ChatGPT macOS Flaw Could’ve Enabled Long-Term Spyware via Memory Function

A now-patched security vulnerability in OpenAI’s ChatGPT app for macOS could have made it possible for attackers to plant long-term persistent spyware into the artificial intelligence (AI) tool’s memory.
The technique, dubbed SpAIware, could be abused to facilitate “continuous data exfiltration of any information the user typed or responses received by ChatGPT, including any future chat sessions

The Hacker News – ​Read More

Iran Was Behind Thousands of Text Messages Calling for Revenge Over Quran Burnings, Sweden Says

Sweden is accusing Iran of hacking SMS service and sending out thousands of text messages calling for revenge over Quran burnings.

The post Iran Was Behind Thousands of Text Messages Calling for Revenge Over Quran Burnings, Sweden Says appeared first on SecurityWeek.

SecurityWeek – ​Read More

Transportation Companies Hit by Cyberattacks Using Lumma Stealer and NetSupport Malware

Transportation and logistics companies in North America are the target of a new phishing campaign that delivers a variety of information stealers and remote access trojans (RATs).
The activity cluster, per Proofpoint, makes use of compromised legitimate email accounts belonging to transportation and shipping companies so as to inject malicious content into existing email conversations.
As many

The Hacker News – ​Read More

CISA Flags Critical Ivanti vTM Vulnerability Amid Active Exploitation Concerns

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting Ivanti Virtual Traffic Manager (vTM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerability in question is CVE-2024-7593 (CVSS score: 9.8), which could be exploited by a remote unauthenticated attacker to bypass the

The Hacker News – ​Read More

PDiddySploit Malware Hidden in Files Claiming to Reveal Deleted Diddy Posts

Cybercriminals are exploiting the ongoing Sean “Diddy” Combs scandal by spreading the new PDiddySploit malware hidden in infected…

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

6 Cybersecurity Headaches Sports Organizations Have to Worry About

Leaders in professional athletics lament the realities and risks of growth in connected stadium environments, social networks, and legalized gambling.

darkreading – ​Read More

AI can now solve reCAPTCHA tests as accurately as you can

AI doesn’t get every test right, but it’s good enough to look convincingly human. Security pros say AI’s progress is no big deal. Here’s why.

Latest stories for ZDNET in Security – ​Read More

Kansas Water Plant Pivots to Analog After Cyber Event

A water treatment facility in a small city took serious precautions to prevent any bad outcomes from a hazy cyber incident.

darkreading – ​Read More

Telegram to Share User Info With Law Enforcement in Policy Shift

The encrypted messaging service said it will share users’ IP addresses and phone numbers with authorities when requested.

darkreading – ​Read More

Critical Automated Tank Gauge Bugs Threaten Critical Infrastructure

The security vulnerabilities could lead to everything from gas spills to operations data disclosure, affecting gas stations, airports, military bases, and other hypersensitive locations.

darkreading – ​Read More