Search: [vulnerabilities]

Digital Detritus: The engine of Pacific Rim and a call to the industry for action – Sophos News

510 · software · vulnerabilities

October 31, 2024 at 2:16:55 PM UTC · permalink

·

https://news.sophos.com/en-us/2024/10/31/digital-detritus-the-engine-of-pacific-rim-and-a-call-to-the-industry-for-action/

Data Exfiltration from Slack AI via indirect prompt injection

510 · ai · vulnerabilities

August 20, 2024 at 8:21:10 PM UTC · permalink

·

https://promptarmor.substack.com/p/data-exfiltration-from-slack-ai-via

Dev rejects CVE severity, makes his GitHub repo read-only

Bogus vuln reports again.

510 · opensource · vulnerabilities

July 1, 2024 at 3:36:38 PM UTC · permalink

·

https://www.bleepingcomputer.com/news/security/dev-rejects-cve-severity-makes-his-github-repo-read-only/

Zero Progress on Zero Days: How the Last Ten Years Created the Modern Spyware Market by Mailyn Fidler :: SSRN

510 · vulnerabilities · spyware

May 24, 2024 at 3:12:52 PM UTC · permalink

·

https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4626426

Unforgivable Vulnerabilities

510 · software · vulnerabilities

May 17, 2024 at 6:44:11 PM UTC · permalink

·

https://cwe.mitre.org/documents/unforgivable_vulns/unforgivable.pdf

Hackable Intel and Lenovo hardware that went undetected for 5 years won’t ever be fixed | Ars Technica

510 · vulnerabilities · hardware

April 12, 2024 at 3:51:33 PM UTC · permalink

·

https://arstechnica.com/security/2024/04/supply-chain-snafu-causes-intel-and-others-to-ship-hackable-hardware-for-5-years/

An anonymous coder nearly hacked a big chunk of the internet. How worried should we be?

Explains the social vulnerability of open source -- its cruel and agonistic culture -- and how that nearly turned into disaster with the xz hole.

510 · opensource · socialengineering · vulnerabilities

April 4, 2024 at 5:14:36 PM UTC · permalink

·

https://theconversation.com/an-anonymous-coder-nearly-hacked-a-big-chunk-of-the-internet-how-worried-should-we-be-227143

6 Prompts You Don't Want Employees Putting in Microsoft Copilot

510 · ai · vulnerabilities

April 4, 2024 at 3:03:46 PM UTC · permalink

·

https://www.bleepingcomputer.com/news/security/6-prompts-you-dont-want-employees-putting-in-microsoft-copilot/

Free VPN apps turn Android phones into criminal proxies | Malwarebytes

510 · vpns · vulnerabilities

April 2, 2024 at 3:09:58 PM UTC · permalink

·

https://www.malwarebytes.com/blog/news/2024/04/free-vpn-apps-turn-android-phones-into-criminal-proxies

Techies vs spies: the xz backdoor debate - lcamtuf’s thing

510 · opensource · labor · vulnerabilities · supplychain

April 1, 2024 at 6:28:26 PM UTC · permalink

·

https://lcamtuf.substack.com/p/technologist-vs-spy-the-xz-backdoor

Supply Chain Intrigue, or The Spy Who Shagged My Repo

510 · opensource · vulnerabilities · supplychain · versioning · git

April 1, 2024 at 6:27:05 PM UTC · permalink

·

https://thesoloadmin.com/supply-chain-intrigue/

AI bots hallucinate software packages and devs download them • The Register

ai · programming · 510 · vulnerabilities

April 1, 2024 at 5:01:53 PM UTC · permalink

·

https://www.theregister.com/2024/03/28/ai_bots_hallucinate_software_packages/

4-year campaign backdoored iPhones using possibly the most advanced exploit ever | Ars Technica

510 · mobile · vulnerabilities · apple

March 12, 2024 at 4:24:50 PM UTC · permalink

·

https://arstechnica.com/security/2023/12/exploit-used-in-mass-iphone-infection-campaign-targeted-secret-hardware-feature/2/

iOS bug lets anyone crash your iPhone with a text message | iPhone | The Guardian

510 · vulnerabilities · mobile · apple

March 12, 2024 at 4:24:28 PM UTC · permalink

·

https://www.theguardian.com/technology/2015/may/27/iphone-crash-bug-text-imessage-ios

Hackers can infect network-connected wrenches to install ransomware | Ars Technica

Freakin' WRENCHES, y'all.

510 · internetofthings · vulnerabilities

January 9, 2024 at 3:05:32 PM UTC · permalink

·

https://arstechnica.com/security/2024/01/network-connected-wrenches-used-in-factories-can-be-hacked-for-sabotage-or-ransomware/

Gen AI could make KYC effectively useless | TechCrunch

510 · deepfakes · vulnerabilities · ai

January 8, 2024 at 7:44:33 PM UTC · permalink

·

https://techcrunch.com/2024/01/08/gen-ai-could-make-kyc-effectively-useless/

Prompt injection explained, November 2023 edition

510 · ai · vulnerabilities

November 30, 2023 at 3:24:35 PM UTC · permalink

·

https://simonwillison.net/2023/Nov/27/prompt-injection-explained/

Google Researchers’ Attack Prompts ChatGPT to Reveal Its Training Data

351 · 644 · 510 · ai · algorithms · ethics · vulnerabilities

November 29, 2023 at 5:19:54 PM UTC · permalink

·

https://www.404media.co/google-researchers-attack-convinces-chatgpt-to-reveal-its-training-data/

Microsoft’s Windows Hello fingerprint authentication has been bypassed - The Verge

510 · biometrics · authentication · vulnerabilities

November 23, 2023 at 4:52:09 AM UTC · permalink

·

https://www.theverge.com/2023/11/22/23972220/microsoft-windows-hello-fingerprint-authentication-bypass-security-vulnerability

The OWASP Top 10: What They Are and How to Test Them

510 · web · vulnerabilities

November 16, 2023 at 1:39:45 PM UTC · permalink

·

https://www.bleepingcomputer.com/news/security/the-owasp-top-10-what-they-are-and-how-to-test-them/