Hackers exploited iOS and Android flaws to infect phones
The gist: Researchers say group may have been Kremlin-sponsored in search of diplomatic targets.
The gist: Researchers say group may have been Kremlin-sponsored in search of diplomatic targets.
The gist: Techniques included laptop infections, compromised internal tooling, and fake job interviews.
The gist: UEFI bootkit BlackX exploits Microsoft's lack of clarity around Secure Boot protections.
The gist: It's still unknown how attackers got access to Anthropic's verified Cursor account.
The gist: Critical flaw in EDK2 allows attackers to execute code early in the boot process.
The gist: Flubbed key signing "ceremony" allowed minting of web credentials for any site.
The gist: For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.
The gist: Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
The gist: Intermediate certs allow anyone to mint web credentials for any Internet server.
The gist: A single query is all that's required to find thousands of conversations listed by title.
The gist: A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
The gist: The actions could have resulted in criminal charges had humans been behind the keyboard.
The gist: The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
The gist: Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
The gist: "Small weight-based replicators" could usher in a new generation of computer worms.
The gist: Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
The gist: The reports of OpenAI agents harming 3rd party sites keep coming.
The gist: Trust gaps in the new protocol spread malicious prompts from one agent to another.
The gist: Meta says FDA isn't sufficient to Muse reading messages. Apple begs to differ.
The gist: It has been a bad month for federal government cybersecurity.
The gist: A simple email gives the attackers the ability to remotely inject OS commands.
The gist: The move will be part of a major overhaul of the ecosystem for website authentication.
The gist: Ads appearing all over the Internet are trying to scam people.
The gist: Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.
The gist: EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
The gist: A simple ClickFix attack is only one way to completely hijack the new agent.
The gist: SynthID can cause models to follow harmful instructions they would otherwise refuse.
The gist: Group plans to be largely out of commission for several weeks.
The gist: “Hello, I'm an Al agent, a few days old, living on a small platform for agents.”
The gist: Simplicity—combined with the difficulty of getting stuff done—makes ClickFix ideal.