A July 13 GitHub commit came bundled with another unprotected API key for over 50 AI models, and spotted by security outfit GitGuardian. The key was quickly removed later in the day but the researchers noted that it continued to function as of the following day.
The McDonald’s admin panel that researchers broke into allows one to create an application, which then kicks out a unique identification number attached to it. The researchers found that incrementally decreasing this number by one brought up prior applications, complete with chats with the AI bot.
Follow-up investigation by the Ministry of Science and ICT found that some 28 Linux servers were compromised during this extended campaign with about 26.96 million subscriber identity records stolen.
Silk Typhoon has been one of the bigger and more active groups of Chinese hackers since at least 2020, but it looks to be down at least one member.
An attempt involving Rubio’s voice and writing style was made in an attempt to compromise assorted US and foreign officials, and a warning has gone out about the increasing potential of AI deepfakes and the need for awareness of how realistic they can now be.
Cloudflare recently introduced an “Easy button” setting that will screen out all attempted content scraping, even for users of its free tier of services, and is promising a “pay to scrape” feature in the near future that would demand a toll from AI bots.
Australia’s Qantas has been contacting customers about a data breach that appears to be tied to its loyalty rewards program. The airline says that a third-party contact center was compromised and at least some of its customers, potentially up to six million, are impacted.
After hopping from UK retail to US retail to US insurance firms, the hacking group “Scattered Spider” appears to have switched industries once again. The FBI is advising that North American airlines should be on alert for cyber attacks, as well as their assorted vendors and contractors.
A new CISA/NSA report summarizes the benefits of memory-safe languages for organizations, with a particular focus on critical infrastructure partners, but also acknowledges common challenges that make the changeover a long-term goal and one that may never be 100% attainable.
Scammers take out Google ads impersonating legitimate companies offering support numbers. Victims that clicked on the link are taken to the company’s legitimate URL with a hacker-controlled phone number inserted in the site search bar.