Apr 27, 2025Ravie LakshmananKubernetes / Cloud Security Microsoft has revealed that a threat actor it tracks as Storm-1977 has conducted password spraying attacks against cloud tenants in the education sector over the past year. “The attack involves the use of AzureChecker.exe, a Command Line Interface (CLI) tool that is being used by a wide range … Read more
Image by Mohamed Hassan via PxHere The debate on the use of copyrighted material to train generative AI models is evolving, shifting its focus from whether compensation is due to creators, to determining the structure and specifics of a remuneration system. The discussion seems to be focused on a number of remuneration schemes, three of … Read more
In my contribution to the EAPIL online seminar discussing Ekatarina Aristova’s excellent Tort Litigation against Transnational Corporations: The Challenge of Jurisdiction in English Courts (OUP 2024), I flagged the discussion by Dr Aristova in Chapter 6 of the book, of one of the objections to jurisdiction exercised by ‘European’ or by extension courts in the Global North, … Read more
Dec 20, 2024Ravie LakshmananMalware / Supply Chain Attack The developers of Rspack have revealed that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that allowed a malicious actor to publish malicious versions to the official package registry with cryptocurrency mining malware. Following the discovery, versions 1.1.7 of … Read more
A CEO is arrested for turning satellite receivers into DDoS attack weapons, and we journey into the world of bossware and “affective computing” and explore how AI is learning to read our emotions – is this the future of work, or a recipe for dystopia? All this and more is discussed in the latest edition … Read more