ChatGPT leaks bits of users’ chat history
ChatGPT suddenly started showing users the titles of other users’ chats. New gadgets and software come with new bugs, especially if they’re rushed. We can…
Month: March 2023
$50k bug bounty on Shopify explained (GitHub access token leaked via electron application)
$50k bug bounty on Shopify explained (GitHub access token leaked via electron application) Source link
Homebrew로 패키지 제공하기 🍺
제가 만든 도구는 대부분 Homebrew, Binary, RubyGem, Snapcraft 등을 통해 배포합니다. 특히 macOS의 경우 Homebrew를 통한 설치 비중이 엄청 높기 떄문에 Go 기반 앱들은 가급적이면…
Russia’s Rostec allegedly can de-anonymize Telegram users
Russia’s Rostec has reportedly bought a platform that allows it to uncover the identities of anonymous Telegram users, likely to be used to tamp down…
SSRF Hacking With Yuvraj | Hacker2Hacker | SSRF
SSRF Hacking With Yuvraj | Hacker2Hacker | SSRF Source link
Inaudible ultrasound attack can stealthily control your phone, smart speaker
American university researchers have developed a novel attack called “Near-Ultrasound Inaudible Trojan” (NUIT) that can launch silent attacks against devices powered by voice assistants, like…
Breaking VNC Clients with Evil Servers | Eugene Lim
Breaking VNC Clients with Evil Servers | Eugene Lim Source link
Microsoft pushes OOB security updates for Windows Snipping tool flaw
Microsoft released an emergency security update for the Windows 10 and Windows 11 Snipping tool to fix the Acropalypse privacy vulnerability. Now tracked as CVE-2023-28303,…
Ambassador Spotlight: hipotermia | HackerOne
What made you want to become an ambassador? I applied to the HackerOne ambassadors program as soon as I heard about it. In fact, I…
New Dark Power ransomware claims 10 victims in its first month
A new ransomware operation named ‘Dark Power’ has appeared, and it has already listed its first victims on a dark web data leak site, threatening…
Apple vs FBI? #shorts
Apple vs FBI? #shorts Source link
Hackers Inject Weaponized JavaScript (JS) on 51,000 Websites
Researchers from Unit 42 have been monitoring a widespread campaign of harmful JavaScript (JS) injections. The campaign aims to redirect unsuspecting victims to dangerous content,…