Chimera, Aliquippa, FNF, Lazarus, DARPA, Namedrop, Google, Aaran Leyland, and More – SWN #344
Chimera, Aliquippa, FNF, Lazarus, DARPA, Ransom Payments, Namedrop, Google, Aaran Leyland, and more are on this edition of the Security Weekly News.
Hosts
- 1. Hackers Hijack Industrial Control System at US Water Utility
- 2. Fidelity National Financial Takes Down Systems Following Cyberattack
- 3. North Korean supply chain attacks ‘growing in sophistication and volume’
- 4. When does it make sense to pay the ransom?
- 5. General Electric, DARPA Hack Claims Raise National Security Concerns
- 6. The mystery of the disappearing Google Drive files
- 7. Analysis
- 8. Hackers spent 2+ years looting secrets of chipmaker NXP before being detected
- 1. Guidelines for secure AI system development
Executive summary This document recommends guidelines for providers of any systems that use artificial intelligence (AI), whether those systems have been created from scratch or built on top of tools and services provided by others. Implementing these guidelines will help providers build AI systems that function as intended, are available when needed, and work without revealing sensitive data to unauthorised parties.
This document is aimed primarily at providers of AI systems who are using models hosted by an organisation, or are using external application programming interfaces (APIs). We urge all stakeholders (including data scientists, developers, managers, decision-makers and risk owners) to read these guidelines to help them make informed decisions about the design, development, deployment and operation of their AI systems.
