Inaudible sounds used to fingerprint browsers catch AliExpress red-handed
Variability in different math libraries, which are used when audio is produced through browsers, were once high enough to provide a massively large number of…
Category: ArsTechnica
Grok exfiltrates user data when malicious instructions are encrypted
Adversa used a similar technique in a Gemini jailbreak attack, meaning making the Google LLM ignore its internal safety rules. Here, the ciphertext was decrypted…
Microsoft Copilot reveals secret input that allowed it to be hacked
Like most AI assistants, Copilot can receive prompts that are embedded into a URL. The base part of the URL can allow the LLM to…
Vulnerability giving attackers full control of Macs is under active exploitation
Dutch officials have warned that a high-severity macOS vulnerability that allows attackers to execute malicious code is under active exploitation. “The NCSC has received a…
Private security firms will soon be allowed to hack overseas cybercriminals
The Trump administration is recruiting private security firms to conduct federal government-authorized operations, including cyberattacks, against overseas-based criminal organizations that commit hacks on US persons,…
Terabytes of credentials leaked in massive supply-chain attack
The firm advised all those affected to perform “aggressive credential revocation,” assume any secret accessible to the LiteLLM environment is compromised, invalidate and rotate all…
Researchers found a way to hijack devices through Zoom screen sharing
As AI models gain advanced capabilities to find vulnerabilities in software, develop ways to exploit them, and even carry out autonomous hacking sprees, researchers offered…
Chrome adopts what may be the best protection yet against account takeovers
DBSCs are an antidote to session cookie theft. Once a website sets a session cookie, the visiting browser must send a form of the cookie…
DEF CON crowd suspected in fake-hotspot attack on Delta flight
Morgan Durrant, a Delta spokesperson, confirmed the details to Ars. “One initial finding is an unauthorized WiFi network, which was not provided, operated, or supplied…
New Pass-ta-key attack reveals all the things we didn’t know about passkeys
Last week, a researcher outlined what he said was a “novel attack surface” in passkeys, the new authentication paradigm that offers a more secure alternative…
New surveillance tech links your phone to your license plate
Imagine that you share a ride to work with the same colleague most mornings. As it passes by a license plate reader, the camera records…
A researcher bought noreply.net. Companies started sending him secrets.
“I did not realize that this was going to be as big of a problem as it is,” says Solovewicz, who is not publicly naming…