CyberSecurity Today: Zip File Attacks, iPhone Reboots, and LLM Vulnerabilities

In today's episode, host Jim Love discusses hackers leveraging zip file concatenation to evade detection, mysterious iPhone reboots hindering police investigations, and Mozilla's Odin's in-depth analysis of security issues in a large language model. Discover how cybercriminals hide Trojans in zip files, how the iOS 18 feature Before First Unlock (BFU) could be affecting forensic examinations, and explore the intricacies of prompt injections and security implications in ChatGPT. Plus, tune in for an exclusive interview with Marco Figueroa from Mozilla's Odin Bug Bounty project to delve deeper into these findings.

00:00 Introduction and Headlines
00:21 Hackers Exploit Zip File Concatenation
01:48 Phishing Campaign with Remcos RAT
03:12 Mysterious iPhone Reboots
04:18 Mozilla's Odin Project and LLM Security
06:40 Conclusion and Afterwords

Jailbreaking AI: Behind the Guardrails with Mozilla's Marco Figueroa

In this episode of 'Cyber Security Today,' host Jim Love talks with Marco Figueroa, the Gen AI Bug Bounty Program Manager for Mozilla's ODIN project. They explore the challenges and methods of bypassing guardrails in large language models like ChatGPT. Discussion points include jailbreaking, hexadecimal encoding, and the use of techniques like Deceptive Delight. Marco shares insights from his career, including his experiences at DEF CON, the NSA, McAfee, Intel, and Sentinel One. The conversation dives into Mozilla's efforts to build a secure AI landscape through the ODIN bug bounty program and the future implications of AI vulnerabilities.

00:00 Introduction and Guest Introduction
00:22 Understanding Large Language Models and Jailbreaking
01:53 Recent Jailbreaking Techniques and Examples
04:42 Interview with Marco Figueroa: Career Journey
10:12 Marco's Work at Mozilla and the ODIN Project
16:50 Exploring Prompt Injection and Hacking
23:21 Future of AI Security and Final Thoughts

FBI Warnings, TikTok's Canadian Shutdown, Major Data Breach Arrests & More | Cybersecurity Today

In this episode of Cybersecurity Today, host Jim Love highlights the FBI's warning about growing phishing attacks exploiting government email credentials, leading to potential data theft and ransomware attacks. The Canadian government orders TikTok to shut down its domestic operations over national security fears, while the app plans to fight the decision. Authorities arrest Alexander Connor Moucka in conjunction with massive data breaches at companies like Ticketmaster and AT&T. Additionally, a Brampton landlord becomes a victim of an e-transfer scam, emphasizing the importance of securing email accounts. Stay informed with the latest cybersecurity news and recommendations.

00:00 Introduction and Headlines
00:22 FBI Warning on Phishing Attacks
01:53 International Law Enforcement Actions
02:26 Canada Orders TikTok Shutdown
03:45 Major Data Breach Arrests
04:22 Brampton Landlord E-Transfer Scam
05:16 Securing Personal Transfers
06:02 Conclusion and Show Notes