DEV Community: Hacks.gr

FreeRDP 3.33 now works in a browser and fixes 13 security issues

Hacks.gr — Mon, 02 Nov 2026 12:18:17 +0000

FreeRDP 3.33 is now available, marking a major milestone with the introduction of WebAssembly support, allowing the client to run within web browsers.

This release includes WebCodecs integration for H.264/AV1 decoding and web-based audio/microphone support.

Developers will also find 13 security-related fixes, experimental UDP connection support, and improved native file transfer handling for macOS.

These updates provide better cross-platform performance and accessibility for remote desktop environments.

Use via browser

FreeRDP can now be run in a browser, using WebAssembly technology. The new version supports H.264 and AV1 video decoding, as well as audio and microphone in a web environment.

New features

Version 3.33 also adds experimental support for direct connections over UDP. It also improves window management for applications running on a remote computer.

On macOS computers, users can now copy files without using FUSE. Also included are improvements to the Android app and X11 systems, as well as support for inputting Unicode characters over special Unix communication channels.

Security fixes

Version 3.33 fixes 13 security issues that were documented on GitHub.

↳

READ ALSO

HACKS.GR / RELATED

Software & Open Source

Audacity 4.0.2 update released, fixes crashes and file corruption

↗

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr

New digital attack on government services using artificial intelligence

Hacks.gr — Mon, 02 Nov 2026 11:46:30 +0000

Security researchers have detailed a cyber espionage campaign tracked as CL-UNK-1211 targeting Linux government infrastructure.

The activity, observed between October 2025 and April 2026, utilized LLMs and automated AI agents to generate payloads, deploy custom cross-platform backdoors like SysGoRAT, and execute malicious scripts.

This activity was detected by security researchers and recorded from October 2025 to April 2026. The perpetrators focused on computers with the Linux operating system connected to government agencies, with the aim of collecting information, stealing data from databases, and accessing government mailboxes.

The use of artificial intelligence in attacks

Researchers were particularly struck by the fact that some of the programs used by the attackers appeared to have been created with the help of artificial intelligence systems. Instead of pure code, the files contained explanatory notes and thought steps that showed how the commands were generated.

To maintain access to compromised systems, the attackers used various methods, such as modifying configuration files, interfering with login pages to steal credentials, and searching for passwords stored in plain text.

Actions on compromised systems

At the same time, the perpetrators used a special remote access program, which constantly communicates with an external address to execute commands. In one case, they attempted to locate emails related to social media by using a special command script to search for specific keywords.

↳

READ ALSO

HACKS.GR / RELATED

Cyber Attacks & Data Breaches

New Windows program uses artificial intelligence to evaluate victims' stolen data

↗

They also attempted to compress these messages into files to remove them, although ultimately the program failed to execute due to syntax errors in the code.

The broader trend of utilizing automated tools

This case adds to a broader trend, where various groups of attackers are leveraging automated tools and open source software to carry out digital attacks.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr

Hackers pretended to be technical support in Teams and took control of computers

Hacks.gr — Mon, 02 Nov 2026 11:38:28 +0000

Attackers combined Microsoft Teams social engineering with Quick Assist and AD CS misconfigurations (such as ESC1 and ESC8) to obtain privileged certificates.

Without a software patch available, security relies on configuration hardening and restricting external tenants.

According to a Microsoft report, the attackers did not exploit any technical issues or vulnerabilities in the Teams application itself. Instead, they relied on people being tricked and misconfigured in companies' identity and certificate management systems.

How the attacks started

The attackers contacted employees via Teams messages and calls, posing as internal technical support. They used external accounts with support-related names to appear familiar to the victims.

They then convinced users to open a built-in Windows remote assistance tool and read them the login password. This gave them immediate and complete control of the employee's computer. They then installed files and programs that allowed them to proceed with the next steps of the attack.

How they used the certificates

Microsoft has investigated two similar attacks, without linking them to any specific known group or disclosing dates. In the first case, the attackers identified a vulnerable setting in the system's certificates that allowed ordinary users to request administrator permissions. This allowed them to gain access to important accounts and copy company data to an external server, even though automated defenses blocked many of their attempts.

↳

READ ALSO

HACKS.GR / RELATED

Cyber Attacks & Data Breaches

New Windows program uses artificial intelligence to evaluate victims' stolen data

↗

In the second case, because this setting was not present, the attackers used a different technique by forcing the company's central server to authenticate itself to a computer they controlled. This allowed them to request a certificate for the central server itself. In this case, immediate system isolation stopped further action.

What does it mean for corporate security?

Since this is not a code issue but a misconfiguration issue, there is no automatic update to fix the issue. Protection is based on changes to settings, restricting external accounts in Teams, and enabling additional security measures in authentication services.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr

Google confirms Googlebooks will get detachable keyboards

Hacks.gr — Mon, 02 Nov 2026 11:19:19 +0000

Google confirmed plans for upcoming detachable, tablet-like Googlebook devices during the Android Dev Summit 2026 keynote, expanding the OS beyond clamshells and convertibles amid previous portrait orientation constraints.

The announcement was made during a developer conference by Google's Marisol Ryu, who explained that the operating system already supports various types of devices and will soon expand to these detachable options. This is the first official confirmation that there will be devices of this type.

Previous leaks and manufacturers

Back in July, images of a Lenovo device with a detachable keyboard and kickstand were leaked. Despite the leak, it remains unclear whether Lenovo will be the first to bring such a device to market or if another manufacturer will catch up.

According to estimates, the delay in the appearance of such devices may be due to software limitations, particularly regarding the correct operation of the screen when it is rotated to a vertical position.

↳

READ ALSO

HACKS.GR / RELATED

Smartphones, Wearables & Gadgets

Apple is preparing updates for its three commercial iPads by 2027

↗

The current range of Googlebook devices includes a total of five models from manufacturers such as Acer, Asus, Dell, HP and Lenovo.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr

Ford unveils new vehicle data website, promises transparency

Hacks.gr — Mon, 02 Nov 2026 11:08:20 +0000

Ford has introduced a privacy commitment and dedicated web portal explaining connected vehicle data collection.

The rollout addresses consumer transparency as automotive software and telemetry expand, balancing feature requirements like real-time navigation with driver data control.

The move, announced Monday, aims to educate drivers and give them control over their data as new, more connected cars roll out. According to research, only 14% of consumers in the United States fully understand what data their vehicle collects.

The effort comes at a time when automakers are in the spotlight over privacy issues. For example, General Motors recently reached a $220 million settlement with 36 states after allegations that it sold drivers' personal data.

What the company clarifies about the data

Through the new website, owners can see how information is collected. Christine Jones, Ford's chief data protection officer, said the company does not share driving information with companies that sell data.

↳

READ ALSO

HACKS.GR / RELATED

Privacy News

General Motors to pay $220 million to US states for selling driver data

↗

At the same time, the company points out that the data will not be used for targeted advertising, with the main goal of building a relationship of trust with the public.

Which functions are affected?

Drivers have the option to choose whether to share their data. However, deciding to turn off these options means that some car features stop working.

For example, turning off data sharing disables services like live navigation and built-in roadside assistance.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr

How cyberattacks on smart devices are hitting everything from supermarket fridges to cars

Hacks.gr — Mon, 02 Nov 2026 10:48:30 +0000

Recent security incidents affecting connected retail systems in Europe demonstrate the physical impact of IoT vulnerabilities, from commercial refrigerator temperature manipulation in France to IT disruptions at Ahold Delhaize in Belgium and Luxembourg.

In theory, any device that connects to the internet, either directly or through apps and services, could be a target. Vulnerable devices include security cameras, video doorbells, smart locks, thermostats, home appliances and network routers, with the latter accounting for more than three-quarters of attacks on connected devices. When attackers compromise a device, they can steal personal data, record conversations, change settings or use the device as a backdoor to penetrate the wider home network.

The risks aren’t limited to the home. Researchers have previously shown that they can remotely take control of moving vehicles by exploiting their connected entertainment systems, leading to major car recalls. However, critical infrastructure, such as water and power grids, is protected by multiple layers of security and monitoring, making them much more difficult targets than household appliances.

To protect devices, experts recommend immediately changing factory passwords, enabling two-factor authentication where available, and regularly updating their software. At the same time, it is suggested to limit device connections to the internet only when there is a real need and avoid unnecessary connected devices in the home, in order to reduce potential entry points for malicious users.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr

Audacity 4.0.2 update released, fixes crashes and file corruption

Hacks.gr — Mon, 02 Nov 2026 10:38:27 +0000

Audacity 4.0.2 arrives as a maintenance update resolving project corruption, crashes, and editing bugs.

Developers and audio editors will find fixes for empty audio clip handling, sample rate mismatches between tracks, and a specific Linux File Import dialog issue.

What does the new version fix?

The update resolves issues that resulted in file corruption when users opened projects with empty audio regions or copied audio between different projects. It also fixes a bug that caused audio corruption or tracks to be lost when moving to tracks with different sample rate settings.

The save process has been made more reliable, with duplicate project file extensions and file replacement errors fixed. Additionally, auto-save during recording has been restored.

Stability and ease of use

The new version prevents sudden program closures related to certain alignment settings, the use of effect repeat commands, and changing keyboard shortcuts.

↳

READ ALSO

HACKS.GR / RELATED

Software & Open Source

KDE Plasma 6.9 expected at the end of February with zoom improvements and old data cleanup

↗

Key shortcuts for trimming, clearing selection, and focusing have also been restored, and users can now use the scroll keys to navigate the timeline. Issues with menus, metadata management, and playback lag have also been fixed.

For Linux users, the update fixes an issue where the file import window would not display any files. It also improves the way the program handles characters from Chinese, Japanese, and Korean scripts when editing text.

The creators are continuing their work on the next version 4.1, which is expected to bring new features and bring back additional capabilities.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr

KDE Plasma 6.9 expected at the end of February with zoom improvements and old data cleanup

Hacks.gr — Mon, 02 Nov 2026 09:08:31 +0000

KDE developers announced Plasma 6.9 for late February, featuring an optimized KWin zoom filter, cleaner configuration handling, and a KRunner fix for modern Firefox bookmark paths.

Speed and file improvements

In terms of performance, the desktop zoom feature gets an improved image filter that reduces computer resource consumption. At the same time, the system now automatically cleans up old data regarding file and folder locations, preventing the size of configuration files from increasing.

Changes to search and apps

Firefox browser bookmark search gains compatibility with modern installations that store their data in specific system folders, although the fix only affects classic installations and not those made through special isolation packages.

Additionally, the app store allows users to copy and share links for locally installed programs, while minor fixes are made to the full-screen web page button and timer management.

Appearance and operation corrections

In window previews, windows excluded from screen recording will no longer appear in thumbnails, and an issue that prevented window thumbnails from displaying correctly has been fixed.

↳

READ ALSO

HACKS.GR / RELATED

Software & Open Source

October's new updates for popular programs and apps

↗

The profile tool for the terminal will now display the default profile along with custom ones, the settings sidebar now properly adapts to user-defined transparency options, and an issue where deleting objects with the keyboard while the user was dragging a selection area incorrectly affected the animation has been fixed.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr

Elon Musk publicly admitted that the cost of Grok Bot is unsustainable

Hacks.gr — Mon, 02 Nov 2026 08:43:21 +0000

Elon Musk has acknowledged that operating the Grok Bot carries an unsustainably high cost relative to its revenue, following subscriber complaints over usage limits.

Musk did not disclose specific financial figures or potential adjustments to subscription tiers for the AI-powered agent.

The discussion around the limits began when a user requested through the X platform to reinstate the weekly usage limit. Musk explained the financial pressure the service is facing, without revealing exact figures for costs and revenues, nor clarifying whether the company plans changes to subscription packages.

Grok Bot functions as a digital assistant capable of performing complex and autonomous tasks, such as research, mail management, web page creation and coordination of other digital tools, even when the user is absent. This system has its own computing environment on remote servers and access to browsers. This continuous interaction with multiple sequential steps and external services requires increased computing resources, raising the cost of service for each user.

The limit issues affect subscribers to programs such as SuperGrok, SuperGrok Plus, SuperGrok Heavy, Cursor Pro, Cursor Pro+, Cursor Ultra, and Cursor Enterprise plans. In X's current subscription system, Grok Bot usage shares the weekly limit with Grok and Cursor applications, although older Cursor plans have different billing rules.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr

South Korea presents historic $610 billion budget with focus on artificial intelligence and semiconductors

Hacks.gr — Mon, 02 Nov 2026 07:54:37 +0000

South Korea's historic budget allocation for 2027 doubles investments in semiconductors, physical AI, and data centers to 21.3 trillion won, while funding a domestic AI model and specialized engineering programs.

Of the total, 21,3 trillion won will be directed to sectors such as semiconductors, natural AI and data centers, nearly double the amount compared to 2026. In addition, a separate fund of 4,7 trillion won will be used to create a national AI model, aiming for world-leading performance. The government also plans to train 2.000 semiconductor design specialists and expand education for students and employees.

The country already utilizes university departments that are closely linked to large companies, such as Samsung Electronics and SK Hynix. Through these programs, the companies participate in course design, provide financial support and offer direct job opportunities to students before they graduate.

South Korea’s economy is expected to grow by 3,3% in 2026, the fastest pace since the pandemic, according to the International Monetary Fund. This momentum is fueled by increased global demand for computing power and semiconductors, with total exports approaching the $1 trillion mark annually. In October, exports rose 93,7% to $115,3 billion, while the trade surplus stood at $42,5 billion.

↳

READ ALSO

HACKS.GR / RELATED

AI Unlocked

Jobs in artificial intelligence pay twice as much, but bring exhaustion

↗

At the same time, the new budget foresees an increase in defense spending by 8,2% to 73,3 trillion won, with the aim of creating a strong and technologically advanced army that will utilize artificial intelligence, robots and drones.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr

Four NASA volunteers exit simulated Mars mission after 378 days

Hacks.gr — Mon, 02 Nov 2026 07:33:32 +0000

NASA's CHAPEA mission team successfully completed 378 days of isolation inside a 3D-printed Mars simulation habitat, navigating artificial communication delays of up to 44 minutes while supporting long-duration human spaceflight research.

The facility, which was built using 3D printing technology at the Johnson Space Center, covers approximately 158 square meters and represents a limited settlement on the surface of Mars. The crew of the second mission consisted of Commander Ross Elder, Medical Officer Ellen Ellis, Science Operations Manager Matthew Montgomery and Flight Engineer James Spicer. The members entered the space on October 19, 2025 and completed their mission on October 31, 2026.

During their stay, the volunteers faced daily challenges similar to those of a real space mission. They grew plants, conducted scientific experiments, performed simulated field walks, and maintained equipment. Special emphasis was placed on self-sufficiency and managing limited supplies, as direct resupply or the sending of spare parts from Earth are not feasible on such a journey.

A key element of the test was the simulation of communication delays, which due to distance can reach up to 22 minutes one way in real space conditions. As part of the experiment, emails to managers were subjected to artificial delays that in some cases reached 44 minutes in total.

↳

READ ALSO

HACKS.GR / RELATED

Digital Life

How Greek cities are transitioning into the digital age with millions of euros from the Recovery Fund and the National Strategic Reference Framework (NSRF)

↗

After leaving the habitat, the volunteers will undergo extensive medical and scientific evaluations lasting approximately two weeks. NASA will use the data to improve nutrition systems design, psychological support and crew performance, with the ultimate goal of both future missions to Mars and the Artemis program for the Moon.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr

New Windows program uses artificial intelligence to evaluate victims' stolen data

Hacks.gr — Mon, 02 Nov 2026 06:13:29 +0000

Security researchers have discovered VOLTA-AUTODOXER, a new Windows infostealer that uses large language models to analyze stolen data.

The malware harvests credentials, session tokens, and crypto keys, then employs models via OpenRouter to rank the victim's financial worth before exfiltration.

The program, known as VOLTA, infiltrates computers and collects massive amounts of personal data. Specifically, it can steal saved passwords, digital browsing traces, payment details, digital cryptocurrency wallets, and login profiles from various applications.

How stolen data is organized

After collecting the data, the program searches the victim's emails for receipts from orders and purchases to confirm their home address. It then creates a folder with information that includes location, address, employer, card details, and an estimate of the value of the bills.

To process this data, the program connects to artificial intelligence services. It primarily uses the Claude system, while it has a mechanism for automatically switching to other systems, such as Kimi and Gemini, in case the first system refuses to respond. A special instruction text asks the artificial intelligence to act as an analyst, assessing the value of the victim and how careful he was with his safety.

How the data reaches the perpetrators

All data and analysis results are sent to the perpetrators via the Telegram application at three different stages of the process.

↳

READ ALSO

HACKS.GR / RELATED

Cyber Attacks & Data Breaches

Binance reopens withdrawals after $6,3 billion theft

↗

According to the researchers, the program has ready-made settings for channels and connection keys, which indicates that it is likely a custom-made tool or one sold to other scammers.

>Stay connected with Hacks.gr

Set us as a preferred source on Google and find us on social media.

Preferred source

↗

end of article

Read the original English article on Hacks.gr

DEV Community: Hacks.gr

FreeRDP 3.33 now works in a browser and fixes 13 security issues

Use via browser

New features

Security fixes

>Stay connected with Hacks.gr

New digital attack on government services using artificial intelligence

The use of artificial intelligence in attacks

Actions on compromised systems

The broader trend of utilizing automated tools

>Stay connected with Hacks.gr

Hackers pretended to be technical support in Teams and took control of computers

How the attacks started

How they used the certificates

What does it mean for corporate security?

>Stay connected with Hacks.gr

Google confirms Googlebooks will get detachable keyboards

Previous leaks and manufacturers

>Stay connected with Hacks.gr

Ford unveils new vehicle data website, promises transparency

What the company clarifies about the data

Which functions are affected?

>Stay connected with Hacks.gr

How cyberattacks on smart devices are hitting everything from supermarket fridges to cars

>Stay connected with Hacks.gr

Audacity 4.0.2 update released, fixes crashes and file corruption

What does the new version fix?

Stability and ease of use

>Stay connected with Hacks.gr

KDE Plasma 6.9 expected at the end of February with zoom improvements and old data cleanup

Speed ​​and file improvements

Changes to search and apps

Appearance and operation corrections

>Stay connected with Hacks.gr

Elon Musk publicly admitted that the cost of Grok Bot is unsustainable

>Stay connected with Hacks.gr

South Korea presents historic $610 billion budget with focus on artificial intelligence and semiconductors

>Stay connected with Hacks.gr

Four NASA volunteers exit simulated Mars mission after 378 days

>Stay connected with Hacks.gr

New Windows program uses artificial intelligence to evaluate victims' stolen data

How stolen data is organized

How the data reaches the perpetrators

>Stay connected with Hacks.gr

Speed and file improvements