ClickFix Style Attack Uses Grok, ChatGPT for Malware Delivery

A new twist on the social engineering tactic is making waves, combining SEO poisoning and legitimate AI domains to install malware on victims’ computers.

darkreading – ​Read More

Lawmaker calls facial recognition on doorbell cameras a ‘privacy nightmare’

Sen. Ed Markey (D-MA) asked Ring in October about its privacy policies and how it intends to protect individuals recorded by its new facial recognition technology feature called Familiar Faces.

The Record from Recorded Future News – ​Read More

Ring’s ‘Familiar Faces’ is here: Why privacy experts worry it’s mass surveillance in disguise

Ring users in most of the US can now save up to fifty faces in the app, allowing for more personalized notifications. But the convenience probably isn’t worth the sacrifice in privacy.

Latest news – ​Read More

.NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL

New research has uncovered exploitation primitives in the .NET Framework that could be leveraged against enterprise-grade applications to achieve remote code execution.
WatchTowr Labs, which has codenamed the “invalid cast vulnerability” SOAPwn, said the issue impacts Barracuda Service Center RMM, Ivanti Endpoint Manager (EPM), and Umbraco 8. But the number of affected vendors is likely to be

The Hacker News – ​Read More

DOJ, CISA warn of Russia-linked attacks targeting meat processing plants, nuclear regulatory entities and other critical infrastructure

The Cybersecurity and Infrastructure Security Agency (CISA), alongside several other U.S. and international agencies, released an advisory covering the cyberattacks launched by CyberArmyofRussia_Reborn (CARR), NoName057(16) and several related groups.

The Record from Recorded Future News – ​Read More

I’ve yet to find a power bank as durable yet travel-friendly as this one

The Nitecore NB Plus is a thin, lightweight, water-resistant device built to withstand heat, cold, and everyday knocks.

Latest news – ​Read More

I just ordered Instacart delivery through ChatGPT using a few simple prompts – here’s how

It’s fast and easy, and it all happens inside ChatGPT, with no Instacart+ required.

Latest news – ​Read More

US extradites member of Russian hacktivist group involved in critical infrastructure attacks

The Justice Department unveiled two indictments on Tuesday evening charging Victoria Eduardovna Dubranova for her role in CyberArmyofRussia_Reborn (CARR) and NoName057(16), two groups known for attacking critical infrastructure.

The Record from Recorded Future News – ​Read More

Your Google Photos just got 4 huge video editing upgrades – what’s new

The tools are designed to help you edit videos quickly and more easily.

Latest news – ​Read More

Israeli Cybersecurity Funding Hits $4.4 Billion Record High

Over the past decade, overall funding in Israeli cybersecurity companies has increased by more than 500%, according to YL Ventures. 

The post Israeli Cybersecurity Funding Hits $4.4 Billion Record High appeared first on SecurityWeek.

SecurityWeek – ​Read More