Showing only posts in Ars Technica. Show all posts.

~11,000 sites have been infected with malware that’s good at avoiding detection

Source

Enlarge (credit: CHUYN / Getty Images ) Nearly 11,000 websites in recent months have been infected with a backdoor that redirects visitors to sites that rack up fraudulent views of ads provided by Google Adsense, researchers said. All 10,890 infected sites, found by security firm Sucuri, run the WordPress …

Hackers are selling a service that bypasses ChatGPT restrictions on malware

Source

Enlarge (credit: Getty Images | Carol Yepes) Hackers have devised a way to bypass ChatGPT ’s restrictions and are using it to sell services that allow people to create malware and phishing emails, researchers said on Wednesday. ChatGPT is a chatbot that uses artificial intelligence to answer questions and perform …

ChatGPT is a data privacy nightmare, and we ought to be concerned

Source

Enlarge ChatGPT has taken the world by storm. Within two months of its release it reached 100 million active users, making it the fastest-growing consumer application ever launched. Users are attracted to the tool’s advanced capabilities —and concerned by its potential to cause disruption in various sectors. A …

Until further notice, think twice before using Google to download software

Source

Enlarge (credit: Getty Images) Searching Google for downloads of popular software has always come with risks, but over the past few months, it has been downright dangerous, according to researchers and a pseudorandom collection of queries. “Threat researchers are used to seeing a moderate flow of malvertising via Google …

Paper: Stable Diffusion “memorizes” some images, sparking privacy concerns

Source

Enlarge / An image from Stable Diffusion’s training set compared (left) to a similar Stable Diffusion generation (right) when prompted with "Ann Graham Lotz." (credit: Carlini et al., 2023) On Monday, a group of AI researchers from Google, DeepMind, UC Berkeley, Princeton, and ETH Zurich released a paper outlining …

Ransomware victims are refusing to pay, tanking attackers’ profits

Source

Enlarge / Holding up corporations, utilities, and hospitals for malware-encrypted data used to be quite profitable. But it's a tough gig lately, you know? (credit: ifanfoto/Getty Images) Two new studies suggest that ransomware isn't the lucrative, enterprise-scale gotcha it used to be. Profits to attackers' wallets, and the percentage …

A widespread logic controller flaw raises the specter of Stuxnet

Source

Enlarge In 2009, the computer worm Stuxnet crippled hundreds of centrifuges inside Iran’s Natanz uranium enrichment plant by targeting the software running on the facility’s industrial computers, known as programmable logic controllers. The exploited PLCs were made by the automation giant Siemens and were all models from …

Hackers discover that vulnerabilities are rife in the auto industry

Source

Enlarge (credit: Aurich Lawson | Getty Images) If you purchased a new car in the past few years, chances are good that it contains at least one embedded modem, which it uses to offer some connected services. The benefits, we've been told, are numerous and include convenience features like interior …

Meta to pay $725 million to settle Cambridge Analytica lawsuit

Source

Enlarge (credit: Daniel Leal / Getty Images ) Meta, the parent company of Facebook, will pay $725 million to settle a class-action lawsuit filed in 2018. The lawsuit came in the wake of Facebook's revelation that it had improperly shared data on 87 million users with Cambridge Analytica, a British political …

Eufy publicly acknowledges some parts of its “No clouds” controversy

Source

Enlarge / Eufy's security arm has publicly addressed some of the most important claims about the company's local-focused systems, but those who bought into the "no clouds" claims may not be fully assured. (credit: Eufy) Eufy, the Anker brand that positioned its security cameras as prioritizing "local storage" and "No …

Kremlin-backed hackers targeted a “large” petroleum refinery in a NATO nation

Source

Enlarge / Fawley Oil Refinery on a bright day. (credit: Getty Images) One of the Kremlin’s most active hacking groups targeting Ukraine recently tried to hack a large petroleum refining company located in a NATO country. The attack is a sign that the group is expanding its intelligence gathering …

Microsoft digital certificates have once again been abused to sign malware

Source

Enlarge (credit: Getty Images) Microsoft has once again been caught allowing its legitimate digital certificates to sign malware in the wild, a lapse that allows the malicious files to pass strict security checks designed to prevent them from running on the Windows operating system. Multiple threat actors were involved …

Syntax errors are the doom of us all, including botnet authors

Source

Enlarge / If you're going to come at port 443, you best not miss (or forget to put a space between URL and port). (credit: Getty Images) KmsdBot, a cryptomining botnet that could also be used for denial-of-service (DDOS) attacks, broke into systems through weak secure shell credentials. It could …

Never-before-seen malware is nuking data in Russia’s courts and mayors’ offices

Source

Enlarge Mayors' offices and courts in Russia are under attack by never-before-seen malware that poses as ransomware but is actually a wiper that permanently destroys data on an infected system, according to security company Kaspersky and the Izvestia news service. Kaspersky researchers have named the wiper CryWiper, a nod …

Thinking about taking your computer to the repair shop? Be very afraid

Source

Enlarge (credit: Getty Images) If you’ve ever worried about the privacy of your sensitive data when seeking a computer or phone repair, a new study suggests you have good reason. It found that privacy violations occurred at least 50 percent of the time, not surprisingly with female customers …

New Mac app wants to record everything you do—so you can “rewind” it later

Source

Enlarge / Rewind reportedly lets you search your Mac's usage history for what you've seen, said, or heard. (credit: Rewind AI) Yesterday, a company called Rewind AI announced a self-titled software product for Macs with Apple Silicon that reportedly keeps a highly compressed, searchable record of everything you do locally …

New Mac app wants to record everything you do—so you can “rewind” it later [Updated]

Source

Enlarge / Rewind reportedly lets you search your Mac's usage history for what you've seen, said, or heard. (credit: Rewind AI) Yesterday, a company called Rewind AI announced a self-titled software product for Macs with Apple Silicon that reportedly keeps a highly compressed, searchable record of everything you do locally …

OpenSSL 3 patch, once Heartbleed-level “critical,” arrives as a lesser “high”

Source

Enlarge / The fallout of an OpenSSL vulnerability, initially listed as "critical," should be much less severe than that of the last critical OpenSSL bug, Heartbleed. An OpenSSL vulnerability once signaled as the first critical-level patch since the Internet-reshaping Heartbleed bug has just been patched. It ultimately arrived as a …

Feds say Ukrainian man running malware service amassed 50M unique credentials

Source

Enlarge (credit: Getty Images | Charles O'Rear) Federal prosecutors have charged a 26-year-old Ukrainian national with operating a malware service that was responsible for stealing sensitive data from more than 2 million individuals around the world. Prosecutors in Texas said on Tuesday that Mark Sokolovsky, 26, of Ukraine helped operate …

Binance blockchain suffers $570 million hack

Source

Enlarge / CHINA - 2022/07/25: In this photo illustration, the cryptocurrency exchange trading platform Binance logo is displayed on a smartphone screen. (Photo Illustration by Budrul Chukrut/SOPA Images/LightRocket via Getty Images) (credit: SOPA Images ) Hackers have stolen around $570 million in tokens from Binance, in a rare …

Mystery hackers are “hyperjacking” targets for insidious spying

Source

Enlarge (credit: Marco Rosario Venturini Autieri/Getty Images) For decades, virtualization software has offered a way to vastly multiply computers’ efficiency, hosting entire collections of computers as “virtual machines” on just one physical machine. And for almost as long, security researchers have warned about the potential dark side of …

Never-before-seen malware has infected hundreds of Linux and Windows devices

Source

Enlarge (credit: Getty Images ) Researchers have revealed a never-before-seen piece of cross-platform malware that has infected a wide range of Linux and Windows devices, including small office routers, FreeBSD boxes, and large enterprise servers. Black Lotus Labs, the research arm of security firm Lumen, is calling the malware Chaos …

« newer articles | page 15 | older articles »