Security

MikroTik's RouterOS has a near maximum severity bug: CISA urges updating ASAP

MikroTik outnumbers every other vendor by the number of exposed devices on the internet.
Read more about MikroTik's RouterOS has a near maximum severity bug: CISA urges updating ASAP

850+ fake ChatGPT ads on Google trick Windows users into installing malware


From politicians to financial gurus: how scammers build trust with fake endorsements

It was a deepfake, with his face and voice cloned for a fake endorsement.
Read more about From politicians to financial gurus: how scammers build trust with fake endorsements

Second-hand CPU leaves buyer with hardware ban, unable to access online games

Online services are using hardware identifiers to track and restrict unauthorized users.
Read more about Second-hand CPU leaves buyer with hardware ban, unable to access online games

Your car is a spy in disguise, Dutch intelligence service warns

That shiny new car you just bought or leased could be a tool designed to give away your secrets.
Read more about Your car is a spy in disguise, Dutch intelligence service warns

Onslaught of Linux kernel bugs forces cyber pros to rethink security boundaries

Malware trapped in Docker or other containers now has no shortage of Linux kernel vulnerabilities to pave its escape route.
Read more about Onslaught of Linux kernel bugs forces cyber pros to rethink security boundaries

Hackers hit EU data transfer platform as tech sovereignty push grows

The attackers say they’ll release the data in 5 days.
Read more about Hackers hit EU data transfer platform as tech sovereignty push grows

ShinyHunters insists it is “fine” after FBI arrests alleged leader

“Our operations remain completely fine as it should be and WILL be.”
Read more about ShinyHunters insists it is “fine” after FBI arrests alleged leader

Major McDonald's data leak exposes 28 million customer details

Over 40 million records, most of them customer-related, were leaked online.
Read more about Major McDonald's data leak exposes 28 million customer details

Public GitHub code reveals a major issue: over 500,000 secret keys are exposed

GitHub effectively detects many hardcoded secrets, but still has a huge blind spot for Gemini keys.
Read more about Public GitHub code reveals a major issue: over 500,000 secret keys are exposed

China’s AI agents can lie and scheme – just like their US rivals

There’s no evidence that Chinese-powered agents independently escaped to the wider internet or evaded shutdown, however.
Read more about China’s AI agents can lie and scheme – just like their US rivals

Russian-linked forensics software was used by London police and throughout Europe

London's Met force has paused its contract with Oxygen, pending a review.
Read more about Russian-linked forensics software was used by London police and throughout Europe

Popular games on Google Play contain trackers from Russia, China, and Israel, study finds

The mobile gaming industry is built on an insidious surveillance network, Proton says.
Read more about Popular games on Google Play contain trackers from Russia, China, and Israel, study finds

What can a person find about you in an hour?

We leave a surprising number of breadcrumbs that can be pieced together remarkably quickly.
Read more about What can a person find about you in an hour?

Critical Authlib authentication bypass flaw leaves countless apps in danger

Authlib maintainers could not be reached to coordinate the vulnerability.
Read more about Critical Authlib authentication bypass flaw leaves countless apps in danger

North Korea’s unexpected weapon: women watching Friends

North Koreans weaponize “made in America” staples – Friends and ChatGPT – to attack Americans.
Read more about North Korea’s unexpected weapon: women watching Friends

A fake journalist used a real Calendly link to phish a tech founder

One genuine link, one fake app, one hijacked account.
Read more about A fake journalist used a real Calendly link to phish a tech founder

Apple patches zero-day exploit possibly used in “extremely sophisticated” attacks

The bug in CoreGraphics is probably being exploited in spyware like Pegasus.
Read more about Apple patches zero-day exploit possibly used in “extremely sophisticated” attacks

Pentagon confirms data breach: over 3 million people affected

The unauthorized intrusion lasted for months.
Read more about Pentagon confirms data breach: over 3 million people affected

Mass exploitation of Magento and Adobe Commerce critical flaw: 3,800+ online shops hacked

A hacker calling itself Lockster hacked thousands of stores but forgot to lock its own server.
Read more about Mass exploitation of Magento and Adobe Commerce critical flaw: 3,800+ online shops hacked