 |
|
|
|||||
Ever since reporting earlier this year on how easy it is to trick an agentic browser, I've been following the intersections between modern AI and old-school scams. Now, there's a new convergence on the horizon: hackers are apparently using AI prompts to seed Google search results with dangerous commands. When executed by unknowing users, these commands prompt computers to give the hackers the access they need to install malware. The warning comes by way of a recent report from detection-and-response firm Huntress. Here's how it works. First, the threat actor has a conversation with an AI assistant about a common search term, during which they prompt the AI to suggest pasting a certain command into a computer's terminal. They make the chat publicly visible and pay to boost it on Google. From then on, whenever someone searches for the term, the malicious instructions will show up high on the first page of results. Huntress ran tests on both ChatGPT and Grok after discovering that a Mac-targeting data exfiltration attack called AMOS had originated from a simple Google search. The user of the infected device had searched "clear disk space on Mac," clicked a sponsored ChatGPT link and lacking the training to see that the advice was hostile executed the command. This let the attackers install the AMOS malware. The testers discovered that both chatbots replicated the attack vector. As Huntress points out, the evil genius of this attack is that it bypasses almost all the traditional red flags we've been taught to look for. The victim doesn't have to download a file, install a suspicious executable or even click a shady link. The only things they have to trust are Google and ChatGPT, which they've either used before or heard about nonstop for the last several years. They're primed to trust what those sources tell them. Even worse, while the link to the ChatGPT conversation has since been taken off Google, it was up for at least half a day after Huntress published their blog post. This news comes at a time that's already fraught for both AIs. Grok has been getting dunked on for sucking up to Elon Musk in despicable ways, while ChatGPT creator OpenAI has been falling behind the competition. It's not yet clear if the attack can be replicated with other chatbots, but for now, I strongly recommend using caution. Alongside your other common-sense cybersecurity steps, make sure to never paste anything into your command terminal or your browser URL bar if you aren't certain of what it will do.This article originally appeared on Engadget at https://www.engadget.com/cybersecurity/hackers-tricked-chatgpt-grok-and-google-into-helping-them-install-malware-185711492.html?src=rss
Category:
Marketing and Advertising
YouTube TV, which launched in 2017 as a $35-per-month all-in-one service, will soon introduce YouTube TV Plans. Although the announcement is light on details, we know the initiative will let you sign up for genre-specific packages, such as sports and news. In other words, it's the final step in the legacy-cable-ification of the service.YouTube hasn't said anything about pricing. But it's probably safe to assume that narrowing your available content will reduce your bill. A year ago, the company raised its monthly cost to $83. That's 137 percent higher than the services launch price nearly nine years ago.We don't yet have the full list of available plans, but YouTube mentioned packages for sports, news and "family and entertainment content." As expected, it promised that you can mix and match them. The YouTube TV Sports Plan will include access to all major broadcast channels and several sports networks, like all ESPN networks, FS1, and NBC Sports Network. It sounds similar to offerings from Fubo and DirecTV.YouTube TV plans will launch in early 2026. The current $83 all-in-one model will remain available alongside it.This article originally appeared on Engadget at https://www.engadget.com/entertainment/streaming/youtube-tv-plans-will-let-you-choose-genre-specific-content-packages-182909455.html?src=rss
Category:
Marketing and Advertising
Amazon is introducing same-day delivery of perishable food items to 1,300 new cities and towns throughout the country, upping the total service area to more than 2,300 locations. This expansion covers cities like Boise, Salt Lake City, Fort Collins, Omaha, Des Moines and many more. Check the link to see if it has expanded to where you live. The commerce giant says it will be bringing the service to even more cities in 2026, making the platform a real rival to stuff like Instacart and Walmart+. Amazon introduced this feature earlier this year and it has proven to be quite the success, given today's move. It lets people order perishable food items like fruits, vegetables, dairy and meat alongside other more traditional items like electronics and books. Amazon uses a "specialized temperature-controlled fulfillment network to ensure that perishables remain in tip-top shape and they are delivered in insulated bags. The deliveries are free for Prime members, as long as the order exceeds $25. Everyone else has to pay $13 per order. Amazon The company says that fresh groceries already make up nine of the top ten most-ordered items for quick delivery, which is a fairly astounding metric. People want their avocados. Amazon has been steadily increasing the number of items available via this method by incorporating Whole Foods products.This article originally appeared on Engadget at https://www.engadget.com/big-tech/amazon-brings-same-day-deliveries-of-perishable-food-items-to-1300-new-areas-175746531.html?src=rss
Category:
Marketing and Advertising
All news |
||||||||||||||||||
|
||||||||||||||||||