JPMorgan Chase CISO Criticizes Inadequate SaaS Cybersecurity

JPMorgan Chase's Chief Information Security Officer, Patrick Opet, has issued a stark warning to software as a service providers, accusing them of "quietly enabling cyberattackers" through lax security measures. In an open letter, Opet stressed the urgent need for providers to reprioritize cybersecurity, warning that an attack on a major SaaS or PaaS provider could rapidly impact all of its customers due to the interconnected nature of these platforms. Hacking through soundwaves poses airborne security risks as researchers have uncovered critical vulnerabilities in Apple’s AirPlay wireless streaming protocol. These flaws, found in the software development kit used by third-party manufacturers, could allow attackers to remotely execute code and take over smart devices by exploiting trusted network connections. Top data privacy concerns are emerging in the NIH's autism research project, despite the agency's apparent decision to scale back plans for a national registry to track individuals with autism. Experts Ariana Aboulafia and Andrew Crawford from the Center for Democracy and Technology warn that the initiative still raises significant questions about how sensitive personal information will be safeguarded. Krafton has reported record-high quarterly sales in Q1 2025, driven by the expansion of its PUBG intellectual property, the strong debut of life-simulation game InZOI, and the global growth of Battlegrounds Mobile India. These developments led to a 41.6% increase in sales quarter-over-quarter and a 31.3% rise year-over-year. Revealed: Blind Item #7 points to permanent A-list singer John Mayer, known for his solo work and frequent collaborations with jam bands, and his continued preference for women who share specific intimate interests. LWN Transitions to Mastodon as the LWN.net feed has moved to a new address, now known as @[email protected]. While many followers were automatically shifted through migration tools, users are encouraged to verify they are following the updated feed to stay connected. An Eagles-themed tailgate RV boasting full amenities is now up for sale in Horsham for $12,500. Dubbed “The Ultimate Tailgate Machine,” this customized 1990 Chevy G-Series RV has just 71,000 miles and features everything from an external keg tap and built-in cooler to dual TVs, a Pioneer sound system with indoor and outdoor speakers, and seating for up to 10 adults. With a legacy of two Super Bowl appearances and countless playoff tailgates, the RV is being retired at the top of its game, making room for a new generation of fans to continue the tradition. AI-generated code poses a significant security risk due to a phenomenon known as "package hallucinations," in which code created by large language models frequently references non-existent third-party libraries. A recent study analyzing 576,000 code samples from 16 popular AI models found that 19.7% of package dependencies—amounting to over 440,000 entries—were fabricated. This increases the threat of dependency confusion attacks, where malicious actors can insert harmful packages under these fake names. Researchers noted that open-source models hallucinate at a rate of nearly 22%, compared to just 5% in commercial counterparts, and about 43% of these hallucinated packages appeared in multiple prompts, making them predictable attack vectors.