Biz & IT / Informed technology

  1. 384,000 sites pull code from sketchy code library recently bought by Chinese firm

    Many website admins, it seems, have yet to get memo to remove Polyfill[.]io links.

  2. “RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux

    Full system compromise possible by peppering servers with thousands of connection requests.

  3. 3 million iOS and macOS apps were exposed to potent supply-chain attacks

    Apps that used code libraries hosted on CocoaPods were vulnerable for about 10 years.

  4. Inside a violent gang’s ruthless crypto-stealing home invasion spree

    More than a dozen men threatened, assaulted, tortured, or kidnapped 11 victims.

  5. Researchers craft smiling robot face from living human skin cells

    Human cells isolated from juvenile foreskin are flexible enough to grin when moved.

  6. OpenAI’s new “CriticGPT” model is trained to criticize GPT-4 outputs

    Research model catches bugs in AI-generated code, improving human oversight of AI.

  7. Mac users served info-stealer malware through Google ads

    Full-service Poseidon info stealer pushed by "advertiser identity verified by Google."

  8. AI-generated Al Michaels to provide daily recaps during 2024 Summer Olympics

    AI voice clone will narrate daily Olympics video recaps; critics call it a "code-generated ghoul."

  9. Critical MOVEit vulnerability puts huge swaths of the Internet at severe risk

    A similar flaw last year left 1,800 networks breached. Will the latest one be as potent?

  10. Toys “R” Us riles critics with “first-ever” AI-generated commercial using Sora

    AI-generated commercials are here, and critics are displeased—but human work is still key.

  11. Researchers upend AI status quo by eliminating matrix multiplication in LLMs

    Running AI models without floating point matrix math could mean far less power consumption.

  12. Backdoor slipped into multiple WordPress plugins in ongoing supply-chain attack

    Malicious updates available from WordPress.org create attacker-controlled admin account.

  1. Music industry giants allege mass copyright violation by AI firms

    Suno and Udio could face damages of up to $150,000 per song allegedly infringed.

  2. Anthropic introduces Claude 3.5 Sonnet, matching GPT-4o on benchmarks

    Claude 3.5 Sonnet is a speedy mid-sized entry in a new family of AI models.

  3. Single point of software failure could hamstring 15K car dealerships for days

    "Cyber incident" affecting 15K dealers could mean outages "for several days."

  4. Ex-OpenAI star Sutskever shoots for superintelligent AI with new company

    Safe Superintelligence, Inc. seeks to build hypothetical AI far beyond human capability.

  5. Runway’s latest AI video generator brings giant cotton candy monsters to life

    New Gen-3 Alpha AI video generator can create detailed humans and surreal situations.

  6. Men plead guilty to aggravated ID theft after pilfering police database

    Members of group called ViLE face a minimum of two years in prison.

  7. Softbank plans to cancel out angry customer voices using AI

    Real-time voice modification tech seeks to reduce stress in call center staff.

  8. High-severity vulnerabilities affect a wide range of Asus router models

    Many models receive patches; others will need to be replaced.

  9. Proton is taking its privacy-first apps to a nonprofit foundation model

    Because of Swiss laws, there are no shareholders, and only one mission.

  10. Ransomware attackers quickly weaponize PHP vulnerability with 9.8 severity rating

    TellYouThePass group opportunistically infects servers that have yet to update.

  11. Retired engineer discovers 55-year-old bug in Lunar Lander computer game code

    A physics simulation flaw in text-based 1969 computer game went unnoticed until today.

  12. “Simulation of keyboard activity” leads to firing of Wells Fargo employees

    With worker surveillance on the rise, vendors sell devices to fake keyboard and mouse movement.

  1. Report: Apple isn’t paying OpenAI for ChatGPT integration into OSes

    Apple thinks pushing OpenAI’s brand to hundreds of millions is worth more than money.

  2. Turkish student creates custom AI device for cheating university exam, gets arrested

    Elaborate scheme involved hidden camera and an earpiece to hear answers.

  3. New Stable Diffusion 3 release excels at AI-generated body horror

    Users react to mangled SD3 generations and ask, "Is this release supposed to be a joke?"

  4. One of the major sellers of detailed driver behavioral data is shutting down

    Selling "hard braking event" data seems less lucrative after public outcry.

  5. China state hackers infected 20,000 Fortinet VPNs, Dutch spy service says

    Critical code-execution flaw was under exploitation 2 months before company disclosed it.

  6. Apple and OpenAI currently have the most misunderstood partnership in tech

    Apple's AI moves are nothing new for a company that has integrated outside tech for decades.

  7. Hackers steal “significant volume” of data from hundreds of Snowflake customers

    Given shortcomings of Snowflake and its customers, there's plenty of blame to go around.

  8. Apple unveils “Apple Intelligence” AI features for iOS, iPadOS, and macOS

    Apple debuts new catchall AI branding, generative features during WWDC 2024 keynote.

  9. Nasty bug with very simple exploit hits PHP just in time for the weekend

    With PoC code available and active Internet scans, speed is of the essence.

  10. VMware customers may stay, but Broadcom could face backlash “for years to come”

    300 director-level IT workers making VMware decisions were questioned.

  11. 7,000 LockBit decryption keys now in the hands of the FBI, offering victims hope

    The announcement could be good news for those whose data has been inaccessible.

  12. DuckDuckGo offers “anonymous” access to AI chatbots through new service

    DDG offers LLMs from OpenAI, Anthropic, Meta, and Mistral for factually-iffy conversations.