The Hacker News (1 hour ago)
The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a major insurer’s production website, on its own.
Read the full story on The Hacker News.
The headline feature of the new HomePod mini 2 is support for Siri AI, something that won’t be available for the first-gen model. But there’s hope that existing full size HomePods may also get access to the smarter intelligent assistant.
The “sophisticated recording device” was discovered by OpenAI on or around September 30 in one of its San Francisco offices. The company determined that it had been planted a few days earlier. Its security team tried to export the microSD card’s data but couldn’t examine it because it was encrypted.
An OpenAI engineer has been charged with using or endeavoring to use an electronic, mechanical, or other device to intercept oral communications and is facing up to five years in prison plus a $250,000 fine.
AI and toilet paper: the joke writes itself, doesn’t it?
A federal judge in San Jose hears two opposed motions on the same day, Apple’s request to stop OpenAI using anything taken from it and OpenAI’s request to throw the case out. Apple won part of its expedited discovery on Tuesday, and was refused part of it.
Banking regulators in the US and Europe are stepping up efforts to contain the risks AI poses to banks, Reuters reported, citing six people familiar with the matter. Some fear that cyberattacks or rogue AI agents could shake the financial system.
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said.
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new escalation in financial fraud.
A flaw in Linux’s vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host’s memory and hijack the program that runs the virtual machine.
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over.
72 active sources
27 Turkish · 45 English
All sources
