ClickFix attacks infecting PCs and Macs are going viral
For the people behind the attacks, ClickFix now makes their job much easier. Prior to ClickFix, they would have needed to install the malware (tracked…
Category: ArsTechnica
4 groups caught using the same Chrome and Windows exploit kit
A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of Windows is being actively used by at least…
Why this month’s Microsoft patch release is a doozy
Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high critical-severity threshold.…
OpenAI agents discussed ways to escape their sandbox on public wiki
Self-identifying OpenAI agents posted 18,000 messages to a public wiki that discussed ways for other agents to bypass security sandbox restrictions during what was likely…
Once popular for attacking AI, ASCII smuggling is embraced by spammers
A clever technique used to hide malicious prompts in attacks on AI agents has been adopted by spammers to evade filters on email platforms that…
Confused about which VPN is right, US senator asks the NSA for guidance
A prominent US senator is asking the National Security Agency to provide guidance to the general public on best practices for using virtual private networks…
I rented a car, and within hours, my driver’s license was for sale
The timing of newly available scans—typically within a day, if not hours, of me and a small sample of other victims presenting them at rental…
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
Like Hetzner Online, both Softaculous and Zet.net, the transit peer downstream from Hetzner Online, failed to properly monitor their systems and, as a result, didn’t…
Think twice before installing this device promising free movies
“The open ADB port plays the central role,” Plume researcher Gergely Eberhardt wrote in an email. “Combined with root access, a single pm install command…
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
Authorities in Australia said Wednesday that they arrested two men accused of participating in cybercrimes for TeamPCP, a prolific group of hackers that, over nine…
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face
“Agents used this message board to coordinate several large-scale collective projects to find a general-purpose way to fool or tamper with the automated scorer for…
Claude, Codex, and Hermes installed unowned code inside corporate networks
Documentation files on more than 100 websites are referencing potentially dangerous executable content that gets installed automatically when visited by many AI agents. A few…