Security

New Apple A19 chips introduce spyware-defeating memory safety feature

Mercenary spyware and other memory corruption attacks against iPhone 17 devices will be “immensely more expensive and difficult” due to the new safety defence Apple has introduced with the A19 chip lineup.
Read more about New Apple A19 chips introduce spyware-defeating memory safety feature

Farmer Bros. reveals data breach victim count

The Texas-headquartered coffee and food service company, Farmer Bros., has revealed that a recent cyberattack exposed the data of thousands of people.
Read more about Farmer Bros. reveals data breach victim count

US fears hidden radios in solar-powered highway infrastructure

US officials say solar-powered highway infrastructure including chargers, roadside weather stations, and traffic cameras should be scanned for the presence of rogue devices – such as hidden radios – secreted inside batteries and inverters.
Read more about US fears hidden radios in solar-powered highway infrastructure

Popular AI chatbots leaking data: millions of users could be affected

A server belonging to one of the big names in generative AI just spilled sensitive user data, including private prompts and authentication tokens, potentially exposing millions of people.
Read more about Popular AI chatbots leaking data: millions of users could be affected

Global talent management behemoth Allegis Group claimed by hacker gang

The attackers claim to have accessed client lists and other, so far undisclosed, company documents.
Read more about Global talent management behemoth Allegis Group claimed by hacker gang

Plex asks users to reset their passwords after data breach

Media streaming platform Plex has notified users of a recent “security incident” in which personal information was stolen. As a precaution, the company recommends that users reset their passwords.
Read more about Plex asks users to reset their passwords after data breach

LookCam internet cameras expose your home to strangers, security researcher warns

An internet-connected camera managed via the LookCam or other apps of the same developer is riddled with multiple security flaws, warns Wladimir Palant, a security researcher and maker of the AdBlock Plus content filtering and ad blocking extension. The camera is used by millions, and the flaws grant complete access to outsiders.
Read more about LookCam internet cameras expose your home to strangers, security researcher warns

Virgin Money, BT, TD Bank Air Canada provider caught in Salesforce breach

Software intelligence giant Dynatrace has admitted that customer data was swept up in one of the year’s biggest supply-chain hacks.
Read more about Virgin Money, BT, TD Bank Air Canada provider caught in Salesforce breach

How I built my own VPN (and what I learned)

Digital privacy scandals seem to break almost weekly, and with each news alert, my frustration grows. I hate the idea...
Read more about How I built my own VPN (and what I learned)

Hackers claim Germany’s second-largest bank subsidiary - the company denies

A ransomware gang has claimed it breached a subsidiary of Germany's second-largest bank and is threatening to release stolen data, but the bank denies any attack took place.
Read more about Hackers claim Germany’s second-largest bank subsidiary - the company denies

Signal introduces free chat backup feature and a subscription to backup media

Signal is rolling out secure backups as an opt-in feature that lets users save conversation archives “in a privacy-preserving form.” The free tier includes all chats and 45 days' worth of media history. However, Signal has also introduced a paid subscription plan for the first time.
Read more about Signal introduces free chat backup feature and a subscription to backup media

Massive supply chain attack hits NPM as hackers target 18 packages downloaded 2B times weekly

What has been dubbed the largest supply chain attack in history has hit NPM, one of the most prolific JavaScript package managers.
Read more about Massive supply chain attack hits NPM as hackers target 18 packages downloaded 2B times weekly

Wealthsimple hackers gained access to customer account numbers, government IDs, and more

Online investment management firm Wealthsimple admits that customer data, including financial account numbers and government IDs, has been accessed by cybercriminals during a recent third-party breach.
Read more about Wealthsimple hackers gained access to customer account numbers, government IDs, and more

China is blurring the lines between civilian AI and military power

China is turning everyday AI like voice apps, drones, and satellites into military tools, blurring the line between civilian tech and the People Liberation Army (PLA).
Read more about China is blurring the lines between civilian AI and military power

America’s second largest egg producer breached, claim hackers

Rose Acre Farms, a top US egg producer, has been claimed by a prominent cybercrime cartel, with the attackers saying that they’ve encrypted the company’s data. Past attacks on major agricultural producers led to shortages and price hikes.
Read more about America’s second largest egg producer breached, claim hackers

China aims for domination in another key semiconductor material: undercutting the silicon supply chain

China, already a dominant player in rare earth mineral supply chains, has been heavily backing its domestic polysilicon industry, a critical material for semiconductor manufacturing. It is flooding the market with the substrate at below-fair prices, pushing companies out of business and positioning Chinese firms to dominate the global market, analysts warn.
Read more about China aims for domination in another key semiconductor material: undercutting the silicon supply chain

Expedia’s chatbot instructs on how to make a Molotov cocktail

Travel agency Expedia has launched a ChatGPT-based AI travel planner that does far more than its initial purpose. For example, it instructs users on how to make a Molotov cocktail.
Read more about Expedia’s chatbot instructs on how to make a Molotov cocktail

How the Salesforce breaches unfolded: root causes identified

New details have emerged regarding the massive Salesforce compromise campaign, which impacted hundreds of companies, including major tech and cybersecurity firms.
Read more about How the Salesforce breaches unfolded: root causes identified

The dumbest employee tech hacks that nearly broke companies

From medical data being shared on Dropbox to an industrial control system connected to a food truck’s hotspot, what are the dumbest employee IT decisions?
Read more about The dumbest employee tech hacks that nearly broke companies

Data breach at American credit union exposes financial data

Not only did hackers penetrate Carter Credit Union’s network, but they also got their hands on virtually every possible data point the financial institution had on its customers.
Read more about Data breach at American credit union exposes financial data