Security

A joint statement from ODNI, FBI, and CISA follows up on last month’s reports about Iranian Election Influence Efforts, which Iran’s government has denied.

From a blog post:

The FCC investigated AT&T’s “supply chain integrity” after hackers stole customer data from a vendor’s cloud environment in January 2023. “AT&T failed to ensure the vendor: (1) adequately protected the customer information, and (2) returned or destroyed it as required by contract,” the FCC says.

“Today, we’ll start migrating voice and video in DMs, Group DMs, voice channels, and Go Live streams to use E2EE,” Discord’s Stephen Birarda writes in a blog post. Discord is rolling out the ability to log in to Discord using passkeys, too.

Wired weighs in against the theory that pager batteries were overheated by a cyberattack to cause today’s fatal explosions, concluding an electronics shipment was more likely compromised and packed with explosives — and noting it wouldn’t be the first time that’s happened.

With the “GAZEploit” attack, researchers found they could predict what somebody was typing on the Vision Pro’s virtual keyboard by analyzing the eye movements of their Persona, according to Wired.

A hacker tricked ChatGPT to share details on how to make a bomb in part by instructing it to play a game, TechCrunch reports. It’s the latest loophole to get around ChatGPT’s safety guardrails.

The company now offers up to $250,000 to people who find, detail, and demonstrate remote code execution vulnerabilities in Chrome. That more than doubles Chrome’s previous top payout, which sat at $100,115.

As reported by 404 Media, a survey from the anti-human trafficking nonprofit Thorn revealed that 1 in 10 minors said they knew of peers who used AI to create nudes of other kids:

The web browser and search startup confirmed to TechCrunch that 27 roles have been axed, but provided no explanation for the cuts.

The Washington Post reports Jesse Kipf pleaded guilty to computer fraud and identity theft charges for using a doctor’s login to falsify a death certificate and attempting to sell access to death registry systems.

“The [intelligence community] is confident that the Iranians have through social engineering and other efforts sought access to individuals with direct access to the presidential campaigns of both political parties,” according to a joint ODNI, FBI, and CISA statement.

The program, which paid security researchers up to $20,000 to locate vulnerabilities in popular Android apps, is being shuttered after seven years due to “a decrease in the number of actionable vulnerabilities reported.”

As reported by Bleeping Computer, Google is testing a new experimental flag that can hide sensitive content while “screen sharing, screen recording and similar actions” in regular tabs — redacting the user’s entire screen if things like credit card details or passwords are detected.