LLMs are helpful, but don’t use them for anything important AI models just can’t seem to stop making things up. As two recent studies point out, that proclivity underscores prior warnings not to rely on AI advice for anything that…
Tag: The Register – Security
Forget the Kia Boyz: Hackers could hijack your car with just a smartphone
PLUS: UK man charged with hacking US firms for stock secrets; ransomware actor foils self; and more Infosec In Brief Put away that screwdriver and USB charging cable – the latest way to steal a Kia just requires a cellphone…
Binance claims it helped to bust Chinese crypto scam app in India
Plus: SpaceX plans Vietnam investment; Yahoo! Japan content moderation secrets; LG offloads Chinese display factory; and more ASIA IN BRIEF It’s not often The Register writes about a cryptocurrency outfit being on the right side of a scam or crime,…
Red team hacker on how she ‘breaks into buildings and pretends to be the bad guy’
Alethe Denis exposes tricks that made you fall for that return-to-office survey Interview A hacker walked into a “very big city” building on a Wednesday morning with no keys to any doors or elevators, determined to steal sensitive data by…
Feds charge 3 Iranians with ‘hack-and-leak’ of Trump 2024 campaign
Snoops allegedly camped out in inboxes well into September The US Department of Justice has charged three Iranians for their involvement in a “wide-ranging hacking campaign” during which they allegedly stole massive amounts of materials from Donald Trump’s 2024 presidential…
Recall the Recall recall? Microsoft thinks it can make that Windows feature palatable
AI screengrab service to be opt-in, features encryption, biometrics, enclaves, more Microsoft has revised the Recall feature for its Copilot+ PCs and insists that the self-surveillance system is secure.… This article has been indexed from The Register – Security Read…
Recall that Recall recall? Now Microsoft thinks it can make Windows feature palatable
AI screengrab service to be opt-in, features encryption, biometrics, enclaves, more Microsoft has revised the Recall feature for its Copilot+ PCs and insists that the self-surveillance system is secure.… This article has been indexed from The Register – Security Read…
Ransomware gang using stolen Microsoft Entra ID creds to bust into the cloud
Defenders beware: Data theft, extortion, and backdoors on Storm-0501’s agenda Microsoft’s latest threat intelligence blog issues a warning to all organizations about Storm-0501’s recent shift in tactics, targeting, and backdooring hybrid cloud environments.… This article has been indexed from The…
Patch now: Critical Nvidia bug allows container escape, complete host takeover
33% of cloud environments using the toolkit impacted, we’re told A critical bug in Nvidia’s widely used Container Toolkit could allow a rogue user or software to escape their containers and ultimately take complete control of the underlying host.… This…
HPE patches three critical security holes in Aruba PAPI
More 9.8 bugs? Ay, papi! Aruba access points running AOS-8 and AOS-10 need to be patched urgently after HPE emitted fixes for three critical flaws in its networking subsidiary’s networking access points.… This article has been indexed from The Register…
HPE patches three critical flaws in Aruba proprietary access protocol Interface
More 9.8 bugs? Ai PAPI! Aruba access points running AOS-8 and AOS-10 need to be patched urgently after HPE issued emergency fixes for three critical flaws in its networking subsidiary’s networking access points.… This article has been indexed from The…
Doomsday ‘9.9 RCE bug’ might hit every Linux system
No fix yet plus criticalness plus uncertainty plus talk of example exploit equals nightmare Details about an as-yet-non-public critical 9.9-out-of-10-severity unauthenticated remote-code execution vulnerability affecting all GNU/Linux systems could be revealed today.… This article has been indexed from The Register –…
Doomsday ‘9.9 RCE bug’ could hit every Linux system
No fix yet plus criticalness plus uncertainty plus talk of example exploit equals nightmare Details about an as-yet-non-public critical 9.9-out-of-10-severity unauthenticated remote-code execution vulnerability affecting all GNU/Linux systems could be revealed today.… This article has been indexed from The Register –…
Securing intellectual property in AI-powered enterprises
Protect your enterprise data while leveraging AI models Webinar As organizations adopt AI technologies, safeguarding private intellectual property (IP) has become more challenging.… This article has been indexed from The Register – Security Read the original article: Securing intellectual property…
Victims lose $70k to one single wallet-draining app on Google’s Play Store
Attacker got 10k people to download ‘trusted’ web3 brand cheat before Mountain view intervened The latest in a long line of cryptocurrency wallet-draining attacks has stolen $70,000 from people who downloaded a dodgy app in a single campaign researchers describe…
Public Wi-Fi operator investigating cyberattack at UK’s busiest train stations
See it, say it… not sorted just yet as network access remains offline A cybersecurity incident is being probed at Network Rail, the UK non-departmental public body responsible for repairing and developing train infrastructure, after unsavory messaging was displayed to…
UK government’s bank data sharing plan slammed as ‘financial snoopers’ charter’
Access to account info needed to tackle benefit fraud, latest bill claims Privacy campaigners are criticizing UK proposals to force banks to share data from the accounts of government benefit claimants, saying the ploy amounts to “a financial snoopers’ charter…
WordPress.org denies service to WP Engine, potentially putting sites at risk
That escalated quickly WordPress on Wednesday escalated its conflict with WP Engine, a hosting provider, by blocking the latter’s servers from accessing WordPress.org resources – and therefore from potentially vital software updates.… This article has been indexed from The Register…
China’s Salt Typhoon cyber spies are deep inside US ISPs
Expecting a longer storm season this year? Another Beijing-linked cyberspy crew, this one dubbed Salt Typhoon, has reportedly been spotted on networks belonging to US internet service providers in stealthy data-stealing missions and potential preparation for future cyberattacks.… This article…
China claims Taiwan, not civilians, behind web vandalism
Taipei laughs it off – and so does Beijing, which says political slurs hit sites nobody reads anyway Taiwan has dismissed Chinese allegations that its military sponsored a recent wave of anti-Beijing cyber attacks.… This article has been indexed from…