Collaborate Disseminate
SUSE plans to cut roughly 10% of its 1,900-person workforce, with CEO Dirk-Peter van Leeuwen saying “automation and AI” are reducing the need for some roles and allowing the open source software company to operate with less overhead and flatter managem… Continue reading SUSE To Cut One In Ten Employees Because of AI
Binance on Tuesday said the record-setting theft of $6.43 billion in assets from the world’s largest cryptocurrency exchange was the culmination of a “sophisticated, multi-stage campaign” that involved the use of a tampered Homebrew installation and re… Continue reading Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
Rumors of malfeasance spread on X despite no evidence, as election officials continue to fight off numerous legal challenges from the Trump administration in the last 48 hours.
The post Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting appeared first on CyberScoop.
Bitdefender details a 3AM ransomware attack on a UK school estate that encrypted 37 systems, with command timing suggesting possible AI-assisted troubleshooting. Continue reading 3AM Ransomware Hits 37 UK School Systems in Suspected AI-Assisted Attack
The Elder Scrolls VI: Sentinel is the official name of the much-anticipated new Bethesda open-world RPG, but it still has no release date.
The post Bethesda’s The Elder Scrolls VI Gets its Official Name Reveal appeared first on Thurrott.com.
Continue reading Bethesda’s The Elder Scrolls VI Gets its Official Name Reveal
An anonymous reader quotes a report from VentureBeat: Researchers from the Massachusetts Institute of Technology (MIT) Computer Science & Artificial Intelligence Laboratory (CSAIL) reported today that they used OpenAI’s GPT-6 Astra language model t… Continue reading MIT Researchers Used GPT-6 Astra To Edit Qwen’s Open Weights Directly, Boosting Math Scores
Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device.
The vulnerabilities, a pre-authentication a… Continue reading Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access
CrowdStrike is extending its platform to watch, test and explain autonomous AI agents, as enterprises face behavior-based risks that conventional security tools cannot catch.
The post CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform appeared first on CyberScoop.
Compare the iPhone Duo and Pixel 11 Pro Fold on design, multitasking, cameras, battery life, and pricing to see whether Apple’s extra $100 is worth it.
The post iPhone Duo vs. Pixel 11 Pro Fold: Is Apple’s Extra $100 Worth It? appeared first on T… Continue reading iPhone Duo vs. Pixel 11 Pro Fold: Is Apple’s Extra $100 Worth It?
Multiple vulnerabilities have been identified in the Android application, BaseChat – Audio Dating App, version 9.8.1, which ultimately compromise the privacy of users’ personal data and activity.
BaseChat is an online dating platform built in Flutter and targeted toward users over 18. It facilitates anonymous, voice-first interaction between users. Three distinct vulnerabilities have been identified within the shipped Android application.
VU#124705.1: The application fails open when validating TLS server certificates for connections to its backend API host. The application allows any self-signed certificate to bypass standard TLS security checks.
VU#124705.2: Paid user accounts are mapped to a third-party RevenueCat subscriber database using raw MSISDNs (phone numbers), which are a guessable public identifier. Because the RevenueCat Software Development Kit (SDK) includes a public API key within the application’s Android Package Kit (APK), an attacker can query the RevenueCat’s API using predictable identifiers to retrieve individual user metadata.
VU#124705.3: The application writes Personally Identifiable Information (PII) to Android system logs in its production build. During voice calls, the application logs the remote party’s MSISDN through unstripped debug statements, which allows an attacker to recovery phone numbers of callers who are intended to remain anonymous.
Impacts of successful exploitation vary by vulnerability.
VU#124705.1: A network-positioned attacker can intercept and modify API communication, potentially leading to account takeover via session credential theft.
VU#124705.2: An attacker can locate the public RevenueCat SDK key and query the RevenueCat API using arbitrary phone numbers to retrieve associated user metadata, including activity and purchase history.
VU#124705.3: The personal data, or PII, of other users, intended to be anonymous, can be accessed through local system logs. The application’s backend sending other users’ MSISDNs to the client in any capacity presents a privacy violation.
These vulnerabilities have been confirmed against Basechat – Audio Dating App, Android version 9.8.1.
Unfortunately, Mobile Trading GmbH, the owners of BaseChat, could not be reached to coordinate this vulnerability.
Thanks to Mahmoud Ali Khan for reporting these vulnerabilities. This document was written by Alex Lewis.