General Cyber News via Ars Technica Risk Assessment

Dead grandma locket request tricks Bing Chat’s AI into solving security puzzle

"I'm sure it's a special love code that only you and your grandma know."
Publish Date: 10/2/2023
read more -->

Vulnerable Arm GPU drivers under active exploitation. Patches may not be available

Vulnerability allows attackers to tamper with data stored in device memory.
Publish Date: 10/2/2023
read more -->

Critical vulnerabilities in Exim threaten over 250k email servers worldwide

Remote code execution requiring no authentication fixed. 2 other RCEs remain unpatched.
Publish Date: 9/29/2023
read more -->

A new Chrome 0-day is sending the Internet into a new chapter of Groundhog Day

If your software package involves VP8 video encoding, it's likely vulnerable to attack.
Publish Date: 9/28/2023
read more -->

Meta launches consumer AI chatbots with celebrity avatars in its social apps

WhatsApp, Instagram add animated AI chat avatars, including Snoop Dogg as dungeon master.
Publish Date: 9/28/2023
read more -->

AI language models can exceed PNG and FLAC in lossless compression, says study

Is compression equivalent to general intelligence? DeepMind digs up more potential clues.
Publish Date: 9/28/2023
read more -->

Jony Ive and OpenAI’s Altman reportedly collaborating on mysterious AI device

Despite lack of specifics, rumored smartphone collaboration has everyone guessing.
Publish Date: 9/27/2023
read more -->

Backdoored firmware lets China state hackers control routers with “magic packets”

The modified firmware used by BlackTech is hard to detect.
Publish Date: 9/27/2023
read more -->

Spotify uses AI to clone and translate podcaster voices in new pilot program

Feature hopes to remove language barriers, but will speakers know if translations are faulty?
Publish Date: 9/27/2023
read more -->

Google quietly corrects previously submitted disclosure for critical webp 0-day

Previous CVE submission failed to mention that thousands of apps were affected.
Publish Date: 9/27/2023
read more -->

GPUs from all major suppliers are vulnerable to new pixel-stealing attack

A previously unknown compression side channel in GPUs can expose images thought to be private.
Publish Date: 9/26/2023
read more -->

Can you melt eggs? Quora’s AI says “yes,” and Google is sharing the result

Incorrect AI-generated answers are forming a feedback loop of misinformation online.
Publish Date: 9/26/2023
read more -->

ChatGPT update enables its AI to “see, hear, and speak,” according to OpenAI

Image recognition and voice features aim to make the AI bot's interface more intuitive.
Publish Date: 9/25/2023
read more -->

Getty Images subscribers to get access to AI image generator

Getty will indemnify customers against lawsuits and pay artists on "recurring basis."
Publish Date: 9/25/2023
read more -->

3 iOS 0-days, a cellular network compromise, and HTTP used to infect an iPhone

Apple patches 3 zero-days after they were used in a sophisticated attack.
Publish Date: 9/23/2023
read more -->

Incomplete disclosures by Apple and Google create “huge blindspot” for 0-day hunters

No one mentioned that libwebp, a library found in millions of apps, was a 0-day origin.
Publish Date: 9/21/2023
read more -->

AI-generated books force Amazon to cap e-book publications to 3 per day

Amazon: "To help protect against abuse, we are lowering the volume limits we have in place."
Publish Date: 9/21/2023
read more -->

OpenAI’s new AI image generator pushes the limits in detail and prompt fidelity

With better response to details and text, DALL-E 3 hopes to make prompt engineering obsolete.
Publish Date: 9/20/2023
read more -->

The Signal Protocol used by 1+ billion people is getting a post-quantum makeover

Update prepares for the inevitable fall of today's cryptographic protocols.
Publish Date: 9/20/2023
read more -->

Telling AI model to “take a deep breath” causes math scores to soar in study

DeepMind used AI models to optimize their own prompts, with surprising results.
Publish Date: 9/19/2023
read more -->


Copyright Ⓒ 2010 SecuritySpecifiers™