Article Details
One question is enough: Hackers can easily crack your laptop
Published on August 18, 2025
One question is enough: Hackers can easily crack your laptop
Solid data leak at Telekom: Over 324 million data records opened openly online
Solid data leak at Telekom: Over 324 million data records opened openly online
Danger for Spotify users: A click, and your account is threatened
Danger for Spotify users: A click, and your account is threatened
ID data of 70,000 vacationers on the net: there is a risk of identity theft
ID data of 70,000 vacationers on the net: there is a risk of identity theft
Supposed message from the BZST: If you react wrongly, you can lose a lot of money
Supposed message from the BZST: If you react wrongly, you can lose a lot of money
Urgent security warning: Hacker offers 15.8 million PayPal access on the net
Urgent security warning: Hacker offers 15.8 million PayPal access on the net
Customers of 2 banks as the goal: Consumer advice center warns of attempts to fraud
Customers of 2 banks as the goal: Consumer advice center warns of attempts to fraud
A "hello" already puts you in danger: particularly perfidious phone fraud in circulation
A "hello" already puts you in danger: particularly perfidious phone fraud in circulation
Call fraud and more dangerous: With these numbers you must not go to the phone
Call fraud and more dangerous: With these numbers you must not go to the phone
Lenovo is working on security measures after weaknesses have been discovered in the AI chat bot Lena.
The Ai Chatbot Lena from Lenovo has critical security gaps.As a result, attackers could carry out unauthorized code and steal session data.
The links marked with a symbol are affiliate links.If you are purchased, we will receive a commission for you at no additional cost.The editorial selection and evaluation of the products remains unaffected.Your click helps to finance our free offer.
Lenovo is under pressure due to a serious vulnerability in his AI chatbot Lena.The chat bot can be used by attackers to carry out unauthorized code and steal session cookies, as "Cybernews" reports.
This weak point could lead to a serious security problem for the company.The problem illustrates the risks when implementing AI systems without sufficient security controls.
Targeted questions in Chatbot Lena allow code version and session theft The weak points enable attackers to carry out unauthorized code on company servers through targeted entries and to gain access to session cookies through XSS attacks.
ADVERTISEMENT
The attack is done by specific inputs that make the chat bot generate uncertain HTML editions.
This gives an attacker of potential access to Lenovo's customer support platform and the possibility to take over support agent sessions.This could have serious consequences, including access to customer data and internal systems.
Hackers recently also reached PayPal access.15.8 million registration data was offered on the net.
Lenovo's Ki-Chatbot Lena has a critical security gap that can enable attackers access to customer data.CHIP
Lenovo reacts to security gaps and strengthens protective measures for AI systems The company must now implement security measures for AI systems.The main problems lie in the lack of input and output validation of the chatbot systems.A "Never Trust, Always Verify" strategy should be followed to minimize potential risks.
ADVERTISEMENT
Lenovo is aware of the problem and has taken measures to improve the safety of its systems.Nevertheless, the incident illustrates how important continuous security checks are in order to secure quickly developing technologies.