#steganography-clickfix
#steganography-clickfix
[ follow ]
#deepfakes #cybersecurity #misinformation #privacy #data-exfiltration #social-engineering #data-security #ai
Photography
fromwww.dw.com
1 month agoLong before AI, fake photos were already popular
Image manipulation predates modern technology by nearly two centuries, with photography's invention in 1837 immediately followed by techniques to alter and fake images for political, commercial, and entertainment purposes.
Information security
fromThe Hacker News
1 month agoHive0163 Uses AI-Assisted Slopoly Malware for Persistent Access in Ransomware Attacks
AI-generated malware Slopoly enables threat actors to develop malware frameworks significantly faster, demonstrating the weaponization of AI for cybercriminal purposes.
Law
fromAbove the Law
1 month agoHate To Say I Told You So Again: Your Chats Ain't Private - Above the Law
Communications with GenAI platforms lack attorney-client privilege protection because they occur between a client and a machine, not a lawyer, and are not confidential under platform terms of service.
fromElectronic Frontier Foundation
2 months agoBeware: Government Using Image Manipulation for Propaganda
A short while later, the White House posted the same photo - except that version had been digitally altered to darken Armstrong's skin and rearrange her facial features to make it appear she was sobbing or distraught. The Guardian one of many media outlets to report on this image manipulation, created a handy slider graphic to help viewers see clearly how the photo had been changed.
US politics
fromTechzine Global
1 month agoInfostealer steals identity of AI agent OpenClaw
Security researchers have discovered a live infection in which an infostealer has stolen the configuration files of an OpenClaw AI agent. The attack was carried out through a broad file-theft routine that automatically searched for sensitive file extensions and specific folder names, including .openclaw. The malware was not specifically designed for OpenClaw; it arose by chance from capturing the operational context of the victim's AI assistant. What makes the attack particularly serious is the combination of stolen data.
Information security
Artificial intelligence
fromFast Company
2 months agoAI can now fake the videos we trust most. How to tell the difference-and how newsrooms can respond
AI-generated videos now convincingly mimic trusted eyewitness formats, making fake footage indistinguishable from real and undermining information reliability.
Information security
fromTechCrunch
2 months agoExclusive: Hacktivist scrapes over 500,000 stalkerware customers' payment records
More than 536,000 customer payment records from Struktura's stalkerware services were scraped, exposing emails, partial card details, and purchased surveillance app subscriptions.
fromThe Hacker News
2 months agoInfostealer Steals OpenClaw AI Agent Configuration Files and Gateway Tokens
Cybersecurity researchers disclosed they have detected a case of an information stealer infection successfully exfiltrating a victim's OpenClaw (formerly Clawdbot and Moltbot) configuration environment. "This finding marks a significant milestone in the evolution of infostealer behavior: the transition from stealing browser credentials to harvesting the 'souls' and identities of personal AI [artificial intelligence] agents," Hudson Rock said. Alon Gal, CTO of Hudson Rock, told The Hacker News that the stealer was likely a variant of Vidar based on the infection details.
Information security
fromZDNET
2 months agoThis new 'sleeperware' doesn't set off alarms or crash your system - it sneaks in and waits
In its annual Red Report, a body of research that analyzes real-world attacker techniques using large-scale attack simulation data, Picus Labs warns cybersecurity professionals that threat actors are rapidly shifting away from ransomware encryption to parasitic "sleeperware" extortion as their means to loot organizations for millions of dollars per attack. Released today and now in its sixth year, the 278-page Red Report gets its name from Picus-organized cybersecurity exercises that take the perspective of the attacker's team, otherwise known as the "red team."
Information security
Information security
fromThe Hacker News
2 months agoSecurity Bug in StealC Malware Panel Let Researchers Spy on Threat Actor Operations
A cross-site scripting vulnerability in StealC's web control panel allowed extraction of system fingerprints, session monitoring, and cookie theft from the malware's infrastructure.
[ Load more ]