Lateo.net - Flux RSS en pagaille (pour en ajouter : @ moi)

🔒
❌ À propos de FreshRSS
☷
△ 🔃
Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
À partir d’avant-hierPresse

The PHP Meltdown Shows How AI Makes Bugs More Exploitable

Par : Lily Hay Newman， Matt Burgess
Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.

What Is PHP? Why Are Government and Business Websites Going Offline?

Par : Karla Adam and Dustin Volz
A critical security flaw in the programming language underpinning much of the web has prompted a global rush to patch vulnerable systems.

A programmer in Guernica, Spain, on Thursday, working on PHP code, software used throughout the internet.

PHP Security Flaw Sets Off Global Rush to Patch, Leaving Websites Offline

Par : Lynsey Chutel， Amelia Nierenberg and Brian O. Otieno
Governments and businesses around the world scrambled to prevent hackers from exploiting a vulnerability in PHP, a popular programming language.

Prime Minister Rob Jetten of the Netherlands in Brussels last week. He said that his cabinet was closely monitoring the online vulnerability caused by a security flaw in PHP.

Hackers Exploited the PHP Vulnerabilities Days Before They Were Patched

Par : Lily Hay Newman
Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the internet.

A.I. Discovered a Critical Vulnerability in PHP, a Coding Language Behind Many Websites

Par : Dustin Volz
The disclosure heightened concerns about A.I.’s potential to upend cybersecurity unless shortcomings are addressed.

The website for the French government was temporarily unavailable on Wednesday amid hacking concerns stemming from major bugs in a piece of software used widely across the internet.

‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire

Par : Matt Burgess， Lily Hay Newman
The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.

AI Guardrails Aren’t Stopping Criminal Hackers

Par : Lily Hay Newman
Hackers around the world are all-in on using agentic AI to wage attacks—and manipulating tools like Anthropic’s Claude to help them carry out their crimes.

A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse

Par : Dan Goodin， Ars Technica
The company is suspending the feature after security researchers discovered how easy it was to access sensitive information shared with the AI assistant.

‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads

Par : Matt Burgess， Lily Hay Newman
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising.

Ransomware Attacks Have Swept Japan. A.I. May Be Making Them Easier.

Par : Tiffany May and Kiuko Notoya
Critical infrastructure has been targeted in a wave of cyberattacks, which experts say are rising because of artificial intelligence.

Japan has been hit by a wave of cyberattacks that have affected businesses and government.

AI Is Getting Really Good at Messing With Cybercriminals

Par : Lily Hay Newman， Matt Burgess
Anti-cybercrime initiatives are increasingly using AI to scam the scammers by tricking them into talking to lifelike bots that they think are real victims.

Hacker Used Chinese-Developed A.I. Tool to Target South Korean Banks, CrowdStrike Says

Par : Laura Chung and Pei-Lin Wu
The cybersecurity firm said the attacker was likely a Chinese speaker and financially motivated, but did not attribute the attacks to a named individual or group.

CrowdStrike, a cybersecurity firm, said in a report on Wednesday that it had found evidence of the use of A.I. in the attacks.

Shaq Got Hacked. Now He’s Pitching for a VPN

Par : Lily Hay Newman
At a recent event for security firm NordVPN, NBA superstar Shaquille O’Neal revealed that he got hacked—and warned the public about the need to “have control of their own information.”

South Korea Investigates Possible Use of A.I. in Hackings on Its Banks

Par : Laura Chung and Jin Yu Young
The president said there were signs that such models were used in recent attacks on several banks involving customer data. Police are investigating.

Hana Bank was one of several financial institutions in South Korea affected by recent cyberattacks.

A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data

Par : Lily Hay Newman， Matt Burgess
While the focus has been on AI agents’ hacking capabilities, a recently patched vulnerability in a ChatGPT app shows that AI software is itself an inviting—and vulnerable—target.

OpenAI Gets Sued Over the Hugging Face Hack

Par : Lily Hay Newman
A nonprofit in California is doing what Hugging Face has not—attempting to hold OpenAI legally accountable for the actions of its agents.

OpenAI Pauses Training Its Most Powerful Models After Rogue Agents Target Government

Par : Isabella Ward
Sam Altman says the company “have not been as fast as we would have liked” at dealing with security breaches, after news of further incidents over the summer forces another temporary halt.

Old-School Credit Card Scams Are Far From Dead

Par : Lily Hay Newman， Matt Burgess
In an era of increasingly sophisticated AI-fueled scams, a retro threat may be lurking in your mailbox.

An OpenAI Agent Hacked Australia’s Health Service. Their Government Found Out Months Later

Par : Isabella Ward
The country’s prime minister expressed disappointment at being informed of the hack only via email. Now Australia is investigating whether OpenAI broke the law.

Meta’s Muse AI Assistant Rolled Out With a Serious Security Flaw

Par : Dan Goodin， Ars Technica
Meta says it issued a fix for the Muse zero-day vulnerability that would have let attackers do “whatever” they wanted on a victim’s Mac, highlighting the inherent dangers of AI helpers.

A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight

Par : Lily Hay Newman
Cisco Talos researchers created a new framework for identifying malware and hacking tools that rely on AI chatbots—and quickly discovered something unusual.

US and China Discuss Alerting Each Other to AI National Security Threats

Par : Isabella Ward
Officials discussed setting up a mechanism for the two countries to notify each other of AI incidents which could threaten national security.

Forget the AI Slowdown—the Vulnerability Explosion Is Already Happening

Par : Matt Burgess， Lily Hay Newman
AI labs are toying with an industry-wide pact to slow development. Meanwhile, widely available AI chatbots are already helping uncover a tidal wave of security flaws.

King Charles Will Convene A.I. Leaders Amid Calls to Slow Development

Par : Ephrat Livni
As alarm from the highest echelons of A.I. companies mounts, Buckingham Palace said the king would meet with executives to explore how the technology can be used for good.

King Charles III of Britain in Cambridge, England, in July.

The Cybersecurity Apocalypse Is Coming in ‘Months,’ AI Giants Warn

Par : Maddy Varner
Plus: Hackers target over 100 US water systems, ICE puts in an order for robot dogs, and you’ll never guess what “MrChildPorn” was arrested for.

'Russia-Linked Hacker Group' Takes Credit for Cyberattack on ATF System

Par : AWR Hawkins

The "Russia-linked" Qilin ransomware group is taking credit for a cybersecurity incident that involved an alleged hack into a Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) system, according to The Hill.

The post ‘Russia-Linked Hacker Group’ Takes Credit for Cyberattack on ATF System appeared first on Breitbart.

What We Still Don’t Know About OpenAI’s Hugging Face Hack

Par : Maxwell Zeff， Lily Hay Newman
The AI giant acknowledges that it could have done far more to prevent its AI agents from going rogue. But it still fails to explain why it didn't see this fiasco coming.

FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure

Par : Andy Greenberg
China’s hacking campaign targeted NASA, the Federal Reserve, the US Senate, the Justice Department, and more, according to the DOJ.

China Is Strapping ‘Digital Bombs’ to Civilian Infrastructure—Is the US Ready?

Par : Brian Barrett， Andy Greenberg
This week on “Uncanny Valley,” Andy Greenberg discusses sitting in on a war game simulating a cyberattack from the Chinese hacking group Volt Typhoon

OpenAI Overhauls Safety Protocols After Its AI Agents Went Rogue

Par : Maxwell Zeff
The ChatGPT maker says its upcoming Astra model may have reached “critical” cyber capabilities, prompting it to halt a significant number of training runs while it tightens internal safeguards.

California City Pulls Plug on It's Computer System After Cyberattack

Par : Lowell Cauffiel

A northern California city of 30,000 people had to disconnect its entire computer network after a cyberattack, idling the municipality's 911 emergency line for police and fire dispatch.

The post California City Pulls Plug on It’s Computer System After Cyberattack appeared first on Breitbart.

Hackers Stalked Me by Hijacking a Smartwatch for Kids

Par : Andy Greenberg， Matt Burgess， Yulia Almazova
Security researchers tracked and eavesdropped on a WIRED reporter using vulnerabilities in a pink plastic smartwatch. It’s just one piece of a deeply insecure supply chain of GPS-enabled gadgets.

OpenAI Didn’t Notice Its AI Agents Using a Message Board to Plan Their Hacking Spree

Par : Lily Hay Newman
At the Black Hat security conference, the AI giant revealed new details about how its agents went rogue, hacked several other companies—and did it all right under the company’s nose.

OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts

Par : Matt Burgess
Researchers at security firm Zenity found more than a dozen flaws in AI browsers—and managed to get OpenAI’s Atlas to make an unauthorized Amazon purchase.

A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide

Par : Matt Burgess， Andy Greenberg
For nearly two years, researcher Vangelis Stykas has maintained access to North Korean hackers’ servers. His work shows they pulled off intrusions in a shocking number of systems across the globe.

The Most Dangerous AI Hacking Techniques Still Have Humans in the Loop

Par : Lily Hay Newman
Security researcher James Kettle tried to push the limit of AI’s hacking abilities—and discovered how effective it can be when combined with human expertise.

OK, Well, Rogue AI Agents Are Hacking Again

Par : Paresh Dave， Brian Barrett
Rogue AI agents from OpenAI and Anthropic have again been caught trying to disrupt servers and software—and leaving instructions for future bad behavior.

Software Flaw in 'Coldcard' Bitcoin Wallets Leads to $116 Million Heist

Par : Lucas Nolan

Hackers have exploited a critical security vulnerability in Coldcard hardware wallets, draining approximately $110 million worth of Bitcoin from thousands of users in what experts are calling a major breach of cryptocurrency cold storage security.

The post Software Flaw in ‘Coldcard’ Bitcoin Wallets Leads to $116 Million Heist appeared first on Breitbart.

FBI Warns of Cyberattacks on Municipal Water Systems Across Seven States

Par : Lucas Nolan

The FBI has issued an urgent warning after hackers targeted municipal water systems in at least seven states over the past week, prompting concerns about the vulnerability of critical water infrastructure across the nation.

The post FBI Warns of Cyberattacks on Municipal Water Systems Across Seven States appeared first on Breitbart.

The OpenAI and Anthropic AI Hacking Sprees Are a Messy New Legal Frontier

Par : Lily Hay Newman
Both major AI labs’ models broke containment, escaped onto the internet, and hacked other companies. If a human had done that, the law would likely be against them. But a bot?

Anthropic Says Claude Hacked Into 3 Organizations During Cybersecurity Tests

Par : Louise Matsakis， Lily Hay Newman
In a review triggered by OpenAI’s Hugging Face incident, Anthropic discovered three of its AI models had breached real-world organizations during third-party evaluations.

A Leaked Memo Ties Cyberattacks on Minnesota Water Utilities to Iran

Par : Andy Greenberg
A memo obtained by WIRED, issued by the water utilities information sharing group WaterISAC, links dozens of cyberattacks against Minnesota water utilities to Tehran.

OpenAI’s Hacking Debacle Comes Down to Human Error

Par : Lily Hay Newman
If the generative AI giant had followed well-known security best practices, it’s likely that its AI agent would never have escaped to the open internet and hacked multiple companies.

OpenAI’s Rogue AI Agent Hacked More Than Just Hugging Face

Par : Dell Cameron， Maxwell Zeff
In a new disclosure, OpenAI says its agent used exposed logins to gain access to at least four “publicly available services” in its unhinged quest to solve a test.

OpenAI Models Escaped Containment and Hacked Hugging Face

Par : Lily Hay Newman， Dell Cameron
The cybersecurity-focused models, including GPT-5.6 Sol, broke out of a testing sandbox, exploited a zero-day, and gained access to the open internet to pull off the attack.

A Sneaky Hacking Tool Targeting AI Infrastructure Is Lurking in Victims’ Blind Spots

Par : Lily Hay Newman
A new type of malware can worm deep into AI coding systems to steal data and logins—and can flip a “death switch” to destroy files and keep out real users.

A Device Hidden in Cars Across the US Leaves Them Vulnerable to Hacking and Paralysis. Patch It Now

Par : Andy Greenberg
Dealerships installed alarms in millions of vehicles—and left them in even if the buyer didn’t want them. Now researchers warn they can be hacked to unlock, track, and disable cars.

Prompt Injection Attacks Are Thwarting AI Hacking Agents

Par : Dan Goodin， Ars Technica
“Context bombing” tricks malicious AI agents into shutting down before they can do harm.
❌