AdaptHealth says attackers used social engineering to breach its systems
and steal sensitive patient data,
including passwords associated with insurance billing.
The medical equipment company disclosed the attack to the Securities and Exchange Commission (SEC) on Thursday,
noting that attackers accessed internal patient management systems, document storage platforms,
and external electronic health record system portals.
The attack targeted an unwitting thi…
I know I’m late to the party to @…’s post “Is it ethical to use AI?”, where she argues that “AI is just technology”. It’s been festering inside me, and Martin Fowler’s mention of the article that calls AI “a technology that is so powerful and so useful”, and therefore “there’s no ethical gain from renouncing the use of AI”. (Especially as both have provided th…
Google VP of Security Engineering Heather Adkins warns the EU's DMA proposals to open Android and Search could lead to a significant rise in fraud within weeks (Matt Burgess/Wired)
https://www.wired.com/story/top-google-security-…
Enhancing Attack Detection Capabilities in BACnet/IP Networks Using Machine-Learning Models
Derek Manzella, John D. Hastings
https://arxiv.org/abs/2607.20686 https://arxiv.org/pdf/2607.20686 https://arxiv.org/html/2607.20686
arXiv:2607.20686v1 Announce Type: new
Abstract: Building Automation Systems (BAS) manage critical building functions using protocols such as BACnet/IP, yet defenders have limited tooling and few labeled datasets for detecting BACnet-specific attacks. This work addresses these gaps through three contributions. First, CISA's Zeek BACnet parser is modified to produce a unified per-packet log, simplifying feature engineering for machine-learning (ML) pipelines. Second, a simulated BACnet/IP testbed is developed using bacpypes3 to model a small commercial HVAC system with physics-based device behavior, schedule-aware controller logic, and per-packet attack labeling. Third, five unsupervised anomaly detection models are evaluated using baseline traffic and six BACnet attack types, including denial of service, reconnaissance, property tampering, and false data injection. Results show that One-Class SVM achieved the strongest overall performance, with an average F1 score of 0.864 across all attacks and F1 scores above 0.99 for high-volume denial-of-service and reconnaissance attacks. Detection is much stronger for high-volume attacks, such as DoS attacks and reconnaissance, than stealthier techniques such as tampering and false data injection, which scored around 77%.
toXiv_bot_toot
Flower framework to deal with ai engineering work transition
Juliette is a game dev who was excited by ai then , oh, its disruptive and can software dev be ending?
So she made a model for thinking about the impact on teams and engineers.
It activities:
What is the work that might be affected? She has a list of things too long to read.
Define how each is done, standard best practice etc. How outputs of each are inputs to others.
Claude builds skills based on that.
Ai capabilities:
Can si do those things? Can it ever?
Probably not for many.
So what is the impact going to be?
If its all done by ai the job is thinking about the product not coding. That plus working out the odds its done it right. More importantly, philosophy! The job is to define what good software is and have the robot implement.
So sounds like she thinks were heading to the job being thinking about systems then wrangling robots.
But only if its reliable and cheap and not regulated away.
Which might not be the case.
Buy her book for the full list and analysis.
#devWorld #ai