Search: “far”

3 stories in the last 7d

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll AI industry 33 AI safety & security 21 Industry 19 AI research 19 Exploit / PoC 10 Research 9 Policy & legal 8 Data breach 8 Malware 7 Threat actor 7 Vulnerability 6 Tools 6 AI policy 5 Model release 5

SeverityAll critical 8 high 24 medium 14 low 4 info 119

Forgery of C2PA on a Pixel 10

Researcher forged a Google Pixel 10 C2PA content credential with genuine signatures, showing root-level attackers can fake photo provenance.

A Hacker Factor blog post demonstrates an AI-generated 'unicorn glitter milk' news photo carrying a valid, cryptographically signed C2PA manifest traceable to Google's Pixel camera certificate chain, passing validation in Adobe Inspect and the CAI Verify tool with a verified timestamp. The author, working with UMBC's PASAWG working group, reported to Google and C2PA in November 2025 that root access on a Pixel device could sign arbitrary images as camera captures; after 90 days without resolution, details were published. The finding undermines C2PA Assurance Level 2 claims made for Pixel 10 Content Credentials.

Lobsters · securitySep 16, 13:24 UTC · 21h agoResearch

Scammers leave AI fingerprints all over fake antivirus renewal page

Malwarebytes found an AI-built fake Avast renewal page in Belgium whose contractor-style code comments show scammers now generate polished pages with AI.

Malwarebytes analyzed a fake Avast Premium Security renewal page targeting Belgian users, claiming a €129.99 subscription renewal and asking for name, email, and Belgian mobile number. Harvested numbers feed callback scams where fake support agents persuade victims to install remote access software. French comments in the code, written like an AI assistant's unfinished handover, plus leftover styling and feature-free marketing copy suggest the page was generated with AI, meaning convincing localized scam pages can now be produced in minutes.

Help Net Security10:10 UTC · 1h agoPhishing & fraud 2 sources

Data Broker Radaris Loses Domains in Privacy Fight

A New Jersey court ordered people-search broker Radaris to transfer radaris.com and a dozen related domains to Atlas Data Privacy over Daniel's Law violations.

On August 26, a New Jersey judge found Radaris failed to defend claims that it violated Daniel's Law, which protects law enforcement officials' personal data and imposes $1,000 fines per ignored removal request. The court ordered radaris.com and more than a dozen related broker domains transferred to plaintiff Atlas Data Privacy Corp. Radaris had delayed litigation using offshore shell entities and previously used a fictitious CEO named 'Gary Norden' in investor-facing press releases.

Krebs on SecuritySep 16, 18:14 UTC · 17h agoPolicy & legal