Cybersecurity researchers at Microsoft have identified a critical vulnerability that could allow attackers to determine conversation topics with AI chatbots, even when communications are fully encrypted. Microsoft’s Defender Security Research Team has disclosed a novel side-channel attack, dubbed “Whisper Leak,” that targets remote language models. The attack exploits patterns in network traffic to infer sensitive

Continue Reading

Tenable Research has disclosed multiple vulnerabilities in OpenAI’s ChatGPT that could allow attackers to steal private information from users’ memories and chat history without their knowledge. The vulnerabilities, discovered through months of investigation and responsibly disclosed in March 2024, have since been fully patched by OpenAI. The vulnerabilities center around prompt injection, a known weakness

Continue Reading

QNAP has released security updates addressing multiple critical vulnerabilities in several of its applications, including a severe SQL injection flaw in QuMagie, the company’s photo management application for network-attached storage (NAS) devices. SQL injection occurs when an attacker can insert malicious code into database queries, potentially allowing them to view, modify, or delete data they

Continue Reading

Google’s TAG (Threat Intelligence Group) has reported identification of malware actively querying AI language models during attacks to generate code on the fly and evade detection. The discovery marks a shift from attackers using AI as a productivity tool to deploying malware with built-in AI capabilities that adapt in real time. Google identified five new

Continue Reading

Four security flaws allowed message manipulation and caller ID spoofing; all issues resolved after responsible disclosureFour security flaws in Microsoft Teams has that allowed attackers to impersonate executives, manipulate messages, and forge identities in video calls have been patched. Disclosed by Check Point Research, the flaws, affecting the platform’s 320+ million monthly users, have been

Continue Reading

Google has recently pushed out an urgent Chrome security update, patching five vulnerabilities that could leave users exposed to attacks while browsing. Three of the flaws are rated high-severity, prompting security experts to urge immediate updates. The rollout of Chrome 142 began yesterday and will reach users gradually over the coming weeks across Windows, Mac,

Continue Reading