New research from Tel Aviv University, Technion, and Intuit reveals a technique called "HalluSquatting" that exploits AI hallucinations. Hackers can register fake software repository links predicted by AI, potentially leading to AI-enabled botnets and compromising computers.
Dutch authorities dismantled a massive botnet of over 17 million devices managed by 200 servers in the Netherlands, linked to Russia-based ASOCKS, which provides residential proxy services often used for illicit activities.
CrowdStrike, with Google and Shadowserver, dismantled the Glassworm botnet, which targeted open source software developers to spread malware and steal passwords, compromising over 300 GitHub repositories.
Google Chrome驚傳重大漏洞，恐將裝置變成殭屍網路一部分。此漏洞早在2022年底通報Google，但至今未修補，甚至已有概念驗證程式碼出現。此漏洞與「Browser Fetch」技術有關，攻擊者可利用其建立長時間背景連線。
Deutsche Sicherheitsbehörden warnen, dass Angreifer aus China internetfähige Heimgeräte kompromittieren. Die betroffenen Router oder Smart-TVs sollen Staatshackern helfen, ihre Spuren bei anderen Attacken zu verschleiern.
