Apple and Google have received cease-and-desist letters mandating the removal of specific applications that enable users to create “nudified” or nonconsensual nude images. These legal notices, issued by San Francisco City Attorney David Chiu, call on both tech giants to halt their financial gains from potentially harmful technologies. On Thursday,…
Russian Hacking Group Targets Ukrainian Organizations with Clickfix Technique A prominent hacking group linked to the Russian government has recently deployed a sophisticated cyberattack technique known as Clickfix, which has raised alarms among cybersecurity experts in Ukraine. The country’s Computer Emergency Response Team (CERT) has issued warnings about this method,…
Exploiting Windows User Class Registry Hives: A New Vulnerability Emerging Recent findings highlight a significant security vulnerability within the Windows operating system, capable of enabling attackers to gain de facto administrative privileges without requiring admin credentials. Will Dormann, a senior principal vulnerability analyst at Tharros Labs, explained in an interview…
Meta’s NameTag Project Sparks Debate Over Feature Existence Recently, the ongoing discussion surrounding Meta’s NameTag—a facial recognition feature intended for its Ray-Ban smart glasses—has raised pivotal questions about the definition of software features and their actual usage. This controversy emerged after it was revealed that, despite existing code for NameTag…
Microsoft Certificate Expiration Fails to Mitigate Vulnerable Shims ESET has raised alarms concerning a critical oversight in Microsoft’s Secure Boot implementation following the expiration of a key certificate that previously signed various vulnerable shims. Although this certificate expired last month, it does not eliminate the risks posed by these shims,…
Prompt Injection Technique for AI Attacks Faces New Countermeasure Recent developments in the cybersecurity landscape highlight the growing challenge posed by prompt injections—malicious commands that can manipulate large language models (LLMs) into undesirable actions. Attackers frequently exploit this vulnerability to extract sensitive information or execute harmful commands by embedding these…
The federal government has issued a warning to users of home and small office routers, urging them to enhance their security measures. This advisory comes as Russian state-sponsored hackers continue to exploit these devices, using them to obscure malicious activities targeting both public and private sector organizations. For years, both…
Camera Leakage Exposes Vulnerabilities in Law Enforcement Drone Surveillance In a significant incident last month, a Skydio X10 quadcopter provided an unexpected window into police surveillance practices in San Francisco. Just after noon on a Saturday, the drone monitored a police operation targeting a man hiding behind a parked vehicle.…
Recent developments highlight significant cybersecurity concerns as China’s Volt Typhoon hackers are suspected of embedding themselves in critical infrastructure across the United States. This situation was underscored during a confidential war game simulation conducted for insurers, which explored various catastrophic scenarios, revealing profound vulnerabilities that could disrupt essential services. In…