Goto

Collaborating Authors

 hacker access


Fears workplace affairs could be exposed as Slack flaw gives hackers access to private channels

Daily Mail - Science & tech

Hackers have developed a'difficult to trace' new method to exploit AI tools inside workplace messaging app Slack -- tricking its chatbot into sending malware. The popular collaboration platform has gained prominence for facilitating quick communications between coworkers, with some linking it to a new age of'micro-cheating' and office affairs. The cybersecurity team within Slack's research program said Tuesday that they had patched the issue on the same day outside experts first reported the flaw to them. But the vulnerability, which lets hackers disguise malicious code inside uploaded documents and Google Drive files, highlights the growing risks posed by'artificial intelligence' that lacks the'street smarts' to deal with unscrupulous user requests. While the independent security researcher who first discovered the new flaw praised Slack for its diligent response, they went public with news of the AI's vulnerability'so that users could turn off the necessary settings to decrease their exposure.'


OKCupid security flaws could have given hackers access to user accounts

Engadget

The data contained in dating apps is both very personal and valuable to hackers, who can use it to make highly convincing cyberattacks. So it's always disturbing to learn about dating app security flaws. In a report released today, security research firm CheckPoint Research announced that it found several security vulnerabilities in OKCupid's website and mobile apps. The flaws could have allowed hackers to access users' full profile details, private messages, personal addresses and more. Hackers could even send messages from their victims' profiles.


Flaw in DJI website gave hackers access to user accounts and live feeds from quadcopters

Daily Mail - Science & tech

A worrying vulnerability in DJI drones gave hackers complete access to a user's account without them realizing it. Security researchers from Check Point in March discovered a flaw in DJI's cloud infrastructure that allowed attackers to take over users' accounts and access private data like drone logs with location data, maps, account information and photos or videos taken during flight. However, DJI said it patched the vulnerability in September. A worrying vulnerability in DJI drones gave hackers complete access to a user's account. Users fell prey to the attack by clicking on a malicious link shared through DJI Forum, an online forum the firm runs for user discussions about its products.