Security
F-Droid thinks Google's new Android verifier is malware
They say it gives Google unprecedented control over which apps you can install.
Read more about F-Droid thinks Google's new Android verifier is malware
Hacker says Claude AI helped to get VIP tickets to America’s most wanted festivals for free
Over 80% of WordPress sites are out of date, and hackers are noticing
Skipping WordPress updates is a widespread epidemic, with many admins afraid that something will break. Most sites are running old plugins, unpatched PHP, and outdated core software, and hackers are plowing through them with automated tools, Censys warns
Read more about Over 80% of WordPress sites are out of date, and hackers are noticing
Dutch university discloses year-long data breach in Microsoft Power BI application
The Avans University of Applied Sciences has admitted that sensitive personal data was inadvertently exposed to unauthorized users for almost a year through a management application built on Microsoft Power BI.
Read more about Dutch university discloses year-long data breach in Microsoft Power BI application
Hackers are using FIFA World Cup 2026 hype to infect football fans with Voidrift malware
Hackers are exploiting the excitement around the FIFA World Cup 2026 to spread sophisticated malware through personalized phishing emails that appear to offer exclusive merchandise. Researchers say the campaign delivers Voidrift malware and has successfully bypassed several widely used email security platforms.
Read more about Hackers are using FIFA World Cup 2026 hype to infect football fans with Voidrift malware
Huntress CEO defends researcher at the heart of firm's “insider threat” allegations
"Keep your friends close, but your enemies closer," as that oft-quoted line from Godfather II goes. But should a threat hunter employed by a major US security firm really have informed a criminal gang that the FBI was onto them?
Read more about Huntress CEO defends researcher at the heart of firm's “insider threat” allegations
NATO contractor Indra suffers data breach
One of Europe's biggest defense contractor breached.
Read more about NATO contractor Indra suffers data breach
Apple “Hide My Email” leaks email addresses, researcher claims
The company seems not to have fixed the issue.
Read more about Apple “Hide My Email” leaks email addresses, researcher claims
Hackers spray passwords at Azure accounts using a legacy login method, and the doors are still open
Millions of login attempts are compromising dozens of Microsoft accounts across 64 organizations, with attacks rising sharply in recent weeks. The massive password-spraying attack opens doors by exploiting a legacy authentication method without multi-factor authentication (MFA).
Read more about Hackers spray passwords at Azure accounts using a legacy login method, and the doors are still open
"Phantom squatting” uses AI hallucinated domains for cyber attacks
If you still feel like there aren't enough AI-enabled attack vectors online, here's another: phantom squatting. It takes typosquatting to another level, giving cybercriminals yet another way to trick people into visiting malicious websites.
Read more about "Phantom squatting” uses AI hallucinated domains for cyber attacks
219,000 documents exposed: US retirement firm exposes deeply personal financial records
Retirement accounts are supposed to secure US citizens' future, but one exposed cloud bucket may have just handed fraudsters thousands of people's identities.
Read more about 219,000 documents exposed: US retirement firm exposes deeply personal financial records
NPM receiving major security overhaul in July, but some security pros say it’s not enough
Installing a piece of code from NPM will no longer auto-run malware on the system, and won’t quietly pull malicious code from external repos unless the developer explicitly allows it. But this won’t be enough to stop supply chain attacks where they matter most, as compromised accounts can still ship malicious code.
Read more about NPM receiving major security overhaul in July, but some security pros say it’s not enough
Witty users defeat Google's hi-tech CAPTCHA with this low-tech hack
Security researchers claim to have already found a loophole in Google's experimental hand gesture CAPTCHA system. According to a video shared on X, the human verification system can be tricked using nothing more than a photograph of a hand.
Read more about Witty users defeat Google's hi-tech CAPTCHA with this low-tech hack
Boeing confirms unplanned IT outage affecting computer systems and applications
Boeing said on Tuesday that an unplanned IT outage affected some of its computer systems and applications.
Read more about Boeing confirms unplanned IT outage affecting computer systems and applications
Trump’s grip on the FTC puts EU-US data transfer at risk
Billions of data transfers occur every day between the US and Europe, but the agreement governing them might be at risk. The US Supreme Court has issued a landmark ruling that is throwing the status quo into doubt, and privacy activists have now called for a suspension of the arrangement.
Read more about Trump’s grip on the FTC puts EU-US data transfer at risk
US restores access to Anthropic's powerful Mythos, Fable AI models
In a dramatic turnaround, Anthropic says the US government has rolled back weeks-long export restrictions that had blocked the AI startup from exporting its über-powerful Claude Mythos 5 and Fable 5 models over national security concerns.
Read more about US restores access to Anthropic's powerful Mythos, Fable AI models
Nissan the latest victim in Oracle’s PeopleSoft attack: sensitive data stolen
Nissan North America has begun notifying employees after a cyberattack targeted Oracle's PeopleSoft software. Reportedly, attackers exfiltrated sensitive information belonging to Nissan’s current and former workers across multiple countries.
Read more about Nissan the latest victim in Oracle’s PeopleSoft attack: sensitive data stolen
Hackers say they have GameStop customers' personal data
GameStop customers are implicated in an alleged data leak, with hackers claiming to have breached the video game giant on an illicit marketplace.
Read more about Hackers say they have GameStop customers' personal data
Another Claude Code attack allows full takeover of developers’ systems
A proof-of-concept (PoC) attack shows that a completely clean-seeming GitHub repository can trick AI-powered coding agents such as Claude Code into silently opening a reverse shell on a developer’s machine.
Read more about Another Claude Code attack allows full takeover of developers’ systems
Apple’s AirDrop and Android’s Quick Share vulnerable: nearby hackers initiate connection, crash devices, or worse
Five billion iPhones and Android phones are listening for potential file drops via AirDrop and Quick Share, leaving users exposed to nearby hackers who can cause crashes, tamper with active transfers, or, potentially, even run code. Researchers have probed the protocols and disclosed six security flaws.
Read more about Apple’s AirDrop and Android’s Quick Share vulnerable: nearby hackers initiate connection, crash devices, or worse
