Think twice before installing this device promising free movies
“The open ADB port plays the central role,” Plume researcher Gergely Eberhardt wrote in an email. “Combined with root access, a single pm install command…
Category: ArsTechnica
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
Authorities in Australia said Wednesday that they arrested two men accused of participating in cybercrimes for TeamPCP, a prolific group of hackers that, over nine…
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face
“Agents used this message board to coordinate several large-scale collective projects to find a general-purpose way to fool or tamper with the automated scorer for…
Claude, Codex, and Hermes installed unowned code inside corporate networks
Documentation files on more than 100 websites are referencing potentially dangerous executable content that gets installed automatically when visited by many AI agents. A few…
Inaudible sounds used to fingerprint browsers catch AliExpress red-handed
Variability in different math libraries, which are used when audio is produced through browsers, were once high enough to provide a massively large number of…
Grok exfiltrates user data when malicious instructions are encrypted
Adversa used a similar technique in a Gemini jailbreak attack, meaning making the Google LLM ignore its internal safety rules. Here, the ciphertext was decrypted…
Microsoft Copilot reveals secret input that allowed it to be hacked
Like most AI assistants, Copilot can receive prompts that are embedded into a URL. The base part of the URL can allow the LLM to…
Vulnerability giving attackers full control of Macs is under active exploitation
Dutch officials have warned that a high-severity macOS vulnerability that allows attackers to execute malicious code is under active exploitation. “The NCSC has received a…
Private security firms will soon be allowed to hack overseas cybercriminals
The Trump administration is recruiting private security firms to conduct federal government-authorized operations, including cyberattacks, against overseas-based criminal organizations that commit hacks on US persons,…
Terabytes of credentials leaked in massive supply-chain attack
The firm advised all those affected to perform “aggressive credential revocation,” assume any secret accessible to the LiteLLM environment is compromised, invalidate and rotate all…
Researchers found a way to hijack devices through Zoom screen sharing
As AI models gain advanced capabilities to find vulnerabilities in software, develop ways to exploit them, and even carry out autonomous hacking sprees, researchers offered…
Chrome adopts what may be the best protection yet against account takeovers
DBSCs are an antidote to session cookie theft. Once a website sets a session cookie, the visiting browser must send a form of the cookie…