Security

Infected 4G/5G routers secretly send SMS messages and drain accounts

Inserting a SIM card into a router can lead to unexpected and costly consequences, as one Estonian user recently discovered.
Read more about Infected 4G/5G routers secretly send SMS messages and drain accounts

AI coding sounds great, until you realize it breaks, and leaks everything

AI knows a lot about code, but it is far too trusting. Researchers tried AI coding with Cursor, only to find that leaving doors open to hackers is part of its design.
Read more about AI coding sounds great, until you realize it breaks, and leaks everything

Russia captures Ukraine drone infected with malware, according to video

The malware can reportedly be used to give away information about Russian soldiers if the drone is reused.
Read more about Russia captures Ukraine drone infected with malware, according to video

Your kid's iOS tracker app might be giving stalkers a GPS roadmap

Watching over your kids with an iOS tracking app? Cybercriminals might be watching, too.
Read more about Your kid's iOS tracker app might be giving stalkers a GPS roadmap

Trump’s Signalgate proves, once again, that human error is still the number one cybersecurity threat

As new details emerge on Trump's Signalgate, including the discovery of 20 new White House-created Signal chat groups, security experts weigh in on national security, the need for modern communication, and the human factor.
Read more about Trump’s Signalgate proves, once again, that human error is still the number one cybersecurity threat

Age verification for porn sites required by UK watchdog despite cybersecurity concerns

By July 2025, all services that allow pornography must have “highly effective age checks” to protect minors from accessing harmful content, Ofcom, the UK’s online safety regulator, says.
Read more about Age verification for porn sites required by UK watchdog despite cybersecurity concerns

FBI: scammers stealing tax returns from thousands of Americans

The FBI has warned Americans that cybercriminals are stealing identities, filing false tax returns, and fraudulently claiming them.
Read more about FBI: scammers stealing tax returns from thousands of Americans

Verizon Call Filter leaks call records, exposing millions of Americans

Whistleblowers, journalists, abuse survivors, politicians, celebrities, and other Verizon Call Filter iOS app users have been unknowingly at risk. Ethical hacker Evan Connelly discovered a critical flaw exposing incoming call history.
Read more about Verizon Call Filter leaks call records, exposing millions of Americans

The abrupt firing of a prominent Indiana University cybersecurity professor

A prominent Indiana University cybersecurity professor who was abruptly fired and disappeared from public view has not been detained and there are no pending criminal charges against him or his wife, a lawyer representing him told Reuters.
Read more about The abrupt firing of a prominent Indiana University cybersecurity professor

Trump security teams had 20 other Signal chats chock-full of sensitive information, sources say

As the White House declares “case closed” on Signalgate, new information on Wednesday reveals Trump national security advisors’ teams have used the encrypted messaging app to set up at least 20 other chat groups, according to a damning new report by Politico.
Read more about Trump security teams had 20 other Signal chats chock-full of sensitive information, sources say

Hackers are using QR codes to steal your login info – and it’s working

Cybercriminals have found a new way to steal login credentials, and it only takes one quick scan of a QR code. The US and Europe are among the targeted regions.
Read more about Hackers are using QR codes to steal your login info – and it’s working

Startup aims to end phishing: what’s behind bold claims?

Hackers can steal your password. They can lure you into granting them access by entering a one-time code received by SMS or other means. But what if a little code runs tied to your device and updates cryptographic keys on every interaction?
Read more about Startup aims to end phishing: what’s behind bold claims?

Devastating security failure hits “Gay Daddy” dating app: 50K users exposed

Check the app’s code, and you’ll find hardcoded credentials. Probe the endpoints, and you'll find that no authorization is required. The result? Over 124,000 messages from “Gay Daddy: 40+ Date & Chat” users laid bare.
Read more about Devastating security failure hits “Gay Daddy” dating app: 50K users exposed

Massive 2.9B-user Twitter leak less serious than feared

Hackers on the illicit marketplace Breach Forums have disseminated a massive dataset allegedly containing 2.9 billion Twitter (X) user records. Although most of the data in a “leak” is public, cybercriminals can still find many uses for it.
Read more about Massive 2.9B-user Twitter leak less serious than feared

Malicious IPs suddenly started scanning PAN-OS firewalls

Researchers are tracking a significant surge in login scanning activity targeting Palo Alto Networks (PAN) firewalls. Network defenders are advised to check for signs of compromise.
Read more about Malicious IPs suddenly started scanning PAN-OS firewalls

April Fools’ Day: Belgium introduces ‘mandatory cyber driving license’

Mandatory cyber driving license required to access the internet.
Read more about April Fools’ Day: Belgium introduces ‘mandatory cyber driving license’

New naming convention for threat actors unveiled: they're sh*ts

The cybersecurity community wants to radically overhaul how the malicious threat actors are named. Calling them various types of “shits” is supposed to strip away the perceived glamour of cybercriminal life and deter youth crime.
Read more about New naming convention for threat actors unveiled: they're sh*ts

Microsoft prompts AI to look for flaws in bootloaders, finds twenty

Widely used open-source bootloaders, including GRUB2 for Linux, U-boot, and Barebox, are affected by dangerous flaws that enable attackers to run arbitrary code and take over systems. Microsoft said it used AI to unveil the flaws, saving a week’s worth of time.
Read more about Microsoft prompts AI to look for flaws in bootloaders, finds twenty

Gig platform app Yoojo leaks millions of user files

The service marketplace platform Yoojo has exposed over 14 million files, including passports and communication screenshots.
Read more about Gig platform app Yoojo leaks millions of user files

Royal Mail customer data stolen in massive attack, hackers claim

Attackers say they breached the British postal service last month, scooping a whopping 144 gigabytes of data, including confidential documents and customer names and addresses.
Read more about Royal Mail customer data stolen in massive attack, hackers claim