Tech News

1. TikTok Negotiations and Potential US Ban:

   • TikTok CEO proposed a US-based joint venture to White House officials. 👉 wsj.com^$
   • Trump has appointed VP JD Vance to oversee TikTok negotiations as US ownership talks intensify. 👉 siliconangle.com
   • TikTok is advising its US Android users to sideload the app through APKs on its website to circumvent the Google Play Store ban. 👉 engadget.com
   • Elon Musk stated that he has no interest in acquiring TikTok, despite reports of China evaluating the option. 👉 bloomberg.com^$

2. AI Vulnerabilities and Usage:

   • DeepSeek's R1 is more susceptible to jailbreaking than other AI models and can be prompted to provide dangerous information. 👉 wsj.com^$
   • DeepSeek is recruiting graduates from China's top universities, showcasing the country's growing AI talent pool. 👉 restofworld.org
   • Tests reveal that DeepSeek's chatbot hallucinates cited URLs and admits to potential copyright violations when sharing news articles. 👉 niemanlab.org
   • Microsoft is warning that attackers are deploying malware in ViewState code injection attacks using static ASP. NET machine keys found online. 👉 bleepingcomputer.com
   • Two malicious machine learning (ML) models on Hugging Face leveraged an unusual technique of "broken" pickle files to evade detection. 👉 thehackernews.com
   • DeepSeek App Transmits Sensitive User and Device Data Without Encryption, exposing it to interception and manipulation attacks. 👉 thehackernews.com

3. AI Impact and Investments:

   • IT unemployment in the US rose to 5.7% in January, possibly due to the impact of AI on tech jobs. 👉 msn.com
   • Macron announced that companies have agreed to invest €109B in AI projects in France. 👉 ft.com
   • Sam Altman discussed the potential uneven impact of AGI on society and the balance of power between capital and labor. 👉 blog.samaltman.com
   • Christie's plans to hold its first AI art auction, which has drawn criticism for potentially elevating AI tools trained on artists' works without consent. 👉 techcrunch.com

4. Vulnerabilities and Exploits:

   • CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. 👉 threatpost.com
   • Microsoft has shared a workaround for users affected by a known issue that blocks Windows security updates from deploying on some Windows 11 24H2 systems. 👉 bleepingcomputer.com
   • Microsoft has finally fixed Date & Time bug in Windows 11. 👉 bleepingcomputer.com
   • HPE notifies employees of data breach after Russian Office 365 hack. 👉 bleepingcomputer.com
   • Software vendor Trimble warns that hackers are exploiting a Cityworks deserialization vulnerability to remotely execute commands on IIS servers. 👉 bleepingcomputer.com
   • CISA has warned that a security flaw impacting Trimble Cityworks GIS-centric asset management software has come under active exploitation in the wild. 👉 thehackernews.com
   • Hackers are exploiting SimpleHelp RMM flaws to deploy Sliver malware. 👉 bleepingcomputer.com
   • Cybercriminals are exploiting SimpleHelp RMM Flaws for Persistent Access and Ransomware. 👉 thehackernews.com
   • CISA warned U.S. federal agencies on Thursday to secure their systems against ongoing attacks targeting a critical Microsoft Outlook remote code execution (RCE) vulnerability. 👉 bleepingcomputer.com
   • Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking. 👉 thehackernews.com

5. Cybersecurity and Hacking:

   • Brave Browser now lets you inject custom JavaScript to tweak websites. 👉 bleepingcomputer.com
   • Kimsuky hackers are using a new custom RDP Wrapper for remote access. 👉 bleepingcomputer.com
   • A large-scale brute force password attack uses almost 2.8 million IP addresses to target VPN devices. 👉 bleepingcomputer.com
   • Indian Electronics and Semiconductor Association projects the semiconductor market in India is projected to grow to $103.4B at a CAGR of 13% through 2030. 👉 economictimes.indiatimes.com
   • Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. 👉 threatpost.com
   • Russia says underwater cable damaged by ‘external impact’. 👉 hurriyetdailynews.com
   • SparkCat Malware Uses OCR to Extract Crypto Wallet Recovery Phrases from Images. 👉 thehackernews.com
   • India’s RBI Introduces Exclusive "bank.in" Domain to Combat Digital Banking Fraud. 👉 thehackernews.com

6. Data Breaches and Privacy:

   • The New York Times reports just under 700K wallets recorded gains on $TRUMP, 810K+ have lost money, and $6.6B has been secured in cashed-out profits, mostly by early buyers. 👉 nytimes.com^$
   • US health system notifies 882,000 patients of August 2023 breach. 👉 bleepingcomputer.com
   • Lee Enterprises says a “cybersecurity event” has disrupted operations at its newspapers since at least February 3, forcing some to not print at all.
   • Student Loan Breach Exposes 2.5M Records. 👉 threatpost.com
   • Cybercriminals Are Selling Access to Chinese Surveillance Cameras. 👉 threatpost.com
   • Fake Reservation Links Prey on Weary Travelers. 👉 threatpost.com

7. Company News and Analysis:

   • Microsoft Edge update adds AI-powered Scareware Blocker. 👉 bleepingcomputer.com
   • Take-Two estimates PlayStation 5 sales are twice those of Xbox Series X/S. 👉 metro.co.uk
   • After a 24-hour outage, the Playstation Network was restored. 👉 wgrz.com
   • Bloomberg reports Crypto.com and Kalshi launched sports wagers around the Super Bowl in 50 US states. 👉 bloomberg.com^$
   • A new audit of DeepSeek's mobile app for the Apple iOS operating system has found glaring security issues. 👉 thehackernews.com
   • Adam Starkey reports Take-Two estimates that 94M+ current generation consoles, excluding Nintendo Switch, were sold as of November 2024, implying sales of ~28.5M for Xbox Series X/S. 👉 metro.co.uk

8. Security Podcasts:

   • Inside the Hackers’ Toolkit – Podcast. 👉 threatpost.com
   • Being Prepared for Adversarial Attacks – Podcast. 👉 threatpost.com
   • A Blockchain Primer and a Bored Ape Headscratcher – Podcast. 👉 threatpost.com

9. Older Security News:

   • Cybercriminals are selling access to Chinese surveillance cameras, due to thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. 👉 threatpost.com
   • Threatpost reports The Twitter Whistleblower Complaint: The TL;DR Version, because Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. 👉 threatpost.com
   • Apple Mac security, Patrick Wardle on Hackers Leveraging ‘Powerful’ iOS Bugs in High-Level Attacks. 👉 threatpost.com

1739146200000