SecurityWeek (1 hour ago)
Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.
Read the full story on SecurityWeek.
Eiliko, a cute robot charm you can hang on your bag with built-in AI conversations, turned out to be a security nightmare. It told owners that “your secrets are safe with me,” but hackers could easily read complete transcripts of everything we told the toy, and that was just the beginning.
Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.
It has been a dramatic, public and global response, but the cyber event hasn’t happened yet.
‘500 new vulnerabilities’ found in government, says AI minister
ESET linked hackers to Russia, using a decentralised network to hide their malware during an attack on a Ukrainian grain company. The security company says it is the first documented case of a state-linked hacking group using the Yggdrasil network in this way.
Misaligned incentives led to an intractable argument
Initial attempts were observed on October 17, and mass activity began shortly after patches were released.
Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches.
The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019.
Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis.
72 active sources
27 Turkish · 45 English
All sources
