Hackers got a four-day head start on epic PHP2Shell vulnerability
Amazon has warned that vulnerabilities in a programming language that underpins much of the Internet, discovered using AI tools, are being “broadly exploited” as governments and companies rush to secure their systems.
The world’s largest cloud computing provider on Wednesday said it had identified an attempt by hackers to exploit the bug four days before the weakness was disclosed to the public.
Amazon added the flaws were “now being broadly exploited in the wild.”
Read full article
Comments
Les actualités sont collectées automatiquement depuis des flux publics robotique & IA.
Articles liés
OpenAI, Anthropic, and Nvidia had record lobbying quarters
It was a busy summer for AI lobbyists. Anthropic, OpenAI, and Nvidia each had their highest-spending lobbying quarter between July and September, federal disclosures show. Nvidia spent the most of the group at $2.2 million, followed by Anthropic's $2.1 million and OpenAI's $1.5 million. Compared to
1Password lets AI agents use your passwords without seeing them
1Password is introducing a new feature that allows AI agents to sign into your accounts without actually seeing or handling your passwords. The aptly named 1Password for Agents doesn't give bots free reign to access all of your connected accounts - you'll still need to grant approval for sign-in req
Eiliko maker says it’s hiring an ‘independent security firm’ after Verge report on its insecure robots
Eiliko, a cute robot charm you can hang on your bag with built-in AI conversations, turned out to be a security nightmare. It told owners that "your secrets are safe with me," but hackers could easily read complete transcripts of everything we told the toy, and that was just the beginning. The Verge
PHP: The three little letters wreaking havoc across the web
Two vulnerabilities found in the programming language PHP put enormous swaths of the internet in danger. By some accounts, up to 70 percent of websites use PHP in some capacity. It powers Wikipedia, WordPress, Drupal, and a host of other popular sites and platforms, including DeviantArt and 4Chan, w
AI agents are ready to shop. Some retailers are wary
Using an AI agent to shop for you is a strange experience. Tech companies have marketed them as personal assistants - the democratizing of labor that ordinarily would only be available to the rich and powerful. In practice, at least for buying things, it's more like sending an anxious and apologetic
Spotify’s current AI bet is about being the music service that agents choose
Spotify co-CEO Gustav Söderström explains why the rise of AI agents could be good news for the music service.