01 Sep

LegalPwn: Tricking LLMs by burying badness in lawyerly fine print

Researchers at security firm Pangea have discovered yet another way to trivially trick large language models (LLMs) into ignoring their guardrails. Stick your adversarial instructions

Author rabih
01 Sep

Traffic to government domains often crosses national borders, or flows through risky bottlenecks

Internet traffic to government domains often flows across borders, relies on a worryingly small number of network connections, or does not require encryption, according to

Author rabih
01 Sep

WhatsApp warns of ‘attack against specific targeted users’

Infosec In brief A flaw in Meta’s WhatsApp app “may have been exploited in a sophisticated attack against specific targeted users.” Meta made that alarming

Author rabih
29 Aug

Researcher who found McDonald’s free-food hack turns her attention to Chinese restaurant robots

A researcher caught the world’s leading supplier of commercial service robots using shoddy admin security that let attackers redirect the delivery machines to anywhere and

Author rabih
29 Aug

AWS catches Russia’s Cozy Bear clawing at Microsoft credentials

Amazon today said it disrupted an intel-gathering attempt by Russia’s APT29 to trick Microsoft users into unwittingly granting the Kremlin-backed cyberspies access to their accounts

Author rabih
29 Aug

Enterprise password management outfit Passwordstate patches Emergency Access bug

Australian development house Click Studios has warned users of its Passwordstate enterprise password management platform to update immediately if not sooner, following the discovery of

Author rabih
29 Aug

UK government dragged for incomplete security reforms after Afghan leak fallout

Senior officials are being summoned to the UK’s Science, Innovation and Technology Committee to explain why the government has not fully implemented the security recommendations

Author rabih
28 Aug

FBI cyber cop: Salt Typhoon pwned ‘nearly every American’

China’s Salt Typhoon cyberspies hoovered up information belonging to millions of people in the United States over the course of the years-long intrusion into telecommunications

Author rabih
28 Aug

DHS says it needs $100M worth of counter-drone tech to protect America

The US Department of Homeland Security has revealed plans to spend more than $100 million on systems designed to take out hostile drones.   While not

Author rabih
28 Aug

Not in my browser! Vivaldi capo doubles down on generative AI ban

Jon von Tetzchner, CEO of Norway-based browser maker Vivaldi, believes the tech industry’s efforts to automate web browsing using generative AI models have gone too

Author rabih
28 Aug

FBI, Dutch cops seize fake ID marketplace that sold identity docs for $9

The FBI and Dutch police today said that they seized two domains and a blog tied to VerifTools, an international criminal marketplace that sold identity

Author rabih
28 Aug

How does China keep stealing our stuff, wonders DoD group responsible for keeping foreign agents out

The Pentagon outfit responsible for preventing foriegn agents from infiltrating defense agencies says the US isn’t doing a very good job of preventing state secrets

Author rabih
28 Aug

16 billion credentials exposed: why your business needs a password manager now

Partner Content Ever felt that gut punch after losing something important, like your house keys? Now picture those, along with 184 million others, resting in

Author rabih
28 Aug

SK Telecom walloped with $97M fine after schoolkid security blunders let attackers run riot

South Korea’s privacy watchdog has slapped SK Telecom with a record ₩134.5 billion ($97 million) fine after finding that the mobile giant left its network

Author rabih
28 Aug

Putin on the code: DoD reportedly relies on utility written by Russia-based Yandex dev

updated A Node.js utility used by thousands of public projects – and more than 30 Department of Defense ones – appears to have a sole

Author rabih
28 Aug

TransUnion admits 4.5M affected after third-party support app breached

Credit scoring and monitoring biz TransUnion says that it recently suffered a breach affecting nearly 4.5 million individuals. Readers may notice the irony of a

Author rabih
28 Aug

Thousands of Citrix NetScaler boxes still sitting ducks despite patches

Thousands of Citrix NetScaler appliances remain exposed to a trio of security flaws that the vendor patched this week, one of which is already being

Author rabih
28 Aug

Ransomware crooks knock Swedish municipalities offline for measly sum of $168K

Sweden’s municipal governments have been knocked offline after ransomware crooks hit IT supplier Miljödata, reportedly demanding the bargain-basement sum of $168,000. Miljödata runs HR, sick

Author rabih
Load moreLoadingAll items loaded