InfoSecBulletin Cybersecurity for mankind
The NSA AISC recently released a cybersecurity information sheet called “Deploying AI Systems Securely”. This sheet was developed in partnership with CISA, the FBI, ASD ACSC, CCCS, NCSC-NZ, and NCSC-UK.
The guidance provides best practices for deploying and operating externally developed artificial intelligence (AI) systems and aims to:
Using AI, Researcher Hacks Google and Earns $500,000 Bug Bounty
Chrome 149 fixes 28 flaws, including critical UAF bugs
Dahua patches multiple critical vulnerabilities in its products
South Korea fines Coupang Record $409 mln fine for data leak
ShinyHunters claim stolen data from 100+ org via oracle PeopleSoft servers
Security Update: RoguePlanet, BitLocker Bypass, Chromium Zero-Day, and More Critical Threats Uncovered
73 Microsoft Packages Compromised in Password Stealer Attack
New Windows Defender ‘RoguePlanet’ zero-day grants SYSTEM privileges
Microsoft June Patches 200 Vulnerabilities including 3 zero days
World’s first wind power underwater data center is now live
Improve the confidentiality, integrity, and availability of AI systems.
Ensure there are appropriate mitigations for known vulnerabilities in AI systems.
Provide methodologies and controls to protect, detect, and respond to malicious activity against AI systems and related data and services.
CISA recommends that organizations using externally developed AI systems review and apply the provided guidance. They also suggest reviewing the previously published joint guidance on securing AI systems and visiting cisa.gov/ai for more information.
