3 results found

Security researcher Chaotic Eclipse has publicly released "RoguePlanet," a seventh Windows zero-day exploit, just hours after Microsoft's record-breaking June Patch Tuesday. This vulnerability grants SYSTEM privileges on fully patched Windows 10 and 11 systems, deepening a dispute with Microsoft over previous disclosures. The exploit leverages a race condition in Windows Defender.

Sears Home Services publicly exposed millions of AI chatbot conversations, including phone calls and text chats, containing sensitive customer data like names, addresses, and repair details. Discovered by a security researcher, the leak also included extended audio recordings capturing private ambient conversations. This incident highlights critical privacy and reputational risks as companies integrate AI into customer service.

DJI will pay security researcher Sammy Azdoufal $30,000 for discovering critical vulnerabilities in its Romo robot vacuums. Azdoufal accidentally accessed a network of 7,000 Romo devices, exposing privacy risks including PIN-less video access. While some issues are patched, a more severe vulnerability is still being addressed, with full system upgrades expected within a month.