The tendency to ask AI bots to explain themselves reveals widespread misconceptions about how they work. When something goes wrong with an AI assistant, our instinct is to ask it directly: “What happened?” or “Why did you do that?” It’s a natural impulse—after all, if a human makes a…
Exploits allow for persistent backdooring when targets open booby-trapped archive. A high-severity zero-day in the widely used WinRAR file compressor is under active exploitation by two Russian cybercrime groups. The attacks backdoor computers that open malicious archives attached to phishing messages, some of which are personalized. Security firm ESET…
OpenAI faces backlash as users complain about broken workflows and losing AI friends. It’s been less than a week since the launch of OpenAI’s new GPT-5 AI model, and the rollout hasn’t been a smooth one. So far, the release sparked one of the most intense user revolts in…
An encryption algorithm can have weaknesses that could allow an attacker to listen in. Two years ago, researchers in the Netherlands discovered an intentional backdoor in an encryption algorithm baked into radios used by critical infrastructure–as well as police, intelligence agencies, and military forces around the world–that made any…
Most companies downsizing office space say it’s because of hybrid work. Companies are monitoring whether employees adhere to corporate return-to-office (RTO) policies and are enforcing the requirements more than they have in the past five years, according to a report that commercial real estate firm CBRE will release next…
Running JavaScript from inside an image? What could possibly go wrong? Dozens of porn sites are turning to a familiar source to generate likes on Facebook—malware that causes browsers to surreptitiously endorse the sites. This time, the sites are using a newer vehicle for sowing this malware—.svg image files.…
Disclosure comes two months after Google warned the world of ongoing spree. In June, Google said it unearthed a campaign that was mass-compromising accounts belonging to customers of Salesforce. The means: an attacker pretending to be someone in the customer’s IT department feigning some sort of problem that required…
New model claims fewer confabulations, better coding, and “safe completions” approach. On Thursday, OpenAI announced GPT-5 and three variants—GPT-5 Pro, GPT-5 mini, and GPT-5 nano—what the company calls its “best AI system yet,” with availability for some of the models across all ChatGPT tiers, including free users. The new…
Why AI-based voice cloning is the next frontier in social-engineering attacks. By now, you’ve likely heard of fraudulent calls that use AI to clone the voices of people the call recipient knows. Often, the result is what sounds like a grandchild, CEO, or work colleague you’ve known for years…
Stopping people from falling for phishing attacks isn’t working. So what are organizations to do? Cisco said that one of its representatives fell victim to a voice phishing attack that allowed threat actors to download profile information belonging to users of a third-party customer relationship management system. “Our investigation…
