Monday, September 25, 2023

3 iOS 0-days, a cellular network compromise, and HTTP used to infect an iPhone

Enlarge (credit: Getty Images) Apple has patched a potent chain of iOS zero-days that were used to infect the iPhone of an Egyptian presidential candidate with sophisticated spyware developed by...

Incomplete disclosures by Apple and Google create “huge blindspot” for 0-day hunters

Enlarge (credit: Getty Images) Incomplete information included in recent disclosures by Apple and Google reporting critical zero-day vulnerabilities under active exploitation in their products has created a “huge blindspot” that’s...

AI-generated books force Amazon to cap ebook publications to 3 per day

Enlarge (credit: Getty Images) On Monday, Amazon introduced a new policy that limits Kindle authors from self-publishing more than three books per day on its platform, reports The Guardian. The...

OpenAI announces DALL-E 3, a next-gen AI image generator based on ChatGPT

Enlarge On Wednesday, OpenAI announced DALL-E 3, the latest version of its AI image synthesis model that features full integration with ChatGPT. DALL-E 3 renders images by closely following...

The Signal Protocol used by 1+ billion people is getting a post-quantum makeover

Enlarge (credit: Getty Images) The Signal Foundation, maker of the Signal Protocol that encrypts messages sent by more than a billion people, has rolled out an update designed to prepare...

Telling AI model to “take a deep breath” causes math scores to soar in study

Enlarge (credit: Getty Images) Google DeepMind researchers recently developed a technique to improve math ability in AI language models like ChatGPT by using other AI models to improve prompting—the written...

Google’s AI assistant can now read your emails, plan trips, “double-check” answers

Enlarge (credit: Getty Images) On Tuesday, Google announced updates to its Google Bard AI assistant—its version of ChatGPT—including integration with Google apps (such as Gmail, Docs, Drive, Google Maps, YouTube,...

Chinese hackers have unleashed a never-before-seen Linux backdoor

Enlarge Researchers have discovered a never-before-seen backdoor for Linux that’s being used by a threat actor linked to the Chinese government. The new backdoor originates from a Windows backdoor named...

Panos Panay, leader of the Surface and Windows teams, is leaving Microsoft

Enlarge / Microsoft's Surface Pro 9. Panos Panay has been in charge of the Surface line since its inception. (credit: Andrew Cunningham) Microsoft's Panos Panay, who has been in charge...

Dreamy AI-generated geometric scenes mesmerize social media users

Enlarge / The original AI-generated spiral village that captivated social media, created using Stable Diffusion and ControlNet. (credit: Ugleh / Stable Diffusion) On Sunday, a Reddit user named "Ugleh" posted...

How Google Authenticator made one company’s network breach much, much worse

Enlarge (credit: Getty Images) A security company is calling out a feature in Google’s authenticator app that it says made a recent internal network breach much worse. Retool, which helps customers...

Private AI summit with Senate, titans of tech garners controversy

Enlarge / Google CEO Sundar Pichai and Meta CEO Mark Zuckerberg arrive to the Senate bipartisan Artificial Intelligence (AI) Insight Forum on Capitol Hill in Washington, DC, on September 13, 2023....

A phone call to helpdesk was likely all it took to hack MGM

Enlarge / Gamblers and hotel guests at MGM casinos on the Las Vegas Strip, including the Bellagio, were affected by the security breach. (credit: Ethan Miller/Getty Images) A cyber criminal...

With 0-days hitting Chrome, iOS, and dozens more this month, is no software safe?

Enlarge (credit: Getty Images) End users, admins, and researchers better brace yourselves: The number of apps being patched for zero-day vulnerabilities has skyrocketed this month and is likely to get...

AI can now generate CD-quality music from text, and it’s only getting better

Enlarge (credit: Getty Images) Imagine typing "dramatic intro music" and hearing a soaring symphony or writing "creepy footsteps" and getting high-quality sound effects. That's the promise of Stable Audio, a...
Infosecurity Magazine

BEC Scammer Pleads Guilty to Part in $6m Scheme

Nigerian was extradited to the US from Canada
Infosecurity Magazine

Researchers Spot Novel “Deadglyph” Backdoor

Malware is linked to UAE-backed spies
Infosecurity Magazine

Almost US 900 Schools Breached Via MOVEit

National Student Clearinghouse reveals more details of incident

Don’t Get Burned by CAPTCHAs: A Recipe for Accurate Bot Protection

Traditional CAPTCHAs, such as reCAPTCHA, no longer protect online businesses adequately. Real users hate them. Bots bypass them. It's time to upgrade.
The Hacker News

New Report Uncovers Three Distinct Clusters of China-Nexus Attacks on Southeast Asian Government

An unnamed Southeast Asian government has been targeted by multiple China-nexus threat actors as part of espionage campaigns targeting the region over extended periods of time. "While this activity occurred around the same time and in some instances even simultaneously...