⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Research by: Alexey Bukhteyev Key Takeaways AI can turn high-level malicious ideas into concrete techniques, and can independently design and implement...
Check Point Research discovered a novel browser-based ransomware technique that leverages AI-generated code to exploit the File System Access API in Google Chrome on Android. The attack, dubbed "In-Browser Ransomware," requires no native payload, browser exploit, or root access.
This research explores how AI can generate novel browser-based ransomware techniques. It shows that DeepSeek connected AI hallucinations with real browser capabilities to create a plausible attack using the File System Access API. The technique is particularly concerning on Android, where photo directories can be accessed after user approval via a fake AI image enhancement prompt.
This article discusses how attackers can exploit AI hallucinated domain names to perform phantom squatting. By registering domains that large language models incorrectly generate, attackers can target software supply chains.
Unit 42's analysis of phantom squatting reveals how attackers exploit LLM domain hallucinations to register domains that AI models falsely generate. These hallucinated domains become vectors for software supply chain attacks when developers use AI-generated code without verification.
Unit 42's analysis of phantom squatting reveals how attackers exploit LLM domain hallucinations to register domains that AI models falsely generate. These hallucinated domains become vectors for software supply chain attacks when developers use AI-generated code without verification.