Security

GPT-4 can exploit zero-day security vulnerabilities all by itself, a new study finds

A hot potato: GPT-4 stands as the newest multimodal large language model (LLM) crafted by OpenAI. This foundational model, currently accessible to customers as part of the paid ChatGPT Plus line, exhibits notable prowess in identifying security vulnerabilities without requiring external human assistance.

Hackers attempted to trick LastPass employee with cloned voice of CEO

Microsoft warns that Russia's online influence campaigns targeting US elections have picked up pace

Russia-backed hacking group suspected of attack on US water system

Bad actors are tempting T-Mobile employees with cash rewards to perform SIM swaps

The DiskMantler can take apart a hard drive in as little as 8 seconds by vigorously shaking it

Vast majority of US hospital websites are sharing visitor data with Big Tech companies

Apple warns users in 92 countries of mercenary spyware attacks

Microsoft left a server containing employee credentials exposed to the internet for a month

LG TV owners should update their firmware, webOS vulnerability found in a few models

New HTTP/2 vulnerability leaves servers in danger of devastating DoS attacks, even from a single TCP connection

Google's Find My Device network could be rolling out very soon

Former White House CIO warns the tech industry should prepare for a TikTok ban

Google sues alleged crypto scammers who uploaded fraudulent apps to the Play Store

Government review criticizes Microsoft for security lapses in "preventable" Exchange hack

Developer delves into Denuvo DRM to run Hogwarts Legacy on a secondary PC

Microsoft reveals how much Windows 10 Extended Security Updates will cost

House of Representatives bans the use of Copilot over security concerns

AT&T confirms data leak affecting 73 million customers - after spending two weeks denying it

Linux could have been brought down by backdoor found in widely used utility

Why it matters: By happenstance Microsoft researcher Andres Freund found malicious code that could break sshd authentication. If it hadn't been discovered it could have posed a grave threat to Linux. The open source community has reacted to the incident, acknowledging the fortuitous nature of the discovery and how it was fortunately caught early before it could pose a significant risk to the broader Linux community.

Activision Blizzard investigates hacking campaign linked to cheat software

New variant of "TheMoon" malware enslaves thousands of insecure Asus routers into a malicious proxy

Apple "Find My" app led a Missouri SWAT team to raid an innocent family's home, lawsuit pending

Google's AI-powered search can recommend malicious sites, including scams and malware

Unpatchable Apple Silicon vulnerability could leak encryption keys

In brief: Hardware-based security flaws have become more frequent over the last several years but have mostly affected Intel and AMD processors. Now, Apple joins those ranks with a recently discovered vulnerability that causes Mac M-series CPUs to expose encryption keys. Since it is hardware-based, there is little users can do besides keeping macOS updated.