Cybersecurity

9615 readers

179 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social

108

Microsoft Copilot Ignored Sensitivity Labels, Processed Confidential Emails (www.techrepublic.com)

submitted 1 day ago* (last edited 1 day ago) by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

5 comments fedilink hide all child comments

top 5 comments

sorted by: hot top controversial new old

[–] mech@feddit.org 2 points 2 hours ago* (last edited 2 hours ago)

The thing you need to understand is that Microsoft has gone all in on AI and won't be able to turn back even if they wanted to.
They already pruned down each project's dev team to one senior developer and a dog.

The senior developer's job is to feed the dog.
The dog's job is to bite the dev if he tries to write any code.

[–] sleepundertheleaves@infosec.pub 34 points 1 day ago* (last edited 1 day ago)

The fix is not to stop using AI. That ship has sailed.

Has it? Has it really?

It seems to me any company that processes confidential data should disable AI tools that read employee emails (or documents in general) for the same reason they, e.g., disable links to potentially malicious websites and ban the use of unapproved flash drives. That is, because it's an obvious and unnecessary security risk.

[–] Senseless@feddit.org 5 points 1 day ago

Went to five Microsoft trainings in the past 6 months and the amount of copium some trainers take is unimaginable.

[–] aarch0x40@piefed.social 3 points 1 day ago

Is feature, not flaw

[–] U7826391786239@lemmy.zip 4 points 1 day ago

the reasons for trying to figure out how to go completely off-grid keep growing by the minute