21 Sep, 2024

X begins training Grok AI with your posts, here’s how to disable

X has quietly begun training its Grok AI chat platform using members’ public posts without first alerting anyone that it is doing it by default. As AI platforms war for dominance, they are constantly seeking data to train their large language models (LLMs). This makes your data very valuable. However, instead of asking for permission, most platforms use […]

3 mins read

PKfail Secure Boot bypass lets attackers install UEFI malware

Hundreds of UEFI products from 10 vendors are susceptible to compromise due to a critical firmware supply-chain issue known as PKfail, which allows attackers to bypass Secure Boot and install malware. As the Binarly Research Team found, affected devices use a test Secure Boot “master key”—also known as Platform Key (PK)—generated by American Megatrends International […]

3 mins read

Spain arrests three in pro-Russian DDoS crew takedown

Officials in Spain arrested three people as part of a takedown of a pro-Russia hacktivist group. The nation’s Ministry of Interior announced that three residents from different parts of the country were taken into custody for their alleged involvement in hacktivist crew NoName057(16). The three were not named and charges were not announced. The ministry […]

2 mins read

Microsoft releases Windows repair tool to remove CrowdStrike driver

Microsoft has released a custom WinPE recovery tool to find and remove the faulty CrowdStrike update that crashed an estimated 8.5 million Windows devices on Friday. On Friday, CrowdStrike pushed out a faulty update that caused millions of Windows devices worldwide to suddenly crash with a Blue Screen of Death (BSOD) and enter reboot loops. This glitch […]

3 mins read

Redmi K70 Ultra Extreme Edition: new leak reveals more details, 3840Hz PWM+DC dimming, 24GB RAM and more

New leaks from a popular Weibo leaker named Digital Chat Station just revealed many details of the Redmi K70 Ultra Extreme Edition ahead of launch. The device will have multiple variants going from a 12GB RAM + 256GB ROM configuration to a 24GB RAM + 1TB configuration. As revealed in the leak, the cheapest variant […]

1 min read

Email addresses of 15 million Trello users leaked on hacking forum

A threat actor has released over 15 million email addresses associated with Trello accounts that were collected using an unsecured API in January. Trello is an online project management tool owned by Atlassian. Businesses commonly use it to organize data and tasks into boards, cards, and lists. In January, GeekFeed reported that a threat actor known as ’emo’ […]

3 mins read

Fallout: London won’t be available for Epic Games Store players initially thanks to Bethesda’s mod-breaking update

Bethesda’s “next gen” update for Fallout 4 continues to cause problems. Released in April, two years after it was announced, the 14GB patch was impressive due to how little it actually changed, aside from breaking everyone’s precious mods. The timing couldn’t have been worse, either, coinciding as it did with the planned arrival of the […]

2 mins read

New phishing tactic hijacks email protections to mask links

Email security company Barracuda exposed a recent phishing campaign that uses legitimate URL protection services to mask malicious email links. The new phishing tactic was revealed in a Barracuda blog post Monday, and has been leveraged in attacks beginning around mid-May 2024. The attacks take advantage of the legitimacy of URL protection services used by […]

3 mins read

How AI can make security more proactive and less reactive

In November 2022, the wider world suddenly became aware of the power and potential of artificial intelligence as ChatGPT was made available to the general public. Yet information-security practitioners were already familiar with automation and machine learning, which they had been using for many years in the forms of security orchestration, automation and response (SOAR) […]

6 mins read