Search This Blog
Powered by Blogger.

Blog Archive

Labels

Footer About

Footer About

Labels

Load More
Trendy Right Now

Popular Posts

Latest News

WhatsApp Incognito AI Chats Raise Privacy and Accountability Concerns

  Private AI chats are now arriving on WhatsApp through a new incognito mode where conversations disappear once they end. Neither users nor ...

All the recent news you need to know
User Privacy
Cyber Security Meta Meta Glass Smart Glasses User Privacy

Meta Smart Glasses Secretly Film Women: Privacy Invasion Crisis Explained

 

Smart glasses are moving from novelty to mainstream, and Meta’s Ray-Ban model is leading the market. The BBC says Meta accounts for about 80% of sales in the smart-glasses category, helped by the familiar Ray-Ban design and the addition of a built-in camera, speakers, and AI features. That combination has made the product appealing to early adopters who want hands-free music, calls, photos, and information on the go. 

But the same features that make smart glasses attractive also make them controversial. The report describes women being filmed without their knowledge by men wearing the glasses, often in everyday settings such as beaches, shops, and sidewalks. Those videos can later appear online and attract harassment, while the people recorded may not even realize it happened until much later. 

Privacy concerns are not limited to casual misuse. The report says some wearers have been surprised to discover what their glasses were recording, while lawsuits have also been filed over videos captured through the devices and used for AI training. In addition, experts quoted in the report warn that if smart glasses become common, it may become much harder to enforce norms around sensitive places like courthouses, hospitals, museums, and bathrooms. 

Meta says the glasses are designed with privacy in mind and that users should behave responsibly. The company’s spokesperson told the BBC that it has teams focused on limiting misuse, but also argued that the ultimate responsibility lies with individual users. Even so, the report notes that visible indicators like the recording light may be too subtle to reliably alert bystanders, especially in bright outdoor conditions.

Despite the backlash, the commercial momentum is strong, and other major tech firms are preparing their own versions. Apple, Snap, and Google are all reportedly working on smart-glasses products, suggesting this could become a major new consumer category rather than a passing trend. The BBC’s reporting points to a familiar tech dilemma: a device can be genuinely useful while still raising difficult questions about consent, surveillance, and the limits of public privacy.
Read more »
WhatsApp Scam
Android Malware APK Malware Cyber Attacks Cyber Fraud Digital Invitation Scam Mobile Banking Threats OTP Theft UPI Fraud WhatsApp Scam

Rising Digital Invitation Scams Highlight Need for Strong Cyber Awareness


 

What was once used for birthdays, weddings, corporate events, and social gatherings has increasingly been weaponized by cybercriminals as a sophisticated phishing technique. 

The security research community has observed that threat actors are increasingly using commonly used invitation platforms and compromised email accounts to distribute fraudulent event links designed to harvest credential information, financial data, and sensitive personal information by leveraging their credibility.

It is evident how even routine online interactions are becoming part of the modern cyber threat landscape when malicious emails mimic legitimate invitation services and utilize the psychological urgency of social engagement. This highlights how even routine online interactions are now a source of cyber threats. 

A cybersecurity investigator has noted that the threat is now extending far beyond deceptive email invitations, as hackers are actively distributing malware-laced Android Package Kit (APK) files disguised as digital event invitations via messaging platforms such as WhatsApp and Telegram. 

A malicious file is often accompanied by socially engineered labels, such as wedding invitations, housewarming ceremonies, or private party invitations, which are designed to reduce suspicion and stimulate immediate downloads. It often mimics utility tools, but remains operationally dormant to avoid detection once installed on an Android device. 

Once embedded, the rogue application quietly embeds itself among legitimate applications, frequently imitating utility tools. It has been reported that victims unknowingly grant extensive permissions to threat actors, including access to call logs, SMS services, notifications, contacts, and screen recording capabilities, effectively giving them deep surveillance access to their devices.

Several observed cases have demonstrated that the malware can intercept one-time passwords, monitor banking and UPI sessions in real-time, and harvest financial credentials directly from user screen activity. Recently, a Bengaluru-based business owner has experienced the severity of the attack chain after receiving a fraudulent wedding invitation APK through WhatsApp, causing unauthorized access to financial information and a financial loss of approximately 5 lakh before detection of the compromise. 

A number of researchers investigating these campaigns have concluded that the attack infrastructure is typically conducted using two highly effective compromise methods that bypass user suspicion and device-level trust mechanisms. As a result of interaction with the malicious invitation link, the link appears broken or inactive. However, behind-the-scenes processes silently deploy credential-stealing malware that harvests passwords, device information, and sensitive personal information. 

Secondly, victims are directed to convincingly spoofed login portals in which their account credentials are captured in real time, allowing threat actors access to banking, email, and payment services without their consent. 

A number of fraudulent invitations deliberately avoid detailed event information in order to induce impulsive clicks, depending instead on urgency and familiarity. In addition to users being advised to treat unsolicited invitations with caution, particularly those received through messaging applications or from unknown senders, IT security experts also recommend reporting and deleting suspicious e-mails as soon as they become aware of them. 

According to threat intelligence firm CloudSEK, these campaigns have resulted in large-scale financial fraud operations. Within 48 hours, one threat group processed transactions worth nearly 25-30,000 crores, emphasizing the rapid scalability of the ecosystem and the high number of victims involved. Specifically, the firm found that the attacks exploit the trust architecture behind SIM-based verification systems commonly used by UPI platforms. 

In such systems, device-linked mobile numbers are considered proof of legitimate account ownership. A malicious APK disguised as a traffic violation notice or a digital invitation is often the first step in establishing covert access to a smartphone's messaging features after securing SMS permissions. 

After deploying the so-called “Digital Lutera” toolkit, CloudSEK indicated that attackers manipulate identity validations and SMS workflows through a specialized Android framework on separate devices. 

With this feature, bank registration messages may be intercepted and OTPs are silently forwarded to attacker-controlled Telegram channels without the victim's knowledge. Additionally, the report revealed that fabricated "sent" SMS records are inserted into message histories in order to maintain an illusion of legitimate activity, such that UPI applications are misled into believing that authentication requests originate from the victim's own smartphone.

Thus, cybercriminals have the opportunity to remotely register and manage the UPI account of a victim even when the original SIM card remains physically in the user's possession. Previously, CloudSEK notified regulators and financial institutions in order to strengthen mitigation frameworks before the threat expands. As part of its responsible disclosure process, it said that it has already notified regulators and financial institutions. 

The convergence of digital payment ecosystems and mobile-first communication platforms represents a shift toward socially engineered, device-centric financial attacks, warn cybersecurity experts. Threat actors are increasingly exploiting human behavior and weaknesses in authentication workflows to exploit APK sideloading, SMS intercept frameworks, and compromised messaging channels as a means of exploiting trust-driven human behaviour.

A stronger understanding of user awareness, stricter application permission controls, and enhanced anomaly detection across UPI and telecommunication infrastructure will assist in limiting the operational scale of these fraud networks before they become a more persistent threat to India's rapidly expanding digital sector.
Read more »
technology
Artificial Intelligence Claude GitHub Opencode technology

OpenCode’s Rapid Growth Reflects Rising Developer Concerns Over AI Vendor Dependence

 





A glaring divide is emerging in the AI coding industry as developers increasingly weigh the convenience of fully managed coding platforms against the flexibility of open-source alternatives designed to avoid dependence on a single provider.

The debate intensified this week after Anthropic used its first “Code with Claude” developer conference to showcase major upgrades across its Claude Code ecosystem. The company announced that rate limits for Claude Code users on Pro, Max, Team, and Enterprise plans would be significantly expanded, while peak-hour usage restrictions were removed entirely. Anthropic also raised usage limits for its Opus API and disclosed a major infrastructure agreement with SpaceX involving the Colossus 1 data center.

According to the company, the agreement will provide access to more than 300 megawatts of computing power and approximately 220,000 Nvidia GPUs expected to come online within weeks. The move reflects the broader AI industry race to secure high-performance computing infrastructure as demand for generative AI services continues to increase.

Anthropic also introduced several updates aimed at turning Claude Code into a more advanced managed development environment. These included expanded Managed Agents capabilities, support for coordinating multiple AI agents simultaneously, a public beta feature called Outcomes, and an experimental memory system internally referred to as “dreaming,” which is intended to help AI systems retain and improve contextual understanding over time.

During the event, Anthropic executive Boris Cherny demonstrated remote agents and automated routines capable of running coding tasks asynchronously, effectively allowing Claude Code to function more like a workflow orchestration platform rather than a traditional coding assistant.

At the same time, a separate trend has been accelerating across the open-source community. OpenCode, an independent coding harness project associated with SST, has experienced a dramatic rise in popularity after positioning itself as an alternative to vendor-controlled AI development environments.

The project’s GitHub repository has now surpassed 157,000 stars, overtaking the roughly 122,000 stars associated with Anthropic’s own Claude Code repository at the time of reporting. While GitHub stars do not necessarily represent active users or production deployments, they are often viewed as indicators of developer awareness, interest, and community support.

The roots of OpenCode’s instant growth trace back to January 2026, when Anthropic introduced server-side authentication checks that prevented third-party tools from accessing Claude Pro and Max subscriptions through OAuth-based authentication methods.

Several projects, including OpenCode, Cline, and RooCode, were affected by the policy change. Prior to the restrictions, these tools allowed developers to run autonomous coding workflows through fixed-price Claude subscriptions rather than paying significantly higher API-based usage fees tied to token consumption.

From Anthropic’s perspective, the restriction addressed a business and infrastructure problem. Subscription plans were designed to support usage within the company’s own ecosystem, while third-party tools were effectively redirecting high-volume workloads through pricing structures never intended for external automation platforms.

Discussions across developer forums, including lengthy conversations on Hacker News, showed that many users understood Anthropic’s reasoning. However, criticism quickly emerged over the manner in which the restrictions were enforced. Developers reported that the changes were introduced without advance notice, disrupting workflows in active sessions. Some users also claimed that automated abuse-detection systems temporarily restricted accounts during the transition period.

OpenCode responded rapidly after the restrictions took effect. The project added support for ChatGPT Plus integrations within hours and began expanding compatibility across multiple AI providers. Anthropic later formalized its position in updated Terms of Service published in February, clarifying that subscription OAuth tokens were not intended for third-party routing or automation tools.

The dispute escalated further in March after OpenCode reportedly received legal requests related to Claude subscription authentication. Shortly afterward, the project merged an update removing references to Claude Pro and Max authentication from its codebase. By April 4, Anthropic’s enforcement measures had expanded to additional third-party harnesses, including OpenClaw and NanoClaw, pushing developers toward pay-as-you-go API billing structures.

Interest in OpenCode accelerated during this period. On March 21, a Hacker News discussion surrounding the project gained more than 1,200 points and hundreds of comments, driving additional visibility across the developer community. By early April, the repository had already crossed 120,000 GitHub stars.

As of May 8, project activity data showed approximately 156,904 stars, 18,259 forks, 4,788 issues, and more than 1,600 open pull requests. OpenCode’s website also claimed participation from over 850 contributors and estimated usage among roughly 6.5 million monthly developers.

Industry observers note that the OAuth dispute alone likely does not explain OpenCode’s growth. Instead, the incident appears to have accelerated an existing movement toward model-agnostic development tools. OpenCode gradually shifted its messaging away from low-cost Claude access and toward provider neutrality, emphasizing that developers should be able to switch between AI models as pricing, performance, and capabilities evolve.

That distinction is increasingly important as competition intensifies between major AI providers. A developer using a model-agnostic harness can move between Anthropic, OpenAI, or other models with relatively minor configuration changes. In contrast, developers operating entirely within a vertically integrated ecosystem may face higher switching costs if pricing structures, usage limits, or platform policies change unexpectedly.

The debate mirrors earlier divisions within the software infrastructure industry. Some analysts have compared the current situation to Docker and Podman, where one platform focused heavily on integrated services and managed workflows while the other prioritized portability, operational control, and independence from platform lock-in.

OpenCode’s rise has also drawn criticism from parts of the developer community. Users in public discussions have raised concerns about high memory usage, the growing complexity of the project’s TypeScript codebase, inconsistent release stability, and the broader security implications of integrating multiple AI providers into a single framework.

Security considerations remain particularly relevant because every additional provider connection potentially expands the software’s attack surface. OpenCode also faced backlash after removing Claude subscription authentication support following reported legal pressure, with some developers expressing frustration over how the project handled the situation.

Still, the overall ndustry direction appears increasingly clear. Anthropic is investing heavily in a future built around tightly managed AI coding ecosystems that combine infrastructure, orchestration, memory systems, and coding assistance within a single platform.

At the same time, open-source projects such as OpenCode, Cline, Aider, and OpenClaw continue to attract developers seeking portability and reduced dependency on individual AI vendors.

For many software teams, the central issue is no longer choosing between Claude Code and OpenCode alone. Instead, developers are beginning to decide whether critical AI-assisted workflows should remain under the control of a single provider or operate through more flexible systems capable of adapting as the AI landscape continues to shift.

Read more »
Data Theft
Cyber Attacks Cyber Data Cyber Security Ransomware Attacks CyberCriminal Data protection data security Data Theft

Foxconn Cyberattack Exposes Alleged Intel, Apple, Nvidia and Google Project Data

 

A wave of digital intrusion lately hit Foxconn, causing interruptions across certain segments of its North American facilities when the Nitrogen ransomware collective admitted involvement - disclosing they had infiltrated systems and extracted vast troves of confidential information. This incident underscores, yet again, how intensifying demands from cybercriminal networks now challenge critical links within international tech logistics, particularly those manufacturers embedded deep inside the production ecosystems serving top-tier technology brands. 

Later on, after initial reports emerged, Foxconn confirmed disruptions across multiple sites in North America. Right away, its cyber defense units began executing crisis protocols instead of waiting for further escalation. Because systems required immediate protection, temporary measures went into place to shield manufacturing flow. Even so, certain plants experienced brief halts in daily activity due to digital interference. Gradually now, output levels are stabilizing following those earlier setbacks. 

Later, the ransomware operators listed Foxconn on their public leak page, stating they had taken close to 8 terabytes of data - over 11 million individual files. Their claim centers on possession of private technical records: blueprints, project directives meant for internal use, engineering schematics. Information tied to big tech names like Apple, Nvidia, Intel, Google, and Dell reportedly appears within what was pulled. Though unverified, the alleged haul suggests access to development assets considered highly sensitive. 

Even though hackers say they took customer data, Foxconn hasn’t said if any was truly exposed. Without a clear statement, it remains unclear how much information may have been reached - or if partner details were touched at all. Ever since 2023, the Nitrogen ransomware crew has operated under suspicion of ties to variants spawned from exposed Conti 2 code. Researchers point out weaknesses in their tools - especially when striking VMware ESXi systems. 

Despite handing over payments, certain targets still could not retrieve locked data. This failure stems from defective decryption mechanisms built directly into the malicious software. Recovery gaps appear baked into its flawed design. Should that glitch persist, affected groups might face deeper troubles - offering money to hackers does not always bring back locked data or recover what was taken. Back in 2024, the LockBit group took credit for breaching Foxsemicon Integrated Technology - a firm within the larger Foxconn Technology Group. 

It wasn’t an isolated case; a similar unit of Foxconn in Mexico had drawn their attention two years prior. Ransomware attacks on this network are nothing new. The pattern stretches further back than it might first appear. Now worries spread through the hardware world after the recent security incident, given how central Foxconn is to building devices and moving parts for big tech firms worldwide. 

When something interferes with its work, delays may ripple into assembly timelines, logistics systems, operational frameworks, even sensitive processes behind upcoming gadgets and corporate tools. Because they rely on many partners, handle valuable technical details, and face tight deadlines when operations fail, factories and logistics companies often attract ransomware groups. 

With more strikes hitting essential vendors lately, better separation between internal systems is becoming a priority - alongside stronger crisis plans and tighter protection for confidential design files that could be stolen or leaked.
Read more »
zero-day vulnerability
AI-generated exploit Artificial Intelligence Cybersecurity Google Threat Intelligence Group Technology zero-day vulnerability

Google Detects AI-Generated Zero-Day Exploit Targeting Web Admin Tool

 

Researchers from Google Threat Intelligence Group (GTIG) have revealed that a recently identified zero-day exploit aimed at a widely used open-source web administration platform was likely created with the help of artificial intelligence.

The vulnerability, which targeted the platform’s two-factor authentication (2FA) mechanism, could have allowed attackers to bypass critical security protections. While the software involved has not been publicly identified, researchers confirmed that the attack was stopped before it reached large-scale exploitation.

According to GTIG, analysis of the Python-based exploit strongly indicates the involvement of AI tools during the vulnerability discovery and weaponization process. The team noted that the coding style, educational explanations within the script, and even fabricated technical details closely resembled outputs commonly produced by large language models (LLMs).

“For example, the script contains an abundance of educational docstrings, including a hallucinated CVSS score, and uses a structured, textbook Pythonic format highly characteristic of LLMs training data,” GTIG says in a report today.

Researchers also stated that the flaw itself appeared to be a semantic logic issue — an area where AI systems tend to perform effectively — rather than traditional vulnerabilities like memory corruption or poor input sanitization that are usually identified through fuzzing or static analysis techniques.

Google informed the affected software developer about the issue, allowing security measures to be implemented quickly and the attack to be disrupted before wider abuse occurred.

“For the first time, GTIG has identified a threat actor using a zero-day exploit that we believe was developed with AI,” GTIG researchers say.

The report additionally highlights the increasing role of AI in cybercrime operations. Google observed threat groups linked to China and North Korea — including APT27, APT45, UNC2814, UNC5673, and UNC6201 — using AI systems for exploit development and vulnerability research.

Meanwhile, Russia-associated threat actors were reportedly using AI-generated decoy code to conceal malware strains such as CANFAIL and LONGSTREAM. Google also referenced a Russian campaign known as “Overload,” where AI voice cloning technology was allegedly used to imitate journalists in fabricated videos spreading anti-Ukraine narratives.

The report further examined the Android malware PromptSpy, previously documented by ESET, for its integration with Gemini APIs to automate interactions on infected devices.

Investigators identified an autonomous component called "GeminiAutomationAgent," which reportedly relies on a hardcoded prompt to help the malware evade AI safety mechanisms. Researchers explained that the prompt assigns the malware a harmless persona, enabling it to calculate interface geometry and interact with device functions more effectively.

Google researchers also warned that the malware appears capable of replaying authentication methods, including PINs and lock patterns, using AI-assisted techniques.

The company concluded that cybercriminals are increasingly scaling access to premium AI services through methods such as automated account generation, proxy relay systems, and shared account infrastructures.
Read more »
WhatsApp Payments
Bengaluru Startup Delayed Payments Fintech Solution Technology WhatsApp Payments

WhatsApp-Based Bengaluru Start-up Aims to Reduce Delayed Payment Woes

 

Delayed payments are a quiet but serious problem for small businesses, freelancers, tutors, and service providers, because the work may be complete while the money still remains stuck in follow-up cycles. In Bengaluru, a start-up called Lenda is trying to address that friction with a WhatsApp-first tool that automates reminders, supports negotiation, and helps users recover dues without creating awkward back-and-forth. 

The issue is not only financial but also practical, since chasing payments consumes time and can damage relationships between clients and providers. Many people already rely on WhatsApp for everyday communication, so the start-up is using that familiarity to make payment collection feel less like a formal recovery process and more like a normal conversation. 

Lenda’s approach is built around interactive messages instead of one-way reminders, which means a borrower can respond directly inside WhatsApp. The system lets recipients confirm payment, ask for extra time, raise a dispute, or even make a partial payment, which makes the process more flexible than a standard SMS reminder. That interaction matters because delayed payments often happen not just from unwillingness to pay, but also from timing problems, confusion, or simple forgetfulness. 

The start-up also tries to solve a structural problem for small operators such as teachers, class coordinators, and freelancers who collect money from many people at once. Its batch-reminder feature allows users to organize groups and send collective follow-ups, which reduces repetitive manual work and makes collections easier to manage. Lenda also includes late-fee options and a repayment score, aiming to encourage timely payment while giving businesses more control over overdue accounts. 

What makes the issue important is that delayed payments can disrupt cash flow, especially for small businesses that depend on regular incoming money to pay expenses and plan operations. By offering a “no-app” solution inside WhatsApp, Lenda is betting that the biggest barrier is not a lack of reminders, but the inconvenience and discomfort of asking for money repeatedly. That is why this Bengaluru start-up’s idea is less about messaging and more about fixing a common payment problem in a simpler, more human way.
Read more »
Subscribe to: Posts (Atom)

Featured