Security
Google Warns of AI Bills as High as One Million Dollars
More than $100,000 in a single day and, in some cases, accumulated charges of up to one million: that is the cost Google and Mandiant attribute to att...
Security
Security
Binance reconstructs the theft: fake interviews, malware, and wallet control
A fake job interview helped open the door to Binance’s wallet infrastructure: an employee downloaded a supposed coding exercise that installed malwa...
Security
Playwright 1.64.1 includes vulnerable Chromium when browsing with AI agents
Playwright 1.64.1 includes Chromium without the patches for four vulnerabilities that Chrome has already fixed, a combination that could expose your c...
Security
Synology warns of C3RB3R attacks against NAS devices running outdated DSM
Synology has detected C3RB3R ransomware attacks against NAS devices running vulnerable versions of DiskStation Manager (DSM). The company says attacke...
Security
A shared link was enough to hijack a ChatGPT account
A public ChatGPT conversation could become a way to execute JavaScript with the session of the person who opened the link. Parameter demonstrated that...
Security
Google Cuts Off Videostrong After It Infects 1.3 Million TV Boxes
More than 1.3 million Android TV Boxes were incorporated into XCPE, a botnet that resold home internet connections and loaded malicious activity modul...
Security
More Than 1,000 GitLab Servers Still Exposed to Remote Code Execution Attacks
More than 1,000 GitLab servers accessible from the Internet remain unpatched against a critical vulnerability that is already being used in remote cod...
Security
319 Chrome Extensions Diverted Searches from 13.4 Million Users
319 Chrome extensions diverted users’ searches through servers controlled by their operators to earn advertising revenue from Bing and Yahoo. Socket...
Security
Drupal warns of attacks against Commerce Core and urges order reviews
Drupal has confirmed that attackers are exploiting a critical vulnerability in Commerce Core, the module that adds e-commerce features to sites built ...
Security
Ivanti Connect Secure: Three Flaws Enabled Unauthenticated Root Access
Two Ivanti Connect Secure (ICS) flaws are now listed in CISA’s Known Exploited Vulnerabilities catalog. The agency added them on October 30, after t...