said the company's "pay or consent" advertising model is in contravention of the Digital Markets Act (DMA). Newsroomhttp://www.blogger.com/profile/[email protected]
Kategorie: Hacking & Security

Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware

The Hacker News - 2 Červenec, 2024 - 06:48
A China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deliver malware. The vulnerability, tracked as CVE-2024-20399 (CVSS score: 6.0), concerns a case of command injection that allows an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected
Kategorie: Hacking & Security
Syndikovat obsah