The watch’s insecurity and the spying it enabled might be expected given the gadget’s pedigree: It’s sold by an obscure company called CJC, costs less than $30, and was made by an equally obscure manufacturer, YiQingTeng Electronics, in Shenzhen, China. More troubling, perhaps, is that the online platform it’s built on—and the one that allowed
In a talk that was a last-minute addition to the Black Hat security conference in Las Vegas on Wednesday, employees from OpenAI presented new details about a recent, high-profile incident of rogue AI hacking that has created a maelstrom within the AI and cybersecurity industries. About two weeks ago, OpenAI disclosed an incident in which
It’s officially getting hard to keep track of all the times and ways AI models from OpenAI and Anthropic have been involved in “security incidents,” going outside the confines of their testing and interacting with the wider internet in unintended, often unwelcome ways. Add these to the list: Agents from both AI labs went on
Rapid injections, Malicious commands that attackers embed in content to entice large language models to follow them have been attackers’ tool to turn AI platforms against their users. A well-worded command entered into an email or calendar invite is often all it takes for the LLM to leak sensitive data or perform other harmful actions.
The investigation stops short of naming any government that may have used Pegasus against Kouloglou, noting in particular that it found no indication of Greek government involvement. But Citizen Lab says it found overlaps between the attacks on Kouloglou’s phone and the use of Pegasus against seven Russian- and Belarusian-speaking journalists and activists between August
Google notes that Apple patched vulnerabilities used by Coruna in the latest versions of its mobile operating system, iOS 26, so its exploitation techniques are only confirmed to work against iOS 13 through 17.2.1. It targets vulnerabilities in Apple’s Webkit framework for browsers, so Safari users on those older versions of iOS would be vulnerable,
