SecurityLab

Instaló un paquete y lo perdió todo: hallan en PyPI un módulo espía con función de autodestrucción

Una importación rutinaria desencadenó una cadena que dejó el servidor fuera del control de su propietario. En PyPI se encontraron versiones maliciosas del paquete durabletask, relacionado con Durable ...
CoinTelegraph

THORChain pauses trading after suspected $10M exploit

THORChain paused trading after ZachXBT flagged a suspected $10 million exploit spanning Bitcoin, Ethereum, BNB Chain and Base. Decentralized liquidity protocol THORChain halted trading after ...
Ars Technica

Zero-day exploit completely defeats default Windows 11 BitLocker protections

A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker protections and gain complete access to an encrypted drive within seconds.
Merca2

Google frena el primer ataque zero-day creado con IA: así engañaba al 2FA

Google Threat Intelligence detiene el primer ataque de día cero creado con inteligencia artificial, capaz de eludir la autenticación de doble factor. Un hito que redefine la ciberseguridad en plena er ...
SecurityLab

Una IA creó un exploit de día cero; la gente no se dio cuenta. Google lo detectó, pero apenas

Zero-day por encargo: pides a la IA y te entregan un exploit; Google dice que ya es una realidad. Los ciberdelincuentes empezaron a emplear la inteligencia artificial no solo para redactar correos de ...
TechRepublic

Google Says Hackers Used AI to Build Zero-Day Exploit

Google says hackers used AI to help build a zero-day exploit targeting 2FA, raising concerns about AI-assisted hacking. Google says hackers used AI to help build a zero-day exploit, then stopped it ...

Google descubre el primer ciberataque construido con inteligencia artificial

Google frenó el primer exploit zero-day creado con IA, diseñado para saltarse la autenticación en dos pasos de una herramienta open source.
Bleeping Computer

Google: Hackers used AI to develop zero-day exploit for web admin tool

Researchers at Google Threat Intelligence Group (GTIG) say that a zero-day exploit targeting a popular open-source web administration tool was likely generated using AI. The exploit could be leveraged ...
CSOonline

‘Trivial’ exploit can give attackers root access to Linux kernel

Experts say until the distros release patches, CSOs have to beware of unauthorized privilege escalation; Kubernetes container escape is also a risk. CSOs must ensure their Linux-based systems block ...
Monocle

Lake Como gets a beautiful new must-stay with the arrival of the Edition hotel

Bringing a welcome array of after-dark attractions to a classic Italian getaway destination, the Edition’s latest opening on Lake Como is the first of a number of major waterside openings from ...
TheStreet.com

Another DeFi company loses millions in fresh exploit

Volo Protocol, a yield-generating platform built on the Sui blockchain, confirmed on Tuesday that it suffered an exploit that drained approximately $3.5 million in assets. The attack targeted specific ...