Posts

Image
Ransomware Alerts Beyond Passwords: Decoding the Vulnerability of Identity Tokens November 1, 2024 April 24th, 2025 12 min read Many applications that we use all the time to communicate and collaborate such as MS Teams, Slack, LinkedIn, Google Workspace, Microsoft Office 365, Salesforce and so on are to greater or lesser extent based upon the ‘modern web architecture’.  All of these applications make numerous API calls to cloud hosted services.  This architecture is really powerful and allows for interactive collaboration with other users in ways that could never be possible in a traditional ‘desktop application’ that only runs and executes on a single computer with a single user.  However this power comes with a complication.  Your identity. If you’ve watched any of our UpSight Security demos we often include a step where an attacker reads credentials fro...
Read more
Image
Product Ransomware Protection for Windows Copilot+ PC powered by ARM64 January 1, 2025 April 24th, 2025 3 min read Microsoft recently launched the Copilot+ PC formfactor to enable running bigger and more complex AI models directly on a PC while maintaining a long battery life on a lightweight device. These devices are powered by Qualcomm Snapdragon processors based around the ARM64 architecture. UpSight is pleased to announce that the UpSight.ai client now supports the ARM64 architecture including all Copilot+ PC models. The UpSight.ai Anti ransomware client running on a Lenovo ARM64 based Copilot+ PC (which was delivered in plastic free packaging from Lenovo) Thankfully Microsoft has reconsidered the implementation decisions around the controversial ‘Recall’ feature and has delayed its launch. UpSight will keep an eye on the replacement and work to ensure that regardle...
Read more
Image
Product Small Language Models Against Ransomware February 1, 2025 April 24th, 2025 7 min read When talking about the generative AI that powers UpSight Security we are often posed the obvious question about the performance impacts of running a generative AI language model on an endpoint computer!  This is an entirely reasonable question given that most people’s experience with generative AI language models are the ‘Large Language Model’ or “LLM” like OpenAI’s ChatGPT.  UpSight is different, and really this is the ‘inventive step’ that makes it all work – the ‘Small Language Model’ or as we’ve started to call it a “SLM”… and we occasionally use that in a sentence like ‘we have a slim model’. So what makes our model so slim?  The MITRE ATT&CK(™) framework is the quick answer. We know that modern ransomware attacks consist of different stages/tactics, usually starting with initial ...
Read more