Apps targeted at US troops contain Chinese and Russian code
The new study takes a first look at one piece of that exposure: what actually sits inside the apps built and marketed specifically for the…
Category: ArsTechnica
Pay up or not? Ransomware surge has victims facing tough choices.
Nearly half of companies that are targets of a ransomware cyber attack end up paying a ransom to release their data or systems, according to…
Now, even Russia’s most elite hackers are using Clickfix to infect devices
One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices belonging to sensitive organizations in Ukraine,…
Windows 0-day drops the same day Microsoft releases record number of patches
“If I can set up the system so that it runs my code when the admin user logs in,” the attacker has de facto administrator…
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
Further complicating the process, even the expiration of the Microsoft certificate that signed the shims, which took place late last month, isn’t enough to revoke…
The US government warns that Russia state hackers are coming after your router
The federal government is warning users of home and small office routers to secure their devices as Russia state hackers continue to mass-compromise them for…
Now, defenders are embracing the prompt injection, too
Prompt injections, the malicious commands attackers embed into content to entice LLMs to follow them, have been attackers’ go-to tool for turning AI platforms against…
Patch for Windows Defender 0-day could allow attackers to fill hard disk
A patch Microsoft released on Wednesday to fix a zero-day vulnerability in its Defender security engine may cause Windows machines to write files large enough…
Google pays $250K for Linux vulnerability allowing guest VM escapes
A Linux vulnerability that allows untrusted virtual machines to gain root access to host machines is one of two high-severity flaws to surface this week…
Hackers can use 9 of the most popular AI tools to assemble massive botnets
In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are inherently unable to distinguish between…
Newly discovered PamStealer isn’t your typical macOS malware
Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs with stealthy, custom-developed credential-stealing code. The…
NASA inspector general suggests Boeing’s Starliner will now be a decade late
NASA Administrator Jared Isaacman formally classified the 2024 crewed flight of the Starliner spacecraft as a “Type A” mishap in February, acknowledging that the test…