Nvidia wraps its NemoClaw around OpenClaw for security
… Briski describes OpenShell as an open-source safety and security runtime for agents. …
Search
OpenAI ChatGPT fixes DNS data smuggling flaw
Security OpenAI patches ChatGPT flaw that smuggled data over DNS Check Point says outbound controls blocked web traffic but overlooked DNS OpenAI talks up data security for its AI services, yet Check Point says that ChatGPT allowed data to leak through a DNS side channel before the flaw was fixed. …
Firefox finds a slew of new bugs with Claude's help
… "To be clear, the exploit that Claude wrote only works within a testing environment that intentionally removes some of the security features of modern web browsers," explained security researchers Evyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, and Daniel Freeman in a blog post . …
Scammers have virtual smartphones on speed dial for fraud
… Security vendor Group IB issued a report Wednesday into the misuse of ostensibly legitimate cloud phone platforms as tools for criminals to commit authorized push payment APP fraud. …
Russians posing as Signal support to launch phishing raids
… INFOSEC IN BRIEF Russian intelligence-affiliated parties are posing as customer support services on commercial messaging applications such as Signal to compromise accounts and conduct phishing attacks, the FBI and Cybersecurity and Infrastructure Security Agency CISA warned last Friday. …
ShinyHunters claims yet another Salesforce customers breach
… Plus, uncheck "Allow guest users to access public APIs" in site settings and uncheck "API Enabled" in the guest user profile's System Permissions. ® security salesforce google cloud cybercrime cyber-crime
Switzerland built an alternative to BGP. Nobody noticed
… "But the same controllability could be misused by totalitarian approaches to government. It's then fully controllable. It will help reduce dependencies on allies who might turn evil. But it could also be misused as a weapon against a free internet. …
Claude Desktop changes software permissions without consent
… But Hanff claims he never installed any Anthropic browser extensions due to privacy and security concerns. Claude Desktop did so for him, without disclosure or permission. Browser extensions magnify security and privacy challenges because they often request overly broad permissions. …