orikahmadov.com

New Reports Uncover Jailbreaks, Unsafe Code, and Data Theft Risks in Leading AI Systems

The Hacker News April 29, 2025

Various generative artificial intelligence (GenAI) services have been found vulnerable to two types of jailbreak attacks that make it possible to produce illicit or dangerous content. The first of the two techniques, codenamed Inception, instructs an AI tool to imagine a fictitious scenario, which can then be adapted into a second scenario within the first one where there exists no safety

Microsoft fixes Outlook paste, blank calendar rendering issues

Bleeping Computer April 29, 2025

Microsoft has confirmed several issues affecting Microsoft 365 customers using the "paste special' option and the calendar feature in the classic Outlook email client. [...]

CISA tags Broadcom Fabric OS, CommVault flaws as exploited in attacks

Bleeping Computer April 29, 2025

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) is warning of Broadcom Brocade Fabric OS, Commvault web servers, and Qualitia Active! Mail clients vulnerabilities that are actively exploited in attacks. [...]

SentinelOne Uncovers Chinese Espionage Campaign Targeting Its Infrastructure and Clients

The Hacker News April 29, 2025

Cybersecurity company SentinelOne has revealed that a China-nexus threat cluster dubbed PurpleHaze conducted reconnaissance attempts against its infrastructure and some of its high-value customers. "We first became aware of this threat cluster during a 2024 intrusion conducted against an organization previously providing hardware logistics services for SentinelOne employees," security

Millions of Apple Airplay-Enabled Devices Can Be Hacked via Wi-Fi

Wired News April 29, 2025

Researchers reveal a collection of bugs known as AirBorne that would allow any hacker on the same Wi-Fi network as a third-party AirPlay-enabled device to surreptitiously run their own code on it.

Product Walkthrough: Securing Microsoft Copilot with Reco

The Hacker News April 29, 2025

Find out how Reco keeps Microsoft 365 Copilot safe by spotting risky prompts, protecting data, managing user access, and identifying threats - all while keeping productivity high. Microsoft 365 Copilot promises to boost productivity by turning natural language prompts into actions. Employees can generate reports, comb through data, or get instant answers just by asking Copilot. However,

AI Is Using Your Likes to Get Inside Your Head

Wired AI News April 29, 2025

Liking features on social media can provide troves of data about human behavior to AI models. But as AI gets smarter, will it be able to know users’ preferences before they do?

Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products

The Hacker News April 29, 2025

Google has revealed that it observed 75 zero-day vulnerabilities exploited in the wild in 2024, down from 98 in 2023 but an increase from 63 the year before. Of the 75 zero-days, 44% of them targeted enterprise products. As many as 20 flaws were identified in security software and appliances. "Zero-day exploitation of browsers and mobile devices fell drastically, decreasing by about a third for

Google: 97 zero-days exploited in 2024, over 50% in spyware attacks

Bleeping Computer April 29, 2025

Google's Threat Intelligence Group (GTIG) says attackers exploited 75 zero-day vulnerabilities in the wild last year, over 50% of which were linked to spyware attacks. [...]

Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool

The Hacker News April 29, 2025

In a new campaign detected in March 2025, senior members of the World Uyghur Congress (WUC) living in exile have been targeted by a Windows-based malware that's capable of conducting surveillance. The spear-phishing campaign involved the use of a trojanized version of a legitimate open-source word processing and spell check tool called UyghurEdit++ developed to support the use of the Uyghur

CISA Adds Actively Exploited Broadcom and Commvault Flaws to KEV Database

The Hacker News April 29, 2025

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added two high-severity security flaws impacting Broadcom Brocade Fabric OS and Commvault Web Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The vulnerabilities in question are listed below - CVE-2025-1976 (CVSS score: 8.6) - A code injection flaw

Marks & Spencer breach linked to Scattered Spider ransomware attack

Bleeping Computer April 28, 2025

Ongoing outages at British retail giant Marks & Spencer are caused by a ransomware attack believed to be conducted by threat actors known as "Scattered Spider" BleepingComputer has learned from multiple sources. [...]

Hitachi Vantara takes servers offline after Akira ransomware attack

Bleeping Computer April 28, 2025

Hitachi Vantara, a subsidiary of Japanese multinational conglomerate Hitachi, was forced to take servers offline over the weekend to contain an Akira ransomware attack. [...]

A Philosopher Released an Acclaimed Book About Digital Manipulation. The Author Ended Up Being AI

Wired AI News April 28, 2025

Italian essayist Andrea Colamedici tells WIRED Hypnocracy: Trump, Musk, and the New Architecture of Reality was a “philosophical experiment and a performance.” The book’s Chinese author does not exist.

VeriSource now says February data breach impacts 4 million people

Bleeping Computer April 28, 2025

Employee benefits administration firm VeriSource Services is warning that a data breach exposed the personal information of four million people. [...]

Latest Tech News