Security news weekly round-up - 10 May 2024
Tags: security
Published: 2024-05-10 22:12:07

---
title: Security news weekly round-up - 10 May 2024
published: true
description: Weekly review of top security news between May 3, 2024, and May 10, 2024
tags: security
cover_image: https://dev-to-uploads.s3.amazonaws.com/i/0jupjut8w3h9mjwm8m57.jpg
series: Security news weekly round-up
---

## __Introduction__

In this week's review, the articles that we'll cover are about _digital security_, _internet security_, _misuse of generative artificial intelligence_, and _WordPress website security_.

<hr/>

## [The hacker’s toolkit: 4 gadgets that could spell security trouble](https://www.welivesecurity.com/en/cybersecurity/hackers-toolkit-gadgets-security-trouble/)

They (the gadgets) can spell trouble if they get into the wrong hands. We are covering this article so that you can know what can happen if you misplace them. These gadgets are Ducky and Bunny, Flipper Zero, and O.MG.

The following excerpt explains what can go wrong:

> There are a bunch of popular geeky gadgets with endearing names that provide valuable functionality for hobbyist hackers and security professionals alike. However, many such bits of kit can be likened to double-edged swords – they can assist both in testing an organization’s security and breaching its defenses.

## [Novel attack against virtually all VPN apps neuters their entire purpose](https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/)

Based on the researchers, the attack may have existed since 2002. It's a worthy read because almost every security-minded internet uses a Virtual Private Network (VPN) and you should know that its purpose can be defeated.

Here is a quick excerpt for you that shows why this attack is scary, to say the least:

> The attack allows some or all traffic to be routed through the unencrypted tunnel. In either case, the VPN application will report that all data is being sent through the protected connection. Any traffic that’s diverted away from this tunnel will not be encrypted by the VPN

## [An Update on How Cybercriminals Are Using GenAI](https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/back-to-the-hype-an-update-on-how-cybercriminals-are-using-genai)

The core of the article is that cybercriminals are using tools that can allow an LLM like ChatGPT to produce unethical answers. In technical jargon, this can be called a jailbreak.

The following is an excerpt from the article to get you started:

> Service providers like OpenAI or Google are working hard to mitigate these jailbreaks and trying to patch any new vulnerability with every model update. This forces malicious users to come up with more sophisticated jailbreaking prompts.

> This cat-and-mouse game has opened the market to a new class of criminal services in the form of jailbreaking chatbot offerings

## [Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress Sites](https://thehackernews.com/2024/05/hackers-exploiting-litespeed-cache-bug.html)

Update to the latest version of the plugin, and stay safe. The excerpt below is why you should take this advice seriously.

> Creating admin accounts on WordPress sites can have severe consequences, as it allows the threat actor to gain full control over the website and perform arbitrary actions, ranging from injecting malware to installing malicious plugins.

## __Credits__

Cover photo by [Debby Hudson on Unsplash](https://unsplash.com/@hudsoncrafted).

<hr>

That's it for this week, and I'll see you next time.