Tag: GPT-4o

  • The AI Reconnaissance: 91,000 Attacks Target Exposed LLM Infrastructure

    The AI Reconnaissance: 91,000 Attacks Target Exposed LLM Infrastructure

    Adversaries have embarked upon a pervasive reconnaissance of the internet, systematically identifying misconfigured proxy servers that facilitate unauthorized access to commercial services predicated on Large Language Models (LLMs). This campaign, manifesting as a methodical intelligence-gathering operation rather than mere erratic scanning, has been active since at least late December. According to the threat intelligence platform…

  • AI CAPTCHA Solver: New Tool Uses GPT-4o and Gemini to Beat Various Web Security Challenges

    AI CAPTCHA Solver: New Tool Uses GPT-4o and Gemini to Beat Various Web Security Challenges

    AI-Powered CAPTCHA Solver This project is a Python-based command-line tool that uses large multimodal models (LMMs) like OpenAI’s GPT-4o and Google’s Gemini to automatically solve various types of CAPTCHAs. It leverages Selenium for web browser automation to interact with web pages and solve CAPTCHAs in real-time. A successful solve is recorded as a GIF in…

  • Call Me an Idiot: How to Persuade an AI to Break Its Rules

    Call Me an Idiot: How to Persuade an AI to Break Its Rules

    Entrepreneur Dan Shapiro encountered an unexpected obstacle: a popular AI chatbot refused to transcribe business documents, citing copyright restrictions. Rather than conceding defeat, Shapiro decided to test an old psychological trick. He recalled Robert Cialdini’s classic Influence: The Psychology of Persuasion, which describes manipulation techniques effective on both sellers and buyers—liking, authority, scarcity, reciprocity, social…

  • AIOps Under Threat: Researchers Demonstrate How to Poison AI to Hack IT Infrastructure

    AIOps Under Threat: Researchers Demonstrate How to Poison AI to Hack IT Infrastructure

    Automation of IT infrastructure management through artificial intelligence, as revealed in a recent study by RSAC Labs and George Mason University, may carry substantial risks. The researchers found that AIOps solutions—systems leveraging models akin to LLMs to analyze telemetry such as logs, performance metrics, traces, and alerts—are susceptible to data poisoning attacks. Such tools are…