Evil Vizier: Vulnerabilities of LLM-Integrated XR Systems

Extended reality XR applications increasingly integrate Large Language Models LLMs to enhance user experience, scene understanding, and even generate executable XR content, and are often called "AI glasses". Despite these potential benefits, the integrated XR-LLM pipeline makes XR applications...

Towards Trustworthy AI: Secure Deepfake Detection Using CNNs and Zero-Knowledge Proofs

In the era of synthetic media, deepfake manipulations pose a significant threat to information integrity. To address this challenge, we propose TrustDefender, a two-stage framework comprising i a lightweight convolutional neural network CNN that detects deepfake imagery in real-time extended...

The vulnerability of the WebXR WebRTC component in Google Chrome, related to the use of memory after its release, allows a hacker to execute arbitrary code.

The vulnerability of the WebXR component in Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Malicious code in com.unity.modules.xr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da0715f4c443de1ace746c5feac7e8b6ecef5ca8bcf72e7551e2ac3da0ab9a4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...