The incident was the result of fraudsters using social engineering techniques on a customer support employee.
Unknown attackers tried Attack the popular investment and trading platform Robinhood, gained access to the email addresses and full names of its clients and demanded a ransom.
“Unauthorized third parties have gained access to a limited amount of personal information of some of our users,” the company said.
According to representatives of Robinhood, the attack was contained, and no financial damage was caused to the clients.
The incident, which took place on November 3, 2021, was the result of attackers using social engineering techniques on a customer support employee. Unknown persons convinced the employee that they had the right to access “support systems for a specific client”, and received from him access to the e-mail addresses of about 5 million customers and the full names of about 2 million customers.
However, for a smaller number of customers, the leak has become much more serious.
“We also believe that a limited number of people (a total of 310 people) have had additional personal information compromised, including names, dates of birth, zip codes, and ten users have had more detailed account information compromised,” they said. companies.
Having gained access to the data, the attackers demanded a ransom from the company.
Hackers hacked Tesla twice, for which they received 350 thousand dollars and Tesla Model 3
As part of Pwn2Own’s Vancouver-based commercial vulnerability finding event, a French team called Synacktiv managed to hack into Tesla systems twice.
On the first day, Synacktiv successfully performed a TOCTOU (Time-of-check to time-of-use) attack on the Tesla Gateway, and the group was rewarded with a $100,000 cash reward and a Tesla Model 3 car. And the next day hackers broke into the Tesla infotainment system, and received another 250 thousand dollars for this.
The Tesla cybersecurity team is already analyzing the actions of hackers in order to eliminate the vulnerabilities found with a firmware update.
Scissors undercut: Windows 11 vulnerability reveals sensitive information from screenshots, including deleted parts
A dangerous vulnerability has been discovered in one of the standard Windows 11 applications that could lead to the disclosure of sensitive information to the user. Moreover, at the moment the vulnerability is not closed and attackers can use it.
We are talking about the application Snipping Tool (Scissors). The vulnerability, called aCropalypse, allows you to undo changes made by a user when editing a screenshot, including cropped or blurred parts that hide sensitive data.
When you edit a screenshot, you can save it with the same name as the original file by overwriting it. However, as it turns out, the Windows 11 Snipping Tool does not remove the original information from the file, but simply leaves it added at the end, which is usually invisible to users. With some trickery, a potential attacker can extract hidden information from a file and see what information has been edited.
As you can see, edited screenshots are usually much larger due to the inclusion of information from the original image.
This is a pretty serious vulnerability. For example, if you share a screenshot of an order confirmation page on Amazon, it may contain an address, the same goes for credit card numbers and other sensitive data.
In 2018, Google had an AI ready for a ChatGPT-style chatbot, but it was closed due to security issues.
In recent months, the ChatGPT chatbot has been on the news pages, and this has forced many companies to catch up with OpenAI. Among them are Microsoft, Google and a number of Chinese corporations. However, reportedly, the situation could be different.
As early as 2018, Google is said to have had a natural language processing AI similar to ChatGPT. However, company executives closed the project, considering it too dangerous. One of the developers was research engineer Daniel De Freitas, and Noam Shazeer, a software engineer at Google, also contributed to the project.
The project was called Meena and was a chatbot that could talk about different topics. With him you could discuss TV shows, have discussions about philosophy and joke. At the same time, the developers believed that this technology could be added to the search engine, however, in the end, Google stopped development. The company said the bot did not meet its AI security standards.
Note that later, on the basis of these developments, the LaMDA chat bot was created, which flies into the basis of Bard. Thus, the development nevertheless reached the mass user, albeit with a great delay.
Realme C55 for $130 became a hit in India: 100,000 smartphones sold in 5 hours
The first day of sales of the budget smartphone Realme C55 in India ended very successfully: the company sold 100,000...
For 2.5 years, motherboards of well-known brands like MSI, Gigabyte and ASRock have risen in price in Europe by 35-40%
The data of the largest German retailer suggests that motherboards from well-known manufacturers have risen in price significantly in the...
Crypto exchange Binance hid secret ties with China
Crypto exchange Binance has been hiding ties to China for several years, which contradicts management’s claims of leaving the country...
Sony ZV-E1 unveiled, the manufacturer’s smallest full-frame mirrorless camera
Sony today officially unveiled its latest full-frame mirrorless camera, the ZV-E1. This model is aimed at videographers, it shares a...
News6 days ago
Duster will receive an improved successor: Dacia Bigster will be launched into mass production
Components3 days ago
Resident Evil 4 favors Radeon RX 7000 graphics cards. Even with ray tracing, the RX 7900 XTX is faster than the RTX 4080
Electric Cars3 days ago
The first Geely crossover with Meizu Flyme Auto interface, Harman Kardon acoustics and a 92-inch projection screen. Lynk & Co 08 introduced
Components4 days ago
10-core processor Intel Core i5-12600K fell in price in the US by almost a third