Skip to main content

AI Tools Give Dangerous Powers to Cyberattackers, Security Researchers Warn

1 month ago
"On a recent assignment to test defenses, Dave Brauchler of the cybersecurity company NCC Group tricked a client's AI program-writing assistant into executing programs that forked over the company's databases and code repositories," reports the Washington Post. "We have never been this foolish with security," Brauchler said... Demonstrations at last month's Black Hat security conference in Las Vegas included other attention-getting means of exploiting artificial intelligence. In one, an imagined attacker sent documents by email with hidden instructions aimed at ChatGPT or competitors. If a user asked for a summary or one was made automatically, the program would execute the instructions, even finding digital passwords and sending them out of the network. A similar attack on Google's Gemini didn't even need an attachment, just an email with hidden directives. The AI summary falsely told the target an account had been compromised and that they should call the attacker's number, mimicking successful phishing scams. The threats become more concerning with the rise of agentic AI, which empowers browsers and other tools to conduct transactions and make other decisions without human oversight. Already, security company Guardio has tricked the agentic Comet browser addition from Perplexity into buying a watch from a fake online store and to follow instructions from a fake banking email... Advanced AI programs also are beginning to be used to find previously undiscovered security flaws, the so-called zero-days that hackers highly prize and exploit to gain entry into software that is configured correctly and fully updated with security patches. Seven teams of hackers that developed autonomous "cyber reasoning systems" for a contest held last month by the Pentagon's Defense Advanced Research Projects Agency were able to find a total of 18 zero-days in 54 million lines of open source code. They worked to patch those vulnerabilities, but officials said hackers around the world are developing similar efforts to locate and exploit them. Some longtime security defenders are predicting a once-in-a-lifetime, worldwide mad dash to use the technology to find new flaws and exploit them, leaving back doors in place that they can return to at leisure. The real nightmare scenario is when these worlds collide, and an attacker's AI finds a way in and then starts communicating with the victim's AI, working in partnership — "having the bad guy AI collaborate with the good guy AI," as SentinelOne's [threat researcher Alex] Delamotte put it. "Next year," said Adam Meyers, senior vice president at CrowdStrike, "AI will be the new insider threat." In August more than 1,000 people lost data to a modified Nx program (downloaded hundreds of thousands of times) that used pre-installed coding tools from Google/Anthropic/etc. According to the article, the malware "instructed those programs to root out" sensitive data (including passwords or cryptocurrency wallets) and send it back to the attacker. "The more autonomy and access to production environments such tools have, the more havoc they can wreak," the article points out — including this quote from SentinelOne threat researcher Alex Delamotte. "It's kind of unfair that we're having AI pushed on us in every single product when it introduces new risks."

Read more of this story at Slashdot.

EditorDavid

More Durable UV Coating For Solar Panels Made From Red Onion Skins

1 month ago
Long-time Slashdot reader fahrbot-bot shared this report from ZME Science Researchers from the University of Turku, in collaboration with Aalto University and Wageningen University, have developed a bio-based UV protection film for solar cells that not only blocks nearly all harmful ultraviolet light but also outperforms commercial plastic films. The key ingredient is a water extract made from red onion skins... [T]he same sunlight that powers [solar cells] can also degrade their delicate components — particularly the electrolyte inside dye-sensitized solar cells (DSSCs), a type known for their flexibility and low-light performance. To mitigate this, manufacturers typically wrap cells in UV-protective films made from petroleum-based plastics like polyethylene terephthalate (PET). But these plastics degrade over time and are difficult to recycle... Nanocellulose can be processed into thin, transparent films that serve as the perfect substrate for UV-blocking compounds. Their breakthrough came when they dyed these films using an extract from red onion skins, a common kitchen waste. The result was a filter that blocked 99.9% of UV radiation up to 400 nanometers, a feat that outstripped even the PET-based commercial filters chosen for comparison... [T]he onion-treated filter excelled: it let through over 80% of light in the 650-1,100 nm range — an ideal sweet spot for energy absorption... Even predictive modeling based on early degradation trends suggested the CNF-ROE filter could extend a solar cell's lifetime to roughly 8,500 hours. The PET-based filter? Just 1,500 hours... [T]he red onion extract offered a rare combination of longevity, transparency, and sustainability... The team envisions biodegradable solar cells for smart packaging, remote sensors, or wearable devices — especially in applications where recovery and recycling are not feasible. Their work is part of the BioEST project, funded by the Research Council of Finland, which supports sustainable innovation across electronics and materials science. This achievement taps into a broader movement to decarbonize every step of solar energy production. Plastic packaging is one of the overlooked sources of emissions in clean technology. Swapping out fossil-based plastics for biodegradable alternatives helps close that loop... The findings appeared in the journal Applied Optical Materials.

Read more of this story at Slashdot.

EditorDavid