Tag

Persistence

All articles tagged with #persistence

security1 month ago•4 min saved

SleeperGem Uses Three RubyGems to Compromise Dev Machines

Security researchers uncovered SleeperGem, a three-package RubyGems supply-chain attack: git_credential_manager, Dendreo, and fastlane-plugin-run_tests_firebase_testlab were repackaged as loaders that fetch a second-stage payload from a Forgejo host; the malware avoids CI environments, drops a native daemon on developer machines, installs persistence via cron and a systemd user service, and can even plant a setuid root shell at /usr/local/sbin/ping6 if sudo is passwordless. The rogue gems spread by being added as dependencies to other gems. Remediation includes removing the dropped daemon from ~/.local/share/gcm/, erasing persistence mechanisms, and rotating credentials.

via The Hacker News|

#malware #persistence #rubygems

health2 months ago•3 min saved

GLP-1 Breaks Are Common, But Most Patients Return Within Two Years

A study presented at ENDO 2026 shows that many GLP-1 medications are paused and then resumed, with more than half who discontinue restarting within two years and 41.5% doing so within the first year. Discontinuation is linked to GI side effects and insurance/cost barriers, though newer medications and having an endocrinologist initiate treatment are associated with better persistence. The findings highlight the importance of staying on GLP-1 therapy for ongoing weight loss, blood sugar control, and protection against heart and kidney risks, while also underscoring the need for support to overcome barriers that lead to stopping treatment.

via NDTV|

#diabetes #glp-1 #health

technology2 months ago•2 min saved

Hackers Hide in Linux Login Gateways, Persisting for a Decade

A China-linked group known as Velvet Ant spent nearly a decade quietly compromising the Linux login stack (PAM and OpenSSH), replacing trusted login binaries with backdoors that harvest credentials and commands and, in some cases, accept secret passwords. They first breached internet-facing systems to reach an isolated network, then lurked inside the login process itself, making containment difficult. The operation adds to the group's history of targeting infrastructure such as F5 BIG-IP appliances and Cisco NX-OS devices (CVE-2024-20399). The recommended defense is integrity-based: monitor and compare PAM/OpenSSH binaries and key files against known-good copies, test replacements in a lab, and perform careful cleanup before resets. Patching alone won’t suffice when the login layer itself is compromised.

via The Hacker News|

#backdoor #cybersecurity #linux

security4 months ago•4 min saved

Firestarter Backdoor Survives Cisco Patch Cycles on Firepower Gear

U.S. CISA and U.K. NCSC warn that Firestarter malware persists on Cisco Firepower/ASA/FTD devices after patches, maintaining persistence by hooking into the LINA process and re‑launching after reboots or firmware updates; attackers used Line Viper to gain initial access before deploying Firestarter. Cisco provides mitigations and recommends reimaging, with cold restart as a last resort (risking disk damage); CISA has released YARA rules to aid detection.

via BleepingComputer|

#cisa #cisco #firestarter

technology4 months ago•4 min saved

FIRESTARTER Backdoor Persists on Federal Cisco Devices After Patch Rollouts

U.S. CISA/NCSC warn that a federal Cisco Firepower ASA device was compromised in Sept 2025 by FIRESTARTER, a backdoor that survives firmware updates by hooking the LINA core and is used alongside the LINE VIPER post-exploitation toolkit to sustain remote access; the intrusion leveraged patched CVE-2025-20333 (authenticated remote code execution) and CVE-2025-20362 (unauthenticated access), and can endure normal reboots, requiring a full device reimage to fully remove. Cisco also recommends a cold restart (power cycle) to clear the implant and cautions that all configuration elements should be treated as untrusted until reimaging. Attribution hints at prior ArcaneDoor activity with possible China nexus, though origins remain uncertain.

via The Hacker News|

#cisco #firepower #firestarter

technology6 months ago•3 min saved

PromptSpy Uses Gemini AI to Permanently Bind Itself to Android’s Recent Apps

Researchers identify PromptSpy as the first Android malware to leverage Google’s Gemini AI to analyze on-screen UI and issue step-by-step instructions that pin the app to the recent apps list, making it hard to uninstall. The malware can capture lockscreen data, take screenshots, and record video, and uses a built-in VNC module and accessibility services to enable remote access and ongoing data collection, including PINs and screen content, via a hard-coded C2. It is distributed via mgardownload.com masquerading as JPMorgan Chase (MorganArg), appears aimed at Argentina, and is not on Google Play; Chinese-language strings hint at its development context.

via The Hacker News|

#ai #android #cybersecurity

technology6 months ago•5 min saved

PromptSpy: Android malware harnesses AI at runtime to harden persistence

Researchers from ESET describe PromptSpy, the first Android malware to run a generative AI model (Google Gemini) at runtime to adapt its persistence across devices. The malware uses Gemini to receive JSON instructions via screen data (UI elements, coordinates) and perform actions to pin itself in the Android Recent Apps list, executing via Accessibility Service. It also includes a VNC module for remote control, enabling data exfiltration, screen recording, and real-time surveillance such as intercepting PINs, recording unlock gestures, and capturing screenshots. It even overlays invisible UI elements to hinder uninstallation. It’s unclear whether PromptSpy is a proof-of-concept or in the wild, but distribution appears limited and tied to a domain used for initial drops. The case highlights how AI can enable dynamic, real-time modification of malware behavior.

via BleepingComputer|

#android #cybersecurity #generative-ai

security6 months ago•15 min saved

PromptSpy uses GenAI to persist on Android via AI-guided UI manipulation

ESET researchers uncovered PromptSpy, the first known Android malware to use generative AI (Google Gemini) to drive UI-level actions for persistence. By feeding Gemini an XML snapshot of the current screen, the AI returns step-by-step tap instructions to keep the app in the recent apps list, while a built-in VNC module provides remote access. The malware also exploits Accessibility Services, overlays to hinder uninstallation, and can capture lockscreen data and screen video. Distribution appears tied to Argentina via a banking/phishing site; no Google Play presence. This example shows how AI can make Android threats more adaptive and harder to defeat.

via WeLiveSecurity|

#android-malware #generative-ai #persistence

science11 months ago•5 min saved

Caffeine Boosts Persistence Under Pressure

A study found that caffeine, especially under stress, can increase task persistence in humans, with effects varying based on dose and context, suggesting caffeine promotes active coping behaviors.

via PsyPost|

#behavioral-study #caffeine #human-psychology

neuroscience1 year ago•6 min saved

Decoding the Brain's Decision to Persist or Quit

Research from the University of Pennsylvania reveals how different regions of the prefrontal cortex influence decisions to persist or quit in uncertain situations. Damage to the ventromedial prefrontal cortex reduces persistence, while other areas affect learning from feedback. These findings have implications for understanding conditions like anxiety and addiction, where reward processing is altered. The study highlights the brain's complex calculations in evaluating rewards and persistence, with future research focusing on neurotransmitter roles in these processes.

via Neuroscience News|

#brain #decision-making #neuroscience

astronomy2 years ago•6 min saved

"Decades-long Quest: The Journey to Witness a 1,400-Mile Eclipse"

After 52 years of failed attempts to witness a total eclipse, a determined individual plans a 1,400-mile journey along the path of totality, from Arkansas to New Brunswick, in hopes of finally experiencing clear skies for the event. Despite past disappointments and unfavorable weather forecasts, the traveler remains optimistic and flexible, ready to drive long distances and make last-minute adjustments to maximize the chances of a successful viewing.

via CNN|

#astronomy #eclipse #persistence

human-interest2 years ago•2 min saved

"Guinness Reverses Decision, Awards French Man World Record for Matchstick Eiffel Tower"

Richard Plaud, who spent eight years building a 23-foot model of the Eiffel Tower with 700,000 matchsticks, was initially told by Guinness World Records that his attempt didn't qualify due to the type of matchsticks used. However, after reviewing the case, Guinness reversed its decision, acknowledging Plaud's achievement as the tallest matchstick sculpture. Plaud expressed relief and described the emotional rollercoaster he experienced during the ordeal, emphasizing that he never lost hope in achieving his childhood dream of holding a world record.

via NBC News|

#eiffel-tower #guinness-world-records #human-interest

human-interest2 years ago•2 min saved

"Guinness World Records Reverses Decision, Crowns Man's 23ft Matchstick Eiffel Tower Tallest in the World"

French man spends eight years building a 23ft Eiffel Tower replica with over 700,000 matchsticks, only to have his Guinness World Record entry rejected due to a technicality that the matchsticks used were not commercially available. Despite his disappointment, social media users praised his work, and Guinness World Records has acknowledged that they might have been too strict in their review process and will review the rules for similar records.

via LADbible|

#disappointment #eiffel-tower #guinness-world-records

astrology2 years ago•3 min saved

"Scorpio Horoscope: February 2024 Predictions and Reflections"

Scorpio's daily horoscope for February 5, 2024 predicts a day promoting persistence and assertiveness, with opportunities to turn dreams into tangible achievements in all aspects of life. In love, it's a perfect day to connect with a partner or set new standards if single. Career-wise, seizing challenging tasks and maintaining tenacity could lead to recognition or promotion, while financially, it's a good time to analyze decisions and invest in learning new skills. Health and wellness should be prioritized, and overall, Scorpios are encouraged to utilize their innate traits of determination, resilience, and strength to secure wins in all realms of life.

via Hindustan Times|

#astrology #horoscope #persistence

horoscope2 years ago•0 min saved

"Aquarius Horoscope: Embracing Uniqueness and Change in 2024"

Aquarius, it's a matter of time before things sort themselves out, so be patient and persistent. Hold the vibration of what you're attracting in your heart and surrender your ego, especially in romantic matters, as this will lead to finding an amicable solution.

via VOGUE India|

#aquarius #horoscope #patience