Researchers jimmy OpenAI’s and Google’s closed models

March 13, 2024 at 04:38AM Researchers have successfully uncovered hidden aspects of transformer models in OpenAI and Google through an attack that illuminates a portion of these “black box” models. The attack, accomplished for a range of costs and analyzed by a team of computer scientists, has prompted recommendations to regulate the release of advanced … Read more

Over 225,000 Compromised ChatGPT Credentials Up for Sale on Dark Web Markets

March 5, 2024 at 06:45AM Group-IB findings show over 225,000 compromised OpenAI ChatGPT credentials up for sale on underground markets. The credentials were linked to LummaC2, Raccoon, and RedLine malware, with a 36% increase in infiltrated hosts between June and October 2023. Nation-state actors are using AI and large language models for cyber attacks, posing … Read more

How to weaponize LLMs to auto-hijack websites

February 17, 2024 at 06:46AM Computer scientists at the University of Illinois Urbana-Champaign have shown that large language models (LLMs) like GPT-4 can be weaponized to autonomously compromise vulnerable websites. Their agents demonstrated the ability to perform complex tasks without prior knowledge of the vulnerabilities, raising concerns about the potential for autonomous hacks by highly … Read more

OpenAI blocks state-sponsored hackers from using ChatGPT

February 15, 2024 at 11:05AM OpenAI removed state-sponsored threat groups’ accounts from Iran, North Korea, China, and Russia, misusing its ChatGPT chatbot for malicious purposes. Microsoft provided key information, and the threat groups exploited ChatGPT for a variety of activities including research, social engineering, and intelligence gathering. OpenAI and Microsoft aim to monitor and disrupt … Read more

Microsoft, OpenAI Warn of Nation-State Hackers Weaponizing AI for Cyberattacks

February 14, 2024 at 09:46AM Nation-state actors from Russia, North Korea, Iran, and China are leveraging artificial intelligence and large language models (LLMs) to enhance their cyber attacks. Microsoft and OpenAI published a report detailing disruptions to state-affiliated actors’ malicious cyber activities. The report also highlights the use of AI technologies across various phases of … Read more

ChatGPT Violated European Privacy Laws, Italy Tells Chatbot Maker OpenAI

January 30, 2024 at 11:54AM Italian regulators informed OpenAI that its ChatGPT chatbot violated the European Union’s data privacy regulations. The country’s data protection authority, Garante, discovered breaches and temporarily banned the chatbot in Italy. OpenAI has 30 days to respond to the allegations. Regulators in the U.S. and EU are also examining AI startups … Read more

Italian Data Protection Watchdog Accuses ChatGPT of Privacy Violations

January 30, 2024 at 06:12AM The Italian data protection authority has accused OpenAI of violating GDPR laws regarding ChatGPT’s data collection, leading to a 30-day response window. Similar concerns arise with Google’s Bard chatbot, while Apple opposes proposed U.K. Investigatory Powers Act amendments, citing threats to user privacy and security updates. This ongoing issue highlights … Read more

Here’s How ChatGPT Maker OpenAI Plans to Deter Election Misinformation in 2024

January 17, 2024 at 06:30AM OpenAI has outlined safeguards against election misinformation for its generative AI tools that can create compelling fake images and texts. This includes banning technology use for misleading purposes, digital watermarking of AI images, and ensuring users receive accurate voting information. OpenAI’s CEO expresses vigilance and anxiety about preventing misuse during … Read more

In Cybersecurity and Fashion, What’s Old Is New Again

December 28, 2023 at 10:02AM DDoS attacks and zero-day threats continue to plague cybersecurity due to their effectiveness, with OpenAI attributing ChatGPT issues to a DDoS attack. The rise in IoT vulnerabilities and new network protocols contributes to the surge in attacks, prompting the need for robust anti-DDoS strategies, including scalable infrastructure, traffic monitoring, and … Read more

Malicious GPT Can Phish Credentials, Exfiltrate Them to External Server: Researcher

December 22, 2023 at 05:39AM Researchers discovered a vulnerability in ChatGPT, which could be exploited to steal sensitive information by injecting malicious content through image markdown rendering. OpenAI addressed the issue partially for the web application but not for mobile apps. Additionally, a custom GPT named ‘The Thief’ was created to phish for user credentials … Read more