Smart home assistants at risk from “NUIT” ultrasound attack

Categories: News

Tags: ultrasound

Tags: NUIT

Tags: speakers

Tags: microphone

Tags: device

Tags: IoT

Tags: assistant

Tags: alexa

Tags: siri

Tags: google

Tags: silent

We take a look at research for an IoT attack called NUIT, capable of hijacking voice assistants via ultrasonic attack.

(Read more…)

The post Smart home assistants at risk from “NUIT” ultrasound attack appeared first on Malwarebytes Labs.

Read more

Tech big wigs: Hit the brakes on AI rollouts

More than 1,100 technology luminaries, leaders and scientists have issued a warning against labs performing large-scale experiments with artificial intelligence (AI) more powerful than ChatGPT, saying the technology poses a grave threat to humanity.

In an open letter published by The Future of Life Institute, a nonprofit organization that aims is to reduce global catastrophic and existential risks to humanity, Apple co-founder Steve Wozniak, SpaceX and Tesla CEO Elon Musk, and MIT Future of Life Institute President Max Tegmark joined other signatories in saying AI poses “profound risks to society and humanity, as shown by extensive research and acknowledged by top AI labs.”

To read this article in full, please click here

Read more

A week in security (March 20 – 26)

Categories: News

Tags: potentially unwanted programs

Tags: PUP

Tags: ViLE

Tags: Google

Tags: Magecart

Tags: skimmer

Tags: skimming

Tags: NBA

Tags: Google Pixel crop

Tags: Kritec Magecart

Tags: fake IRS tax mail

Tags: Emotet

Tags: BreachForums

Tags: Bitcoin ATM

Tags: Bitcoin

Tags: USB bomb

Tags: USB

Tags: ChatGPT

The most interesting security related news from the week of March 20 – 26.

(Read more…)

The post A week in security (March 20 – 26) appeared first on Malwarebytes Labs.

Read more

Google Suspends Chinese E-Commerce App Pinduoduo Over Malware

Credit to Author: BrianKrebs| Date: Wed, 22 Mar 2023 23:11:08 +0000

Google says it has suspended the app for the Chinese e-commerce giant Pinduoduo after malware was found in versions of the app. The move comes just weeks after Chinese security researchers published an analysis suggesting the popular e-commerce app sought to seize total control over affected devices by exploiting multiple security vulnerabilities in a variety of Android-based smartphones.

Read more

Google Pixel: Cropped or edited images can be recovered

Categories: Exploits and vulnerabilities

Categories: News

Tags: Google

Tags: Pixel

Tags: Markup

Tags: CVE-2023-21036

Tags: recover

Tags: PNG

Tags: truncated

A vulnerability in the Markup tool that comes pre-installed on Pixel phones allows anyone with access to the edited image to view parts of the original.

(Read more…)

The post Google Pixel: Cropped or edited images can be recovered appeared first on Malwarebytes Labs.

Read more

Google reveals 18 chip vulnerabilities threatening mobile, wearables, vehicles

Categories: News

Tags: android

Tags: google

Tags: samsung

Tags: chip

Tags: VoLTE

Tags: modem

Tags: chipset

Tags: vulnerability

Tags: pixel

Tags: CVE-2023-24033

We take a look at multiple vulnerabilities highlighted by Google’s Project Zero team, and what you can do to ward off the threat of attack.

(Read more…)

The post Google reveals 18 chip vulnerabilities threatening mobile, wearables, vehicles appeared first on Malwarebytes Labs.

Read more

Update now! February’s Patch Tuesday tackles three zero-days

Categories: Exploits and vulnerabilities

Categories: News

Tags: patch Tuesday

Tags: Microsoft

Tags: Apple

Tags: Adobe

Tags: SAP

Tags: Citrix

Tags: Cisco

Tags: Atlassian

Tags: Google

Tags: Mozilla

Tags: Forta

Tags: OpenSSH

Tags: CVE-2023-21823

Tags: CVE-2023-21715

Tags: OneNote

Tags: CVE-2023-23376

Tags: CVE-2023-21706

Tags: CVE-2023-21707

Tags: CVE-2023-21529

Tags: CVE-2023-21716

Tags: CVE-2023-23378

Tags: CVE-2023-22501

Tags: CVE-2023-24486

Tags: CVE-2023-24484

Tags: CVE-2023-24484

Tags: CVE-2023-24483

Tags: CVE-2023-25136

Tags: GoAnywhere

Microsoft has released updates to patch three zero-days and lots of other vulnerabilities and so have several other vendors

(Read more…)

The post Update now! February’s Patch Tuesday tackles three zero-days appeared first on Malwarebytes Labs.

Read more