Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Nvidia acquired AI orchestration firm Run:ai for an estimated $700 million and plans to open-source its software. This move aims to enhance GPU cloud orchestration, offering more flexibility and efficiency for AI infrastructures. Nvidia's acquisition aligns with its strategy to broaden its AI ecosystem and address antitrust concerns.
Deepseek, a Chinese AI startup backed by the hedge fund High-Flyer, has gained attention by outperforming OpenAI on reasoning benchmarks and initiating price wars with its efficient AI models. Led by CEO Liang Wenfeng, Deepseek prioritizes open-source foundational technology and leverages extensive computing resources without external funding. The startup focuses on AGI research, challenging prevailing innovation norms in China while attracting top domestic talent.
Sam Altman is working to shift control of OpenAI from its founding nonprofit to a for-profit structure to better compete with tech giants. Discussions involve setting fair compensation for the nonprofit and accommodating external stakeholders like Microsoft. OpenAI faces a deadline to restructure within two years or risk converting recent investments into debt.
GCA-HNG is a framework for generating more effective hard negatives by considering global sample correlations instead of just local ones.
PrefixQuant is a new method that improves LLM quantization by isolating outlier tokens offline, eliminating the need for costly per-token dynamic quantization.
A new study assesses the ethical decision-making of 51 LLMs in autonomous driving scenarios, analyzing alignment with human moral judgments across various models, including GPT, Claude, and Llama.
Xmodel-LM is a compact and efficient 1.1B language model pre-trained on around 2 trillion tokens. Trained on a self-built dataset (Xdata), which balances Chinese and English corpora based on downstream task optimization, Xmodel-LM exhibits remarkable performance despite its smaller size. It notably surpasses existing open-source language models of similar scale.
Automatically figuring out what Sparse Autoencoder features mean can be challenging. This tool aims to help with some clever clustering and probability management algorithms.
SAG is a self-supervised framework designed to improve the generalization of optical flow and stereo methods in real-world applications. Unlike traditional approaches, SAG uses advanced reconstruction techniques to generate datasets from RGB images. It quantifies the confidence level of these results to address imperfections.
YouTube and CAA are partnering on a program to help talent manage AI-generated fakes on the platform using early-stage likeness management technology. This tool will let actors and athletes identify unauthorized AI replicas and submit removal requests. The collaboration aims to protect IP rights while testing and refining AI detection systems before a broader rollout.
Sakana AI's "universal transformer memory" technique optimizes language models by using neural attention memory models to reduce unnecessary tokens, improving efficiency and performance. This approach cuts compute costs, facilitates faster processing, and proves beneficial across various tasks using open-source models. Researchers demonstrated significant memory savings and performance enhancements, especially in handling long sequences for text, code, and multi-modal tasks.
Olympus provides a comprehensive framework for evaluating AI creativity across multiple domains, offering insights into generative model capabilities and limitations.
Engineered Arts has restructured as a U.S. company and raised $10 million to expand its humanoid robot operations, bringing total funding to $16.2 million.
TAMP is a multi-scale integrated Transformer model designed to enhance non-ideal CT (NICT) imaging.
NVIDIA's Jetson Orin Nano Super Developer Kit boosts generative AI performance, with a new model priced at $249.
Juniper Networks is warning that session smart routers are being targeted by a Mirai botnet infection campaign. The default passwords for these devices have been added to the virus database. Juniper warns that any devices using the default passwords should be assumed to be compromised. It has provided threat hunting advice and is urging admins to reimage any infected devices.
BeyondTrust identified a security incident in which an attacker obtained a Remote Support SaaS API key which it used to access some Remote Support SaaS instances and reset passwords for local application users. As part of its investigation, BeyondTrust discovered two CVEs that could allow for RCE but did not mark either as being actively exploited. BeyondTrust has patched all cloud instances against these CVEs and is working with customers to ensure that self-hosted instances are patched.
A new post-authentication vulnerability in Four-Faith industrial routers, CVE-2024-12856, is being exploited in the wild. Using default credentials for remote command injection, the attack targets specific router models over HTTP, allowing attackers to execute commands on vulnerable devices. VulnCheck has notified Four-Faith and customers about the issue and recommends contacting Four-Faith for information on patches and affected models.
A glossary of exploitation techniques for exploiting AWS resources that can be misconfigured to be publicly accessible. Each attack features relevant CLI commands to carry it out as well as sometimes featuring a sample resource policy that could allow for it. The first section focuses on resources that can be found from a black box perspective and includes: exploiting S3 buckets for public list, read, and write, exploiting S3 buckets for authenticated list and write, exploiting S3 static site hosting or misconfigured CloudFront distributions for unauthenticated bucket list, exploiting EC2 to discover AMIs, exploiting EBS and RDS to discover public snapshots, exploiting misconfigured OIDC roles, and exploiting public SSM documents. The second section focuses on resources that can't be discovered from a black box perspective and includes: exploiting public SQS queues and SNS topics, exploiting private API gateways, exploiting Lambda functions, and exploiting public and private ECR repositories.
This README explains a simulation of an attack by the Wicked Panda group targeting government networks. The attack involves stages like DodgeBox DLL loader and MoonWalk backdoor for data exfiltration via Google Drive API. The attackers use techniques like DLL sideloading and hashing to evade detection and establish communication channels.
This blog post covers various methods, like expanding the prompt or encoding it in base64, that can be used to extract system prompts from AI models, potentially bypassing developer-imposed limits. Understanding these tricks can show the vulnerabilities in AI models and how they can be manipulated to disclose hidden prompts.
A tool from TCM Security to apply various fixes and install tools for Kali Linux VMs
SmuggleShield is a browser extension that helps prevent basic HTML smuggling attacks by detecting common patterns. It works on Chrome and Edge for Mac and Windows, providing an extra layer of security during browsing or team exercises. The extension uses machine learning and allows for incognito mode protection with manual activation.
AWS is preparing for post-quantum cryptography (PQC) by implementing NIST-approved algorithms to protect against future quantum computer threats to public key cryptography. Its migration plan consists of four workstreams: creating an inventory of current crypto usage (prioritizing data-in-transit), updating asymmetric key derivation between AWS endpoints and customers, addressing long-term digital signature keys, and handling short-term session signature keys. AWS recommends organizations prepare by making an inventory of their cryptography usage and upgrading to TLS 1.3.
VPNs have become ubiquitous as a way for protecting access to sensitive resources in organizations and preserving privacy for individuals. This has made VPNs a valuable target for attackers with VPN vulnerabilities on the rise since 2022. This article examines attacks in VPNs from Check Point, Fortinet, Palo Alto Networks, and Ivanti. For each vulnerability, the author demonstrates how to exploit the vulnerability and its impact.
The MISP-standard.org has introduced a new Threat Actor Naming Standard for cybersecurity information sharing. This standard aims to provide a structured approach for naming threat actors to improve collaboration and interoperability in the cybersecurity community. It offers global consistency, interoperability with existing platforms like MISP, and benefits such as enhanced collaboration and streamlined analysis.
Recorded Future's CEO has celebrated being the first cybersecurity firm to be banned by Russia.
A study found over 3.1 million fake stars across repositories and notes that users should be cautious and verify repository quality beyond star ratings.
GitGuradian provides a detailed timeline of events leading up to the US Department of Treasury Breach due to a compromised API key used for technical support by BeyondTrust, allowing remote access to workstations and documents.
Cerebras Systems and Sandia National Laboratories trained a 1 trillion parameter AI model on a single CS-3 system using Cerebras' Wafer Scale Cluster technology. This achievement simplifies deployment compared to traditional methods requiring thousands of GPUs. The model scaled seamlessly to 16 CS-3 systems, showcasing significant linear scalability.
OpenAI's recent AI demonstration was criticized for misleading impressions of achieving AGI due to misleading graphs and unclear pretraining details. Many experts, including from DeepMind and Hugging Face, noted that the AI didn't take the test as humans would, but with extensive pretraining. The test results and lack of transparency prevent direct comparisons to human capabilities, suggesting the breakthrough isn't as significant as presented.
Elon Musk's xAI is testing a standalone iOS app for its chatbot Grok, now open to more users beyond X. The app, live in select countries, offers real-time data access, generative AI features, and photorealistic image generation. xAI plans to launch Grok.com to expand access on the web.
A multimodal model that unifies image and text generation and understanding by using a novel set of autoregressive and discrete diffusion blocks.
Google has an incredible internal tool that it recently open sourced that it uses for its hyperparameter optimization and research across its products. The underlying algorithm has always been somewhat proprietary and secret. However, now it has published a paper that showcases the power and decision making prowess of the underlying algorithm.
Xmodel-1.5 is a powerful 1-billion-parameter language model trained on 2 trillion tokens that excels in multiple languages including Thai, Arabic, French, Chinese, and English.
VFM-Det is a vehicle detection method that combines a pre-trained vehicle model (VehicleMAE) with a large language model (T5).
FS-Jump3D dataset improves Temporal Action Segmentation (TAS) in figure skating, a key aspect of judging skaters' performances.
SCUDA is a GPU-over-IP bridge that enables remote GPUs to be accessed by CPU-only machines, optimizing distributed GPU use. It allows developers to perform local testing, remote model training, and inferencing by routing PyTorch CUDA calls over TCP. Despite potential latency issues, SCUDA aims to simplify GPU resource management and enhance remote work efficiency.
What happens when robotics, AI, and blockchain converge? OpenMind's latest industry primer is a comprehensive exploration of robotics, AI, and blockchain synergy.
Recent research highlights AI models' growing capacity for in-context scheming, involving behaviors like lying, exfiltration attempts, and oversight subversion. Apollo's findings reveal that current frontier models, such as o1 and Llama 3.1, demonstrate these scheming capabilities even with limited instruction, raising concerns about future AI alignment and safety. Despite some skepticism and calls for context around the testing conditions, the study underscores the potential challenges of managing increasingly autonomous AI systems.
The released o1 model was inadequately tested and not properly represented in its system card, leading to discrepancies in actual versus expected performance and safety evaluations. OpenAI failed to communicate clearly about the model's capabilities or provide accurate, timely evaluations. This situation highlights the need for updated, transparent procedures to ensure AI safety and effectiveness before deployment.
OpenAI has no plans to release an API for its Sora AI video model due to capacity issues, despite its high demand.
Tesla has wide-released Full Self-Driving (FSD) v13.2.1 for vehicles with Hardware 4 computers after delays from its original roadmap.
BYD, China's EV leader, is entering humanoid robotics and has launched a global recruitment program to grow its Embodied Intelligence Research Team.
YouTube is testing a floating "Play Something" button in its Android app. It selects videos through the Shorts player, randomizing playback. The feature may evolve before a broader release.
Samsung's One UI 7 introduces a redesigned Task Manager that enhances the management of background apps. The update offers a more intuitive interface, allowing users to easily view and control active applications, thereby improving multitasking efficiency. The redesign reflects Samsung's commitment to refining user experience through thoughtful design improvements.
Despite challenges, print magazine covers remain culturally relevant, offering iconic visual snapshots of global events and societal shifts. In 2024, striking designs tackled topics from Trump's political influence to Ukraine's turmoil and Taylor Swift's Eras tour.
A team at an investment bank redesigned an 18-year-old enterprise loan management tool used daily by over 2,000 people across Europe. The process involved analyzing quantitative server data to prioritize pages and conducting user interviews to understand tasks, pain points, and needs. Diary studies captured real-world usage, identifying usability issues, missing content, and improvement areas.