Windows Charset Conversion Feature Exploited to Execute Remote Code
Security researchers have uncovered a critical vulnerability in Windows stemming from its “Best-Fit” character conversion feature.
Read More
Getting salty with LLMs: SophosAI unveils new defense against jailbreaking at CAMLIS 2025
On October 22-24, SophosAI will present research on ‘LLM salting’ (a novel countermeasure against jailbreaks) and command line classification at CAMLIS 2025
GitHub Is Showing the Trump Administration Scrubbing Government Web Pages in Real Time
You can see the specific steps that a government agency is taking to comply with the Trump administration’s policies against diversity, equity, and inclusion on the agency’s GitHub, which shows it frantically deleting and editing various documents, employee handbooks, Slack bots, and job listings across everything the agency touches. 18F is a much-hyped government agency…
Google’s AI Is Destroying Search, the Internet, and Your Brain
Yesterday the Pew Research Center released a report based on the internet browsing activity of 900 U.S. adults which found that Google users who encounter an AI summary are less likely to click on links to other websites than users who don’t encounter an AI summary. To be precise, only 1 percent of users who…
Almost Every State Has Its Own Deepfakes Law Now
It’s now illegal in Michigan to make AI-generated sexual imagery of someone without their written consent. Michigan joins 47 other states in the U.S. that have enacted their own deepfake laws. Michigan Governor Gretchen Whitmer signed the bipartisan-sponsored House Bills 4047 and its companion bill 4048 on August 26. In a press release, Whitmer specifically…
SimpleHelp Remote Access Software Exploited in Attacks
Threat actors have been exploiting SimpleHelp remote access software shortly after the disclosure of three vulnerabilities.
Mayo Clinic is Using AI to Listen to Emergency Room Visits
Mayo Clinic, the massive U.S. hospital network, is using what it describes as “Ambient Listening” to record patient interactions with nurses, including in emergency rooms, then using AI to process that collected data. The recording is opt-out, rather than opt-in, and at least some patients are likely not aware the recording is happening. The recording…
Subaru Security Flaws Exposed Its System for Tracking Millions of Cars
Now-fixed web bugs allowed hackers to remotely unlock and start millions of Subarus. More disturbingly, they could also access at least a year of cars’ location histories—and Subaru employees still can.
HPN Holdings to Acquire Cybeta, Ex-NSA Team’s Advanced Cybersecurity Software Firm
HPN Holdings signs LOI to acquire Cybeta, whose patented threat detection software, developed by former NSA experts, recently uncovered a major foreign infrastructure breach.