Cybersecurity daily news

MSSP Market Update: Google’s AI Boost Identifies 26 New Vulnerabilities in Open-Source Projects

Share
(Adobe Stock Images)

MSSP Alert has found recently that it is challenging to have a cybersecurity discussion without also talking about artificial intelligence. That’s why we’re particularly interested in a new report about Google’s OSS-Fuzz tool’s recent AI boost that has led to the discovery of 26 new vulnerabilities in open-source projects, including an overlooked flaw in the OpenSSL library.

That’s according to a report at SCMedia that explains that OSS-Fuzz is a Google-developed fuzzing system that the company has been using to continuously test hundreds of open-source projects since 2016.  In August 2023 Google said it was working to bring large-language model capabilities to the system to develop fuzz targets.

You can read all about the project and the new developments in the full SCMedia story here.

Got news or tips to share with us? Please send them to  [email protected].

Today’s MSSP Update

1. Strategic partnership - MSP platform tools provider, SuperOps, has forged a new strategic partnership with Malwarebytes that calls for the integration of the cybersecurity company’s ThreatDown family of endpoint security products with SuperOps’ platform, enabling proactive threat detection, automated incident response, enhanced security posture, and improved operational efficiency.

2. Distribution agreement - Identity security company, 1Password, is announcing a new distribution agreement with global technology distributor Ingram Micro to expand the reach of 1Password Extended Access Management, an identity security platform.

3. The threat landscape for retailers - U.S. retailers have seen a 24% year-on-year increase in ransomware attacks in 2024, according to a new report from Cyberint, a cyber risk management company that is part of Check Point.  U.S. retailers represented 48% of all ransomware attack targets in 2024. Other top threats included data breaches and supply chain attacks.

4. Series A funding - Grey Market Labs, which offers a secure-environments-as-a-service platform called Replica, has secured an $8M Series A funding round led by Capri Ventures, with participation from Blu Ventures and AFG.

5. Small businesses face heightened vulnerability - Cyberinsurance provider Cowbell’s most recent report finds that smaller businesses are experiencing heightened vulnerability to cyberthreats due to limited cybersecurity resources and the escalating threat of supply chain attacks and industry-specific cyber exposure.

Jessica C. Davis

Jessica C. Davis is editorial director of CyberRisk Alliance’s channel brands, MSSP Alert, MSSP Alert Live, and ChannelE2E. She has spent a career as a journalist and editor covering the intersection of business and technology including chips, software, the cloud, AI, and cybersecurity. She previously served as editor in chief of Channel Insider and later of MSP Mentor where she was one of the original editors running the MSP 501.