botnets

Hackers can exploit prompt injection vulnerabilities in 9 popular AI tools to create massive botnets. Large language models (LLMs) cannot distinguish between legitimate and malicious commands, allowing attackers to inject harmful instructions into emails or source code. Current 'push' attacks target individuals but are limited in scale due to the need to send injections directly to victims.

Canada's spy agency, the Canadian Security Intelligence Service (CSIS), obtained a court warrant to neutralize two foreign-run botnets by altering infected servers, home routers, and IoT gear. This marks the first use of CSIS's threat reduction warrant powers for such an action.

China's state-backed groups are leveraging covert networks of compromised devices to execute attacks in a low-cost, low-risk, and deniable manner. This industrialized approach to botnets enables scalable cyber operations while maintaining plausible deniability.

Iranian media alleges the US employed backdoors and botnets to disable networking equipment during the ongoing war. Chinese state media is amplifying these accusations.