"We are all born ignorant, but one must work very hard to remain stupid!" -- Benjamin Franklin

Bidgear ad

 

The US, China, Israel and other nations are taking a serious look at AI drone warfare where drones would decide whether humans live or die according to New York Times reported:

“it seems like something out of science fiction: swarms of killer robots that hunt down targets on their own and are capable of flying in for the kill without any human signing off.

A new Mirai-based malware botnet named 'InfectedSlurs' has been exploiting two zero-day remote code execution (RCE) vulnerabilities to infect routers and video recorder (NVR) devices.

The malware hijacks the devices to make them part of its DDoS (distributed denial of service) swarm, presumably rented for profit.

The three security flaws described in the bulletins significantly impact the security and integrity of the ownCloud environment, potentially leading to exposure of sensitive information, stealthy data theft, phishing attacks, and more.

Security vulnerabilities in file-sharing platforms have been under constant attack, with ransomware groups, like CLOP, using them in data theft attacks on thousnads of companies worldwide.

Citrix reminded admins today that they must take additional measures after patching their NetScaler appliances against the CVE-2023-4966 'Citrix Bleed' vulnerability to secure vulnerable devices against attacks.

Besides applying the necessary security updates, they're also advised to wipe all previous user sessions and terminate all active ones.

This is a crucial step, seeing that attackers behind ongoing Citrix Bleed exploitation have been stealing authentication tokens, allowing them to access compromised devices even after they have been patched.

Microsoft says a North Korean hacking group has breached Taiwanese multimedia software company CyberLink and trojanized one of its installers to push malware in a supply chain attack targeting potential victims worldwide.

According to Microsoft Threat Intelligence, activity suspected to be linked with the altered CyberLink installer file surfaced as early as October 20, 2023.

Way back when we loaded software with punch cards and magnetic tape, all programs were "free software" and "open source." Then along came proprietary software, and everything changed. But programmers rebelled and developed the first formal definitions of free and open source software.

Today, code that's not open source is the rare exception. But that hasn't stopped companies who mistook open source as a business model instead of a development model from trying to combine proprietary methods with "open source" code. The latest is Sentry's Functional Source License (FSL).

The mystery surrounding the brief dismissal of OpenAI CEO Sam Altman last Friday, who has since been reinstated, might revolve around a Reuters report that suggests Altman's removal was due to a breakthrough in artificial general intelligence (AGI), which could threaten humanity. 

A new malware campaign targeting Apple products tricks users into downloading a 'browser update' which actually contains a 'one hit smash-and-grab' virus.

Cybercriminals are even creating malicious ads on Google which impersonate familiar and legitimate tech brands to lure in potential targets.

Once you have entered the website, fake pop-ups will prompt you to download a browser update to view the site.

Worryingly, the fake prompts are extremely convincing, and even a savvy user could be tricked if they don't know what to look for.

INL is located in Idaho Falls, a community of about 67,000 residents in the eastern part of the state. It has more than 5,000 employees and works on researching nuclear reactors and sustainable energy projects for the federal government.

Local media initially did not name the suspected hackers, but a group calling itself SiegedSec eventually took responsibility, posting some of the purloined information on social media.