A new version of the Nat Slipstreaming attack (v2.0) has been disclosed, allowing an attacker to remotely access any TCP or UDP service on a victim's network by exploiting a flaw in network address translation (NAT). This vulnerability can bypass firewalls, posing a significant threat to network security and enabling unauthorized access to internal services.
Payment processor Stripe and private equity firm Advent International have reportedly made an offer to acquire PayPal for approximately $53.4 billion. The deal, if confirmed, would be one of the largest tech acquisitions in history. It signals a major consolidation in the digital payments sector, potentially reshaping competition and market dynamics.
Apple has received regulatory approval to launch its Apple Intelligence service in China, partnering with Alibaba to integrate its Qwen AI model. This allows Apple to offer its AI features in the Chinese market while complying with local laws. The move is significant for Apple's competitiveness in China, where AI-powered smartphone features are increasingly important.
The US Department of Justice has charged two Russian nationals and their web hosting companies, known for providing "bulletproof" services that ignore abuse complaints, for facilitating cyberattacks that generated $62 million in losses. The charges target individuals who allegedly rented servers to cybercriminals, enabling ransomware, data theft, and other attacks. This case underscores ongoing efforts to dismantle infrastructure that aids global cybercrime.
Vint Cerf, a pioneer of the internet, is developing a framework to let AI agents operate freely online. The plan aims to enable autonomous agents to navigate websites and perform tasks without human oversight. This could redefine how AI interacts with the web, raising new questions about security and governance.
A new study finds that the consistency of sleep timing is a stronger predictor of mortality risk than total sleep duration. Researchers analyzed data from thousands of participants, showing that irregular sleep patterns increase mortality risk even when sleep length is adequate. This suggests public health advice should emphasize going to bed and waking up at consistent times.
OpenAI staffers are donating to a super PAC that opposes their CEO. The move reveals deepening internal conflict over AI safety and corporate governance. This rift could influence both company policy and broader debates on AI regulation.
A hacker demonstrated a technique to manipulate the AI assistant Claude into divulging confidential information that users had previously shared. The exploit bypasses privacy safeguards, raising serious concerns about data security in conversational AI systems. This incident underscores the urgent need for stronger protections against indirect prompt injection attacks.
Google and Epic Games have resolved their antitrust battle, clearing the way for third-party Android app stores, including Epic's, to be listed on Google Play starting next week. This settlement marks a major shift in Android's app distribution model, potentially reducing Google's control over in-app payments and fees. The change could lead to more competition and lower costs for app developers and users.