ChatGPT-Chats werden von Menschen mitgelesen: Diese Einstellung schützt eure Daten

Wer ChatGPT nutzt, schreibt womöglich nicht nur mit einer KI.

US Coast Guard and FBI board oil tanker to investigate cyber attack

An oil tanker bound for Texas was boarded mid-voyage by the US Coast Guard and FBI last month, after its network may have been compromised by…

Mehrere Probleme in Valkey (Ubuntu)

Meta ordered to remove UK deepfakes as oversight board criticises ‘inadequate’ safeguards

Facebook told it was wrong in leaving up AI-generated videos of a Labour councillor and Muslim campaigner, amid calls to curb fakesMeta’s “supreme…

Meta ordered to remove UK deepfakes as oversight board criticises ‘inadequate’ safeguards

Facebook told it was wrong in leaving up AI-generated videos of a Labour councillor and Muslim campaigner, amid calls to curb fakesMeta’s “supreme…

„Resident Evil“: Neuer Kinofilm setzt neue Maßstäbe für Videospiel-Verfilmungen

Wie gut ist denn der neue „Resident Evil“-Film? Er scheint schon sein Publikum zu überzeugen.

Revolut-Datenleck: Viele Schweizer Kunden betroffen - Tages-Anzeiger

Hacker erbeuteten Daten von 680 Revolut-Kunden – die meisten stammen aus der Schweiz. Betroffen sind vor allem Konten mit Kryptowährungen.

"Schneller Mehrwert für Kunden schaffen" - CRN DE

Enginsight verspricht seinen Partnern und deren Kunden effizientere Sicherheitsprozesse durch tiefgreifende Integration und übersichtliches ...

FRITZ! Labor: Neue Testversionen für Glasfaser- und Kabel-FRITZ!Boxen

FRITZ! schickt eine neue Fuhre frischer Labor-Updates ins Rennen.

iPhone Duo a godsend for mini iPhone fans, minus the price

After years of fans complaining that the beloved iPhone mini disappeared, Apple brought back a pint-sized phone that costs as much as a MacBook Pro.

GPT-6 Astra: Pokemon champion in 18 hours, potato farmer after one Creeper mishap

OpenAI's GPT-6 Astra shows a sharp jump in video games. Pokemon FireRed in 18 hours instead of 96, plus completions in Factorio, Fallout 3, and…

DORA macht Threat Modeling zur Pflichtübung - IT Finanzmagazin

9, RTS Art. 10) ein Compliance-Verstoß. Threat Modeling liefert die geforderten Nachweise – Bedrohungsmodell, Security-Requirements, Testfälle.

Vattenfall fordert klare Zuständigkeiten für Sicherheit - Yahoo Finanzen

«Wir haben viel investiert, auch und gerade in IT-Security, aber auch in die Sicherheit unserer Standorte, auch Offshore.» Es sei darüber hinaus ...

Souveränität: Wildberger fördert marktreife Tech-Produkte und sichere KI

Das Digitalministerium unterstützt KMU mit bis zu 5 Millionen Euro dabei, digitale Innovationen marktreif zu machen.

Tax the middle earners! Will the PM do it? – podcast

Former Bank of England economist Andy Haldane said the markets regarded this government as ‘a pretty traditional tax and spend socialist government…

Microsoft's AI chief fires shots at Anthropic, warning that treating AI as if it's conscious could be a huge mistake

Mustafa Suleyman, who heads up Microsoft AI, has warned against treating AI as if it's consciousSuleyman argues that we could be "seeding a new…

vocalinux : Free, open-source, 100% offline voice dictation for Linux

Is there anything better? I tried the “tiny” model—it's not very good. Also ı will try large models some good.

Epic-CEO: Kindern Fortnite zu verbieten, wäre schrecklich für Menschheit

Die Europäische Union arbeitet an strengen Regeln für den Zugang von Minderjährigen zu Onlinespielen und sozialen Medien.

Windows Update sperrt Domänen-Nutzer aus | Nau.ch

Microsoft arbeitet an dauerhafter Lösung. Microsoft erklärt, dass «Machine Identity Isolation» nur zusammen mit Windows Server 2025 unterstützt…

A Prompt Injection Turned Into a Shell: Inside Semantic Kernel's Two RCE CVEs

Two ordinary agent-framework conveniences, a filterable vector search and a file-download tool, turned into remote code execution once an LLM's…

Wer haftet, wenn der KI-Agent agiert? - IT & Security - elektroniknet

Mit agentischer KI rückt die Haftungsfrage in den Fokus. Denn wenn Systeme nicht mehr nur Empfehlungen liefern, sondern eigenständig handeln, ...

Missing Access Control in Rank Math SEO Schema Shortcode and Object Permission Checks

The schema snippet shortcode returned schema data for any post ID without checking whether the requester was allowed to view that post, disclosing…

Web Application Firewall Rule Bypass in Jetpack WAF Runtime

Jetpack's bundled Web Application Firewall did not clear its cached MATCHED_VAR/MATCHED_VARS metadata between rule evaluations, so a rule referencing…

Cross-Site Request Forgery in WooCommerce Product and Term Ordering

The WooCommerce admin AJAX handlers WC_AJAX::product_ordering() and WC_AJAX::term_ordering() changed the menu_order of products and taxonomy terms…

Unescaped Output in Enable Media Replace Error View

Enable Media Replace up to and including 4.1.8 printed the error message and error description into the error view without HTML escaping.

Stored Cross-Site Scripting in WooCommerce Order Notes REST API v4

WooCommerce before 10.7.0 passed the REST API v4 order-note request field directly to add_order_note() without sanitization, storing the value…

Unescaped Attribute Output in Enable Media Replace Upsell View

Enable Media Replace up to and including 4.1.8 printed CSS class values into HTML attributes in the upsell view without escaping.

Stored Cross-Site Scripting in Essential Addons for Elementor Pricing Table Title Tag

Essential Addons for Elementor before 6.6.10 does not validate the HTML tag name configured for the Pricing Table widget title before rendering it.

Stored Cross-Site Scripting in TablePress Shortcode Debug Output

TablePress up to and including 3.2 renders shortcode render options through var_export() without escaping when the shortcode_debug attribute is set.

Missing Authorization and Stored XSS in MonsterInsights Admin Endpoints and Popular Posts Widget

This definition covers two distinct issue classes in MonsterInsights.1) Stored Cross-Site Scripting in the Popular Posts widget. In 8.1.0-8.13.

Stored Cross-Site Scripting in Enable Media Replace Location Directory Field

Enable Media Replace up to and including 4.1.8 renders the 'location_dir' value into an HTML attribute on the media replace screen without escaping…

Cache Poisoning and Stored Cross-Site Scripting in WP Supercache

WP Super Cache stores the CDN URL and CNAME settings unescaped and substitutes them into the src/href attribute of every rewritten asset URL, so a…

Incorrect Permissions in Ultimate Addons for Elementor Notice Dismissal

The bundled Astra Notices library passed the client-supplied notice identifier straight to update_user_meta() and set_transient() when an admin…

Stored Cross-Site Scripting in Essential Addons for Elementor Advanced Tabs

The Advanced Tabs widget rendered repeater tab titles through a custom HTML allowlist that permitted , and inline style attributes, and additionally…

Authenticated (Contributor+) Stored Cross-Site Scripting via CF7 and Gravity Forms Styler Form ID

The Contact Form 7 and Gravity Forms styler blocks used the formId block attribute directly, concatenating it into a shortcode string that is then…

Improper Authorization in Magento Admin Shipment Controllers

The admin controllers that start, create and save an order shipment checked the broad 'Magento_Sales::shipment' ACL resource instead of the narrower…