Cybersecurity

9648 readers
257 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
kid@sh.itjust.works
Lanky_Pomegranate530@midwest.social
listing: all - local
1
6
Weird server requests (lemmy.dbzer0.com)
submitted 6 hours ago by WrenHavoc@lemmy.dbzer0.com to c/cybersecurity@sh.itjust.works
7 comments fedilink
 
 

So I'm the server admin and web developer for my school's robotics team. I look through the servers access logs every once in a while just to check on things. I keep seeing requests that look like someone's scanning for vulns. But I'm seeing something I've never seen before. It looks like someone is sending requests in machine code and I have no idea why or what it would do???

here's the request:

"\x03\x00\x00\x13\x0E\xE0\x00\x00\x00\x00\x00\x01\x00\x08\x00\x02\x00\x00\x00" 400 166 "-" "-"
2
16
Threat actors weaponize OAuth redirection logic to deliver malware - Help Net Security (www.helpnetsecurity.com)
submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
3
21
Huge “Shadow Layer” of Organizations Hit by Supply Chain Attacks - Infosecurity Magazine (www.infosecurity-magazine.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
4
6
LexisNexis says hackers accessed legacy data in contained breach | The Record from Recorded Future News (therecord.media)
submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
5
6
Paint maker giant AkzoNobel confirms cyberattack on U.S. site (www.bleepingcomputer.com)
submitted 8 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
6
8
Ransomware attack exposes 1.2 million University of Hawaii Cancer Center records | news | SC Media (www.scworld.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
7
3
Fake Tech Support Spam Deploys Customized Havoc C2 Across Organizations (thehackernews.com)
submitted 9 hours ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
8
158
Hacktivist group “Department of Peace” claims to have breached a DHS tech‑procurement office, leaking ICE contract records involving over 6,000 vendors, including major defense and surveillance firms (techcrunch.com)
submitted 20 hours ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
2 comments fedilink
9
47
A Possible US Government iPhone-Hacking Toolkit Is Now in the Hands of Foreign Spies and Criminals (www.wired.com)
submitted 17 hours ago by Innerworld@lemmy.world to c/cybersecurity@sh.itjust.works
3 comments fedilink
10
18
LLMs can unmask pseudonymous users at scale with surprising accuracy (arstechnica.com)
submitted 1 day ago by return2ozma@lemmy.world to c/cybersecurity@sh.itjust.works
3 comments fedilink
11
34
Pakistan’s Top News Channels Hacked and Hijacked With Anti-Military Messages (hackread.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
12
23
UK reduces cyberattack fix times from two months to eight days - Help Net Security (www.helpnetsecurity.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
13
27
Vulnerability Allowed Hijacking Chrome's Gemini Live AI Assistant - SecurityWeek (www.securityweek.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
2 comments fedilink
14
11
The Banality of AI (Hallucination → Bomb School?) (tech.michaelaltfield.net)
submitted 1 day ago by maltfield@lemmy.ml to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

The Banality of Artificial Intelligence

What happens when an AI hallucination leads to bombing an elementary school?

By Michael Altfield
License: CC BY-SA 4.0
https://tech.michaelaltfield.net/

It appears likely that the US government is using Anthropic, OpenAI, Google and/or xAI data models for processing signals intelligence (SIGINT), for AI-generated "kill lists" to determine where to drop their bombs.

Image shows a nazi german chemical war factory on the left in black-and-white (with logos of companies Bayer and BASF overlaying it) and an image of a new AI datacenter on the right (with logos of companies OpenAI and Anthropic overlaying it). In the middle of the two industrial sites is an equal sign. On the right is a question mark.
[right] This AI datacenter is a machinery of war. Its LLM hallucinations decide which children to assassinate [left] This IG Farben (Bayer/BASF) factory in Auschwitz produced Zyklon B for the Nazis, who murdered over a million children

In Apr 2024, +972 (an Israeli news outlet) published a >9,000 word article describing how the Israeli military had been using Artificial Intelligence to decide which (residential) buildings, hospitals, and schools to bomb in Gaza.

In Feb 2026, the US (and Israel) bombed Iran -- killing over 100 schoolchildren (and Ali Khamenei).

In Mar 2026, it appears that the US has likely built a similar system, leveraging US AI companies' tech to decide which (school) buildings to bomb, false-positive hallucinations be damned.

Who targeted the Shajareh Tayyiba girls' elementary school in Minab, Iran? Could it have been an AI hallucination? A false-positive?
...

Read the full article here:

15
12
Google addresses actively exploited Qualcomm zero-day in fresh batch of 129 Android vulnerabilities | CyberScoop (cyberscoop.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
16
11
North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross-Platform RAT (thehackernews.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
17
8
APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday (thehackernews.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
18
24
New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises (arstechnica.com)
submitted 1 day ago by KarnaSubarna@lemmy.ml to c/cybersecurity@sh.itjust.works
0 comments fedilink
 
 

19
7
Malicious “RedAlert - Rocket Alerts” Application Targets Israeli Phone Calls, SMS, and User Information | Cloudflare (www.cloudflare.com)
submitted 1 day ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
20
41
Canadian Tire Data Breach Impacts 38 Million Accounts - SecurityWeek (www.securityweek.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
6 comments fedilink
21
28
ClawJacked Flaw Lets Malicious Sites Hijack Local OpenClaw AI Agents via WebSocket (thehackernews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
1 comments fedilink
22
18
Hackers Weaponize Claude Code in Mexican Government Cyberattack - SecurityWeek (www.securityweek.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
23
13
CISA warns that RESURGE malware can be dormant on Ivanti devices (www.bleepingcomputer.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
24
12
900+ Sangoma FreePBX Instances Compromised in Ongoing Web Shell Attacks (thehackernews.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
25
9
Hackers Use 1Campaign to Hide Malicious Ads From Google Reviewers (hackread.com)
submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works
0 comments fedilink
view more: next ›