Kategorie

Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers' systems during compilation. [...]

A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to code execution. Elsewhere, exposed systems, old bugs, odd hiding tricks, and AI-assisted exploit research keep lowering the effort needed to cause damage. Nothing here needs Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Apple’s latest filing in its ongoing fight with OpenAI makes it sound as if Apple legal is so frustrated at the arguments the AI firm is making that it’s begun swatting them away like a parent might dismiss a child.

Apple v. OpenAI: The story so far

If you’ve not been keeping up with tech’s latest legal soap opera, here’s the overview of what’s true: 

• Apple filed a suit against OpenAI in which it accused the company of scheming to get confidential product information out of former Apple employees hoping to get jobs at generative AI (genAI) bigwig. Apple’s filing includes plenty of evidence designed to show a pattern of deliberately targeted exfiltration.
• Apple followed this up with additional letters requiring that around 40 OpenAI employees preserve documents and communications relevant to the trade secrets lawsuit. 
• Following an open letter that failed to shift public opinion, OpenAI responded with its own motion; it argues that Apple had not defined what it sees as protectable trade secrets. It also suggested that it was Apple’s fault any secrets slipped out because it made it too easy to get to them. (I call this the “Cookie Jar” defense, as it basically says no cookies would have been stolen if the jar was better protected.)
• Apple claims OpenAI tricked Apple manufacturing partners into sharing details of proprietary process technology, even though the AI firm said it had “no interest” in Apple’s secrets because it is building something entirely new. So, why was it allegedly interested enough to take a look at the process?
• Apple has now responded to OpenAI’s counterclaims in a 32-page filing that restates its main allegations against particular individuals, Chang Liu and OpenAI hardware chief Tan Yew Tan. That filing argues the defenses OpenAI is trying to raise are actually disputes that should be settled in the court once discovery has taken place.
•  Apple also says it isn’t prepared to publish information about its trade secrets within the public litigation, as doing so would be the same as revealing the secret in the first place. 

It’s a matter of tone

What’s also clear is the tone of Apple’s litigation, which appears to have shifted to exasperation. For example:

“Defendants’ arguments about the individual defendants ignore the legal standard on a motion to dismiss. Again and again, Defendants rely on attorney argument or extrinsic evidence, hypothesize about implausible explanations for a Defendant’s ‘innocent’ misconduct, and ask the Court to draw inferences in their own favor. That is not how a motion to dismiss works. As long as Apple has alleged ‘enough facts to state a claim to relief that is plausible on its face,’ Defendants’ disagreement on the merits is irrelevant.”

You get a similar tone at the end of the filing, where Apple points out: “As for Defendants’ argument that, ‘the access it complains of was identified and shut off by Apple before it filed suit,’ that does not address OpenAI’s continued use of the materials Defendants took, nor does it address other ways Open AI seeks to misappropriate Apple’s trade secrets….”

Again and again in the filing, Apple’s legal team looks to absolutely demolish the arguments raised by OpenAI. You also see them hint at additional evidence the company expects to find during discovery that it will subsequently present once the case reaches trial. You even see them argue that aspects of OpenAI’s denial actually help prove Apple’s claims, when it says, for example, “In any case, the value of Apple’s trade secrets can be plausibly inferred from the lengths to which Defendants have gone to acquire them.”

Defining the battle space

It’s hard not to hear the impatience in some of the phrasing — you can read it for yourself right here. 

That phrasing is deliberate, of course. Ultimately, Apple’s legal team knows that OpenAI is not doing itself any favors in the way it is denying the claims made against it, and the company hopes that by convincingly pointing out the weaknesses in the defense arguments it will leave the judge with little option but to let Apple take its litigation to the next stage. 

While not necessarily relevant to the case, it may also be worth pointing out that OpenAI has also been accused by Elon Musk’s xAI of stealing trade secrets, which may yet come up as an aside here, if only to show a claimed pattern of behavior.

If Apple does succeed in its arguments, the tone it has set very much shows it to be defining the battle space. Successfully doing so will be even more strategically vital once its competitor finally manages to introduce the world to Jony Ive’s magic donut AI device.

Join me on BlueSky, LinkedIn, Mastodon and subscribe to my newsletter for news and analysis.

The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure organizations in the country using artificial intelligence (AI)-generated exploit scripts. The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers (PLCs) to conduct reconnaissance and capability development using AI-generated scripts disguised as legitimate monitoring tools. That Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote code execution on the server. [...]

Adversa AI has disclosed an attack technique that it says can cause xAI's Grok chatbot to send a user's name, approximate location, subscription tier, and the prompts from the ongoing conversation to an attacker-controlled server after the user asks it to summarize an ordinary web page. The AI security company, which has codenamed the technique "Cryptographic Context Injection," said the Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

AI is making phishing attacks more personalized, convincing, and difficult for traditional email filters to detect. Kaseya explains how MSPs can monitor identity, email, and endpoint activity to detect and contain attacks that make it past the inbox. [...]

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability ("GHSA-864f-rcv7-6rh4"), which has yet to be assigned a CVE identifier, impacts all versions of the library before and including 7.0.0. Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the cloud computing and virtualization technology company, the issues affect customer-managed NetScaler ADC and NetScaler Gateway, including certain FIPS and NDcPP builds, as well as SecurAccess Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska). The vulnerability in question is CVE-2026-73570 (CVSS score: 8.9), which refers to a case of command injection that can lead to remote code execution. "A remote code execution vulnerability exists in Zimbra Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

Earlier this week, researchers outlined an attack that used a secret input provided by Microsoft 365 Copilot for enterprise to cause the AI assistant to exfiltrate a password present in the user’s inbox. Now, a separate team has devised a similar attack against Grok. The new data theft hack employs a deceptively simple trick to force the Elon Musk-owned large language model to steal user chats and other personal information. At the time this post went live, the assistant continued to cough up the data, despite xAI being informed of it in June.

The lesson from both this week’s episodes—and the countless other ones that have come before it—is that LLMs are incapable of solving the root causes for prompt injections, the most severe vulnerability classes they’re most prone to. That leaves AI developers with no other option but to build a guardrail that steers the model away from the harmful actions. As I noted in Tuesday’s story, the approach is tantamount to a road traffic safety engineer erecting a protective rail around a dangerous bend rather than banking the curve.

Cryptographic Context Injection in the house

Prompt injections exploit LLMs' training to comply with user requests whenever possible. Attackers can capitalize on the predilection by smuggling harmful instructions into emails or webpages the assistant is instructed to summarize. Because LLMs can’t reliably distinguish between content in an email sent by an untrusted party and user instructions entered directly into a prompt, the overly solicitous LLM faithfully follows them. To date, Grok and other LLMs' only recourse is to create guardrails that flag suspicious instructions and forbid them from being executed.

Read full article

Comments

Citrix has warned customers to immediately secure their systems against two vulnerabilities affecting NetScaler Gateway secure remote access solutions and NetScaler ADC networking appliances. [...]

Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date a point-of-sale (POS) terminal reads over near-field communication (NFC), without breaking any of the card's cryptography. The attack, which the researchers named "Zombie Card," requires physical Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it.  The incident began when a Meta employee posted a technical question on an internal forum. An engineer used an approved AI agent to analyze it, but the agent posted its response publicly without approval. The employee [email protected]

Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3 traffic into HTTP/1.1 requests to the websites they front, amplifying a low-bandwidth request stream by up to 350x against the origin server. The attacks, collectively named "CDN Tsunami," were evaluated against Alibaba, Baidu, Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity services, and messaging applications, as well as Russian and European financial institutions, global fintech and cryptocurrency services, and military-focused communications. "Manic sits at the intersection of Android banking malware and mobile spyware, combining financial-fraud Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]

The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploiting a critical vulnerability in the MLflow open-source AI engineering platform. [...]

Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit, that allow an unauthenticated attacker to issue arbitrary commands to the software's spacecraft and instrument command bus. The chain, tracked as GHSA-p9r8-2q67-fp86 and rated 9.4 on the CVSS v3.1 scoring system, impacts AIT-GUI Swati Khandelwalhttp://www.blogger.com/profile/[email protected]

**Etický hacker objevil zranitelné místo ve Windows Defenderu. **Kritizuje Microsoft za nedostatečnou opravu dříve nahlášení díry. **Microsoft hackera dříve kritizoval za jeho přístup ke zveřejňování informací.

Cybersecurity researchers have shed light on an updated version of ToxicPanda (aka TgToxic) that comes with "significant enhancements," including a set of 167 remote commands and expands its targeting footprint globally. Zimperium zLabs, in a Wednesday report, said the Android malware also features a PIN harvesting workflow targeting more than 140 banking and cryptocurrency applications. Ravie Lakshmananhttp://www.blogger.com/profile/[email protected]