The Hacker News پنجشنبه ۱۴ آبان ۱۴۰۵ · ۱۲:۱۲

CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access

The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and Insurance (BFSI) sectors in the country. Describing the threat as active and ongoing, the activity involves the use of publicly-available AI-driven offensive security tools

AI Security Threat Intelligence AI & Machine Learning

Read the full article at The Hacker News Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CSO Online جمعه ۱۵ آبان ۱۴۰۵ · ۱۵:۰۷

Railway’s AI agents go off the track on a rival’s network

AI agents operated by cloud infrastructure and application hosting platform, Railway, have attempted to access a rival platform’s infrastructure, prompting the cloud provider’s leadership to acknowledge the incident on social media. Railway senior product engineer Jake Runzer acknowledged running agents to perform signups and agentic testing on similar platforms after Primcloud founder Josh Manders publicly questione…

Vulnerabilities & Zero-Day Data Breach Cloud Security

Source

The Hacker News جمعه ۱۵ آبان ۱۴۰۵ · ۱۵:۰۰

The Flood is Coming And The Pipes Were Already Full

An update on Athena, and some unsolicited predictions on what's coming next On Saturday, Dario Amodei published We Must Pace the Frontier. I agree with him. Go read it if you haven't. I've spent the summer looking at what these models find, and the gap he describes between what they can do and what the rest of us are ready for is the one I've been staring at since May. The hardest piece of his

Source

CSO Online جمعه ۱۵ آبان ۱۴۰۵ · ۱۴:۴۴

CPython flaw exposes AI inference servers to sandbox escape attacks

A memory-safety flaw in CPython can allow malicious AI model templates to escape code sandboxes and execute arbitrary code inside inference servers, according to security researchers at RunSybil. “By exploiting this vulnerability, attackers could gain a foothold inside servers responsible for processing millions of user requests,” Darius Houle, a security researcher at RunSybil, wrote in a blog post. “They also could…

Vulnerabilities & Zero-Day AI Security Supply Chain Security

Source

شهر سخت‌افزار جمعه ۱۵ آبان ۱۴۰۵ · ۱۴:۳۰

اینستاگرام نسخه دسکتاپ برنامه Edits را منتشر کرد؛ تدوین حرفه‌ای ویدیوها با کمک هوش مصنوعی

اینستاگرام امروز نسخه دسکتاپ اپلیکیشن ویرایش ویدیوی Edits را منتشر کرد. این نسخه با هدف فراهم کردن ابزارهای حرفه‌ای‌تر برای تولیدکنندگان محتوا طراحی شده و نسبت به نسخه مربوط به گوشی‌های هوشمند قابلیت‌های بهتری همچون تایم‌لاین چندلایه، ویرایش دقیق صدا، اصلاح پیشرفته رنگ، خروجی ۴K بدون واترمارک و اتصال به دستیارهای هوش مصنوعی با پروتکل MCP را در اختیار کاربران قرار می‌دهد.

AI Security AI & Machine Learning

Source