Security

23M Brits can now skip passwords for GOV.UK services

Passkeys may be easier for users, but they’re not a silver bullet.
Read more about 23M Brits can now skip passwords for GOV.UK services

Scammers milking Google Play’s Early Access: no reviews, no ratings, no way to spot the deception

Many deceptive apps don’t steal money outright, but simply try to maximize ad impressions while the user believes they’re earning a reward.
Read more about Scammers milking Google Play’s Early Access: no reviews, no ratings, no way to spot the deception

Vengeful Windows exploit researcher reveals his true identity

It all started when a researcher, known as Nightmare Eclipse, was fired by Microsoft.
Read more about Vengeful Windows exploit researcher reveals his true identity

Android security nightmare: unprivileged app take over flagship phones

Samsung Galaxy S26 Ultra, Xiaomi 17, Oppo Find X9 Ultra, and OnePlus Ace 6 Ultra are among the smartphones vulnerable to the exploit.
Read more about Android security nightmare: unprivileged app take over flagship phones

Elon Musk’s ‘VoteSafe’ site is harvesting and selling voter data

Check before registering. They want your data, not the vote.
Read more about Elon Musk’s ‘VoteSafe’ site is harvesting and selling voter data

Windows 11 update breaks audio and microphones on some PCs, Microsoft confirms


Open a website, and your Mac crashes instantly: researcher reveals “Deathray” exploit


New iPhone app warns when Meta smart glasses are nearby

But there’s still no way to know if glasses are filming.
Read more about New iPhone app warns when Meta smart glasses are nearby

Hundreds of AI-powered attacks exploit PaperCut flaws

Threat actors are moving at greater speed and scale.
Read more about Hundreds of AI-powered attacks exploit PaperCut flaws

Nintendo Switch players urged to update now over QR code security flaw

Sharing screenshots and videos could expose users.
Read more about Nintendo Switch players urged to update now over QR code security flaw

There’s a hole in Android’s VPN tunnel: apps can leak real IP address

Two unpatched Android bugs allow apps to leak user IP.
Read more about There’s a hole in Android’s VPN tunnel: apps can leak real IP address

Snickers AI candy bar becomes “first mass-market prompt injection campaign”

A digital Snickers ad campaign shows how easily prompt injection can manipulate AI behavior – and it could be just the beginning.
Read more about Snickers AI candy bar becomes “first mass-market prompt injection campaign”

Iran takes credit for AT&T outage

AT&T denies breach as thousands of Texans left offline.
Read more about Iran takes credit for AT&T outage

The token that could have broken the internet: major supply chain attack averted


Hack-for-hire firms face potential ban in the US

One company has been linked to cyberattacks against FIFA officials.
Read more about Hack-for-hire firms face potential ban in the US

Hacker claims database of 40,000 Twitch streamers is up for sale


Thousands of LiteLLM instances exposed: 1 in 10 uses default password

Exposed LiteLLM servers could let hackers drain AI budget, seize root access, and steal cloud credentials.
Read more about Thousands of LiteLLM instances exposed: 1 in 10 uses default password

Ongoing exploitation of Cisco vulnerabilities: hackers drop web shells

CISA has issued an urgent warning to apply patches.
Read more about Ongoing exploitation of Cisco vulnerabilities: hackers drop web shells

Chrome getting major releases every 2 weeks as Google races to outpace attackers


Anthropic discloses fourth AI hacking incident missed in earlier review

The previous incidents were labeled as an "operational failure".
Read more about Anthropic discloses fourth AI hacking incident missed in earlier review