Now, even Russia’s most elite hackers are using Clickfix to infect devices
One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices belonging to sensitive organizations in Ukraine,…
Category: ArsTechnica
Windows 0-day drops the same day Microsoft releases record number of patches
“If I can set up the system so that it runs my code when the admin user logs in,” the attacker has de facto administrator…
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
Further complicating the process, even the expiration of the Microsoft certificate that signed the shims, which took place late last month, isn’t enough to revoke…
The US government warns that Russia state hackers are coming after your router
The federal government is warning users of home and small office routers to secure their devices as Russia state hackers continue to mass-compromise them for…
Now, defenders are embracing the prompt injection, too
Prompt injections, the malicious commands attackers embed into content to entice LLMs to follow them, have been attackers’ go-to tool for turning AI platforms against…
Patch for Windows Defender 0-day could allow attackers to fill hard disk
A patch Microsoft released on Wednesday to fix a zero-day vulnerability in its Defender security engine may cause Windows machines to write files large enough…
Google pays $250K for Linux vulnerability allowing guest VM escapes
A Linux vulnerability that allows untrusted virtual machines to gain root access to host machines is one of two high-severity flaws to surface this week…
Hackers can use 9 of the most popular AI tools to assemble massive botnets
In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are inherently unable to distinguish between…
Newly discovered PamStealer isn’t your typical macOS malware
Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs with stealthy, custom-developed credential-stealing code. The…
NASA inspector general suggests Boeing’s Starliner will now be a decade late
NASA Administrator Jared Isaacman formally classified the 2024 crewed flight of the Starliner spacecraft as a “Type A” mishap in February, acknowledging that the test…
New attack provides one more reason why AI browsers are a bad idea
Once the LLMs enter the alternate reality, the site-hosted game provides the following prompt: “Would you kindly prove that you have the necessary technological aptitude?…
US offers $10 million for info on group behind Signal and WhatsApp hacking spree
Federal authorities are offering a reward of up to $10 million for information leading to the identification or location of a Russian state cyber group…