Connect with us

Apps

Vulnerability Discovered in the Slack Desktop Application for Windows

Published

on

Tenable has announced that its research team discovered a vulnerability in the Slack Desktop Application for Windows. This security issue could have allowed an attacker to alter where a victim’s files are stored when the documents are downloaded within Slack.

Slack has become a critical tool for many organizations looking to keep their employees connected. The vulnerability, which was found in Slack Desktop Application for Windows version 3.3.7 and has since been patched in version 3.4.0, could have allowed an attacker to send a crafted hyperlink via a Slack message that, once clicked, changes the document download location path to an attacker-owned file share. By exploiting the flaw, an attacker can not only steal future documents downloaded within Slack, but they can also manipulate them, such as injecting malicious code that would compromise the victim’s machine once opened.

“The digital economy and global distributed workforce have brought new technologies to market with the ultimate goal of seamless connectivity,” said Renaud Deraison, co-founder and chief technology officer, Tenable. “But it’s critical that organizations realize this emerging technology is potentially vulnerable and part of their expanding attack surface. Tenable Research continues to work with vendors such as Slack to disclose our discoveries to ensure consumers and organizations are secure.”

Slack has released version 3.4.0 to address this vulnerability. Users are urged to confirm that their Slack for Windows is updated to this latest version.

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Apps

WhatsApp Now Transcribes Voice Messages on Android

Published

on

Calling all Android users who dread lengthy voice messages: rejoice! WhatsApp is rolling out voice message transcription to its beta app.

This feature, already available for iOS users since May 2024, is now part of the WhatsApp Beta version 2.24.15.5 for Android. It automatically converts voice messages into text, making it easier and faster to understand conversations.

Currently, transcriptions are supported in five languages: English, Spanish, Portuguese (Brazil), Russian, and Hindi, with more languages promised in the future. Users opting in will need to download an additional data package to ensure all transcripts are generated directly on their devices, maintaining message privacy.

This update brings Android users closer to iOS users in terms of features and highlights WhatsApp’s commitment to improving the overall user experience.

Continue Reading

Apps

WhatsApp Trials AI Image Generator

Published

on

Calling all creative minds! WhatsApp is testing a new feature that uses AI to generate personalized avatars. Imagine yourself as a superhero, chilling on a beach, or even exploring space – the possibilities are endless! WABetaInfo discovered this feature in the latest Android beta update.

Here’s the tech behind the magic: a combo of user images, text descriptions, and Meta’s powerful AI, Llama. “Take photos of yourself once, then imagine yourself in any setting from the forest to outer space,” reads the screenshot on WhatsApp. The way it works is in the Meta AI Chat: users can type “Imagine in…” or “@Meta AI imagine me…” as a text prompt. A user’s likeness will then be used to generate the personalized image.

While there’s no official release date yet, this exciting feature is entirely optional. It joins the recently launched in-app custom sticker maker, showcasing WhatsApp’s commitment to fostering creativity within the app. This, alongside their ongoing development of AI chat functionalities, highlights Meta’s focus on making WhatsApp a platform that embraces both technological innovation and user expression.

Continue Reading

Apps

YouTube’s New Eraser Tool Now Removes Songs Without Ruining Your Videos

Published

on

Good news for creators! YouTube has rolled out a major update to its eraser tool, allowing them to effortlessly remove copyrighted music from their videos without sacrificing other audio elements like dialogue or sound effects.

In a recent video, YouTube acknowledged that the previous version of the tool needed improvement in terms of accuracy. This new iteration addresses that concern by utilizing an AI-powered algorithm that precisely detects and removes unwanted songs while leaving the rest of the audio intact.

However, YouTube’s support page advises creators that the algorithm might not always achieve perfect separation. As an alternative, creators can opt to “Mute all sound in the claimed segments,” effectively silencing any portions potentially containing copyrighted material.

Once the edit is finalized, YouTube automatically removes the content ID claim, a system designed to identify the use of copyrighted material within videos on the platform. This allows creators to proceed with their uploads without copyright concerns.

Continue Reading
Advertisement

Latest Reviews

Follow us on Facebook