Weird Zimbra Vulnerability
October 3 2024Hackers can execute commands on a remote computer by sending malformed emails to a Zimbra mail server. It’s critical, but difficult to exploit reliably.
In an email sent Wednesday...
Read more
California AI Safety Bill Vetoed
October 2 2024Governor Newsom has vetoed the state’s AI safety bill. I have mixed feelings about the bill. There’s a lot to like about it, and I want governments to regulate in...
Read moreHacking ChatGPT by Planting False Memories into Its Data
October 1 2024This vulnerability hacks a feature that allows ChatGPT to have long-term memory, where it uses information from past conversations to inform future conversations with that same user. A researcher...
Read moreAI and the 2024 US Elections
September 30 2024For years now, AI has undermined the public’s ability to trust what it sees, hears, and reads. The Republican National Committee released a provocative ad offering an “AI-generated...
Read moreSquid Fishing in Japan
September 28 2024Fishermen are catching more squid as other fish are depleted. Blog moderation policy.
Read moreNIST Recommends Some Common-Sense Password Rules
September 27 2024NIST’s second draft of its “SP 800-63-4“—its digital identify guidelines—finally contains some really good rules about passwords:
The following requirements apply to passwords:
- lVerifiers and CSPs SHALL require passwords to... Read more
An Analysis of the EU’s Cyber Resilience Act
September 26 2024A good—long, complex—analysis of the EU’s new Cyber Resilience Act.
Read moreNew Windows Malware Locks Computer in Kiosk Mode
September 25 2024A malware campaign uses the unusual method of locking users in their browser’s kiosk mode to annoy them into entering their Google credentials, which are then stolen by...
Read more
Israel’s Pager Attacks and Supply Chain Vulnerabilities
September 24 2024Israel’s brazen attacks on Hezbollah last week, in which hundreds of pagers and two-way radios exploded and killed at least 37 people, graphically illustrated a threat that cybersecurity experts...
Read moreHacking the “Bike Angels” System for Moving Bikeshares
September 23 2024I always like a good hack. And this story delivers. Basically, the New York City bikeshare program has a system to reward people who move bicycles from full...
Read more
Recent Comments