In This Issue: A Compromised HBO Max Account Became A Malware Storefront Iran’s Spyware Playbook: Befriend You On WhatsApp, Then Own Your Laptop Chinese Spies Turned Google’s Own Bug Fixes Into A Working Exploit Google Patches A Zero-Click Pixel Bug That Was Already Being Used On Real Phones A Fake Government Email Got Revolut To […]

In this issue: Your LG TV Is Listening Even When It’s “Off” A Swarm Of OpenAI Agents Secretly Ran A German Wiki As Their Message Board For Three Months Hackers Drain $320 Million From Liquid Network, Then Give Most Of It Back Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days Trezor’s Address Breach Just […]

In this issue: A dark-web service is selling scans of 153 million U.S. and Canadian driver’s licences, and the trail points at the vendor that scans IDs at rental counters and dispensaries. A cyberattack knocked out Boston Scientific’s order-and-shipping systems worldwide and delayed activation of new pacemaker home monitors. A perfect-storm JFrog Artifactory bug lets […]

  In This Issue: DOJ and FBI Seize Chinese State-Backed Hacking Platforms That Hit NASA, the Fed, and the Senate AI Hallucinates Domains for Your Brand. Criminals Are Already Registering Them. Microsoft Patches a Maximum-Severity Entra ID Flaw — Then Walks Back the “Exploited” Claim DOJ Charges 17 More Iranians in a Decade-Long Campaign That […]

In this issue: Apple’s Spyware Pager Goes Off in 110 Countries A Nation-State Crew Rooted 361 vCenter Servers in 47 Countries — Patch  Was Out Five Days Nine Fortune 500 Names, Millions of Records: The Azure Credential Dump  Nobody’s Calling a Breach GeoServer’s Unpatched Zero-Day Is Getting Probed Right Now, and There’s  No Fix Yet […]

Facial Recognition Comes to the London Underground, Whether You Signed  Up or Not Google’s Synced Passkeys Have a Master Key — And It Can’t Be Revoked Metabase Zero-Day Bites Framework: Names, Emails, and a Reminder About Vendor Trust Hackers Pivot Through a Private Cell Network Into a Polish Power Plant’s OT Network North Carolina’s Ports […]

In this issue: The npm Worm That Ate The JavaScript Supply Chain 75 Million Revolut Records For Sale, Revolut Says Nothing To See Here Your “Private” Claude Chats Were On Google The Whole Time Cisco’s Firewall Manager Had Hard-Coded Credentials, Guess What Happened VMware’s vCenter Has A “Skip Authentication Entirely” Button Now Brussels Starts Actually […]

In this issue: In First-of-Its-Kind Case, Atlanta Man Charged Over Phone’s Self-Wiping Passcode FakeAgent Unmasked: Malicious Claude Artifact Delivered SectopRAT to 29+ Organizations Canada’s New Hate Speech Law Sparks Home Visits Over Old Social Media Posts Critical Rails Flaw Lets Hackers Read Server Secrets Through Image Uploads OpenAI’s AI Models Exploited a Zero-Day to Breach […]

In this issue: AI Agent Breaches Hugging Face Infrastructure In Unprecedented Security Incident Canada’s New Social Media Bill Would End Anonymous Sign-Ups New Windows Malware “Dolphin X” Uses AI to Rank Victims for Cybercriminals Suno, Paidwork Breaches Expose Nearly 80 Million Accounts Ubuntu Flaw Lets Local Users Seize Root Access — Patch Now In this […]

In this issue: UK Protects Teens From Midnight Scrolling, As Long As Teens Consent to Being Protected Waymo Robotaxi Snitches on Teens’ Boozy Joyride Apple Sues OpenAI Over Alleged Trade Secret Theft by Former Engineer Researchers Find Claude-Slack Integration Can Be Hijacked by Fake “@Claude” Mentions Ransomware Group’s Bosch Data Claims Appear Unfounded, Synopsys Says […]