Category: Security technology

Auto Added by WPeMatico

Subverting AIOps Systems Through Poisoned Input Data

Posted on By infossl
academic papers, AI, cyberattack, integrity, LLM, Security technology, Uncategorized

In this input integrity attack against an AI system, researchers were able to fool AIOps tools: AIOps refers to the use of LLM-based agents to gather and analyze application telemetry, including system logs, performance metrics, traces, and alerts, to detect problems and then suggest or carry out corrective actions. The likes of Cisco have deployed … Read More “Subverting AIOps Systems Through Poisoned Input Data” »

Zero-Day Exploit in WinRAR File

Posted on By infossl
exploits, malware, russia, Security technology, Uncategorized, zero-day

A zero-day vulnerability in WinRAR is being exploited by at least two Russian criminal groups: The vulnerability seemed to have super Windows powers. It abused alternate data streams, a Windows feature that allows different ways of representing the same file path. The exploit abused that feature to trigger a previously unknown path traversal flaw that … Read More “Zero-Day Exploit in WinRAR File” »

Trojans Embedded in .svg Files

Posted on By infossl
malware, pornography, Security technology, Uncategorized

Porn sites are hiding code in .svg files: Unpacking the attack took work because much of the JavaScript in the .svg images was heavily obscured using a custom version of “JSFuck,” a technique that uses only a handful of character types to encode JavaScript into a camouflaged wall of text. Once decoded, the script causes … Read More “Trojans Embedded in .svg Files” »

LLM Coding Integrity Breach

Posted on By infossl
AI, integrity, LLM, Security technology, Uncategorized

Here’s an interesting story about a failure being introduced by LLM-written code. Specifically, the LLM was doing some code refactoring, and when it moved a chunk of code from one file to another it changed a “break” to a “continue.” That turned an error logging statement into an infinite loop, which crashed the system. This … Read More “LLM Coding Integrity Breach” »

The “Incriminating Video” Scam

Posted on By infossl
phishing, scams, Security technology, social engineering, Uncategorized, video

A few years ago, scammers invented a new phishing email. They would claim to have hacked your computer, turned your webcam on, and videoed you watching porn or having sex. BuzzFeed has an article talking about a “shockingly realistic” variant, which includes photos of you and your house—more specific information. The article contains “steps you … Read More “The “Incriminating Video” Scam” »