Security Management

Both malicious packages resembling proof-of-concept models were not identified by Hugging Face's Picklescan security tool due to differences in compression format with PyTorch, as well as a security issue that prevented the proper scanning of Pickle files that could facilitate compromise, according to a report from ReversingLabs.

Immediately patching is recommended due to the risk of RCE on Microsoft IIS web servers in critical infrastructure sectors.

Eight of the 19 states with consumer privacy data laws that were evaluated by the two organizations were deemed ineffective.

DeepSeek could be exploited by the Chinese government to facilitate surveillance and misinformation operations, according to the bipartisan bill, which also moves to prohibit any AI apps developed by DeepSeek's parent firm High-Flyer while offering exemptions for research and national security purposes.

Such a development comes after a lawsuit against Treasury Secretary Scott Bessent and escalating concerns regarding DOGE's infiltration of several federal government systems, including those at the Labor and Education Departments and the Centers for Medicare and Medicaid Services.

American companies that market critical infrastructure services to EU countries must pay attention to NIS2.

A Chinese national is facing multiple charges of economic espionage and theft of trade secrets after he was accused of stealing AI technology from Google