Researchers used Claude to hack OpenAI
They exploited a flaw in the set-up of OpenAI’s community forum, which is hosted by a third-party, Discourse, and used it to gain access to…
Category: ArsTechnica
LLMs respond differently to harmful prompts when AI watermarking is used
Standard versus watermarked text generation. Credit: Lasso Security Standard versus watermarked text generation. Credit: Lasso Security A key feature of SynthID is something known as…
Hackers reveal how Flock cameras really track cars and people
“Why just destroy them when we can reverse engineer them and find the secrets of those spying on us?” one of the hackers, from a…
Nonprofit that tracks meteors taken down by “critical blow” from a cyberattack
The International Meteor Organization, the nonprofit that coordinates and publishes amateur and professional observations of meteor phenomena, said its infrastructure has suffered a “critical blow”…
ClickFix attacks infecting PCs and Macs are going viral
For the people behind the attacks, ClickFix now makes their job much easier. Prior to ClickFix, they would have needed to install the malware (tracked…
4 groups caught using the same Chrome and Windows exploit kit
A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of Windows is being actively used by at least…
Why this month’s Microsoft patch release is a doozy
Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high critical-severity threshold.…
OpenAI agents discussed ways to escape their sandbox on public wiki
Self-identifying OpenAI agents posted 18,000 messages to a public wiki that discussed ways for other agents to bypass security sandbox restrictions during what was likely…
Once popular for attacking AI, ASCII smuggling is embraced by spammers
A clever technique used to hide malicious prompts in attacks on AI agents has been adopted by spammers to evade filters on email platforms that…
Confused about which VPN is right, US senator asks the NSA for guidance
A prominent US senator is asking the National Security Agency to provide guidance to the general public on best practices for using virtual private networks…
I rented a car, and within hours, my driver’s license was for sale
The timing of newly available scans—typically within a day, if not hours, of me and a small sample of other victims presenting them at rental…
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
Like Hetzner Online, both Softaculous and Zet.net, the transit peer downstream from Hetzner Online, failed to properly monitor their systems and, as a result, didn’t…