malware - CybAI news

14 Nov

Security Update on Google Chrome Extensions

stp2y0 CommentsNewscoding, community, cybersecurity, datasecurity, development, devops, engineering, inclusive, malware, software

In November 2024, a report on Google Chrome extensions indicated that the Manifest V3 update, intended to boost security, has yet to fully protect users from data theft and malware. Google introduced Manifest V3 to limit extensions' access to sensitive data and block harmful scripts, but it appears that V3 has not been entirely effective in countering these security threats. Malicious actors continue to exploit Chrome extensions, as many users install extensions without scrutinizing permissions or verifying sourcesDespite the improvements V3 offers, some harmful extensions bypass the security restrictions, accessing private user data or distributing malware. This ongoing issue underscores…

17 Oct

This Prompt Can Make an AI Chatbot Identify and Extract Personal Details From Your Chats

stp2y0 CommentsAIartificial intelligence, cybersecurity, hacking, malware, security, vulnerabilities

The researchers say that if the attack were carried out in the real world, people could be socially engineered into believing the unintelligible prompt might do something useful, such as improve their CV. The researchers point to numerous websites that provide people with prompts they can use. They tested the attack by uploading a CV to conversations with chatbots, and it was able to return the personal information contained within the file.Earlence Fernandes, an assistant professor at UCSD who was involved in the work, says the attack approach is fairly complicated as the obfuscated prompt needs to identify personal information,…

12 Oct

Pig Butchering Scams Are Going High Tech

stp2y0 CommentsAIartificial intelligence, crime, cybersecurity, hacking, malware, security

As digital scamming explodes in Southeast Asia, including so called “pig butchering” investment scams, the United Nations Office on Drugs and Crime (UNODC) issued a comprehensive report this week with a dire warning about the rapid growth of this criminal ecosystem. Many digital scams have traditionally relied on social engineering, or tricking victims into giving away their money willingly, rather than leaning on malware or other highly technical methods. But researchers have increasingly sounded the alarm that scammers are incorporating generative AI content and deepfakes to expand the scale and effectiveness of their operations. And the UN report offers the…

15 Aug

Google Has Unleashed Its Legal Fury on Hackers and Scammers

stp2y0 CommentsRAG modelscybersecurity, google, hacking, lawsuits, malware, tech policy

Following an ordeal over whether the defendants could obtain Russian passports, sit for depositions in Europe, and turn over work files, Google’s attorneys and Litvak traded accusations of lying. In 2022, US district judge Denise Cote sided with Google. She found in a 48-page ruling that the defendants “intentionally withheld information” and “misrepresented their willingness and ability” to disclose it to “avoid liability and further profit” from Glupteba. “The record here is sufficient to find a willful attempt to defraud the Court,” Cote wrote.Cote sanctioned Litvak, and he agreed to pay Google $250,000 in total through 2027 to settle. The…

23 Jul

Russia-linked hackers cut heat to 600 Ukrainian apartment buildings in the dead of winter, researchers say

stp2y0 CommentsNewscyberattack, cybersecurity, gear, malware, news, russia, ukraine

Cybersecurity company Dragos has flagged malware that can attack industrial control systems (ICS), tricking them into malicious behavior like turning off the heat and hot water in the middle of winter. TechCrunch reports that’s precisely what the malware, dubbed FrostyGoop, did this January in Lviv, Ukraine, when residents in over 600 apartment buildings lost heat for two days amid freezing temperatures.Dragos says FrostyGoop is only the ninth known malware designed to target industrial controllers. It’s also the first to specifically set its sights on Modbus, a widely deployed communications protocol invented in 1979. Modbus is frequently used in industrial environments…

02 Jul

Como um Malware opera, quais são os seus tipos e como se proteger.

stp2y0 CommentsNewsbeginners, coding, community, cybersecurity, development, engineering, inclusive, malware, security, software

No mundo digital de hoje, a segurança cibernética se torna cada vez mais importante. Entre as principais ameaças, os malwares se destacam por sua capacidade de causar danos significativos a dispositivos, redes e dados. Entender o funcionamento, os tipos e as medidas de proteção contra malwares é essencial para garantir a segurança online. Mas, o que é um Malware? Malware, abreviação de software malicioso, é um termo genérico que engloba diversos tipos de programas nocivos projetados para causar danos ou obter acesso não autorizado a sistemas computacionais, causando algum prejuízo. Esses softwares podem ser criados com diversas motivações, como roubo…

07 Jun

TikTok says it fixed a vulnerability that enabled a cyberattack on high-profile accounts

stp2y0 CommentsNewsByteDance, gear, hackers, malware, news, social media, tiktok

TikTok says it has fixed a vulnerability that allowed for a cyberattack that targeted high-profile accounts, as reported by Axios. A TikTok spokesperson added that the company is currently working to restore access to impacted users.The social media giant hasn’t announced how many accounts were hit by the attack, but we do know that CNN and Paris Hilton were targets. The hack involved sending messages to users that were filled with malicious code. When the user opened up the message, the code went to work and took over the entire account. Oddly, the impacted accounts didn’t post anything while they…