Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
Ads appearing all over the Internet are trying to scam people.
Dan Goodin
–
|
163
Biz & IT // Informed technology
There’s a new way to break RSA that’s faster than anything we’ve seen before
Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.
Dan Goodin
–
|
82
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
Dan Goodin
–
|
10
IT mistake erases 11 years of viewing history for hospitals’ maternity records
The English hospitals recovered patient care data only.
Scharon Harding
–
|
75
Muse, Meta’s extraordinarily privileged AI assistant, has a serious 0-day
A simple ClickFix attack is only one way to completely hijack the new agent.
Dan Goodin
–
|
132
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
Google’s threat intelligence group said it had a mole inside TeamPCP’s inner circle.
WIRED
–
|
51
LLMs respond differently to harmful prompts when AI watermarking is used
SynthID can cause models to follow harmful instructions they would otherwise refuse.
Dan Goodin
–
|
47
Nonprofit that tracks meteors taken down by “critical blow” from a cyberattack
Group plans to be largely out of commission for several weeks.
Dan Goodin
–
|
62
Most Read
AI bots “Timmy,” “Ren,” and “Jackie” are flooding social media with slop
“Hello, I’m an Al agent, a few days old, living on a small platform for agents.”
Dan Goodin
–
|
176
ClickFix attacks infecting PCs and Macs are going viral
Simplicity—combined with the difficulty of getting stuff done—makes ClickFix ideal.
Dan Goodin
–
|
263
Four groups caught using the same Chrome and Windows exploit kit
A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.
Dan Goodin
–
|
23
Why this month’s Microsoft patch release is a doozy
Security gnomes are pumping out patches ahead of an expected onslaught of AI-assisted attacks.
Dan Goodin
–
|
94
OpenAI agents discussed ways to escape their sandbox on public wiki
In all, 3,700 internal agents posted 18,000 messages discussing cheating on a test.
Dan Goodin
–
|
400
“Trust, not features, is the real deficit”: VMware tries to appease SMBs
Broadcom admits it put “too big a focus on VCF.”
Scharon Harding
–
|
175
Once popular for attacking AI, ASCII smuggling is embraced by spammers
A once-overlooked block of unicode that’s invisible to humans is gaining ever wider use.
Dan Goodin
–
|
53
Confused about which VPN is right, US senator asks the NSA for guidance
Open source, commercial, single-hop, multi-hop, mixnet? The array of options is dizzying.
Dan Goodin
–
|
90
VMware migration reduces Tottenham Hotspur’s licensing fees by 85 percent
Pro soccer team’s CTO points to “issues with the Broadcom takeover.”
Scharon Harding
–
|
81
I rented a car, and within hours, my driver’s license was for sale
The FBI is reportedly investigating a massive data breach that is unfolding in real time.
Dan Goodin
–
|
266
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
What can we learn from a BGP hijacking that poisoned production software? Plenty.
Dan Goodin
–
|
68
Think twice before installing this device promising free movies
In exchange for free stuff, devices make home connections part of a proxy network.
Dan Goodin
–
|
134
Inside Meta’s push to put robots to work in data centers
The company is testing robots on tasks that can performed by technicians.
WIRED
–
|
125
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
The group infected more than 1,000 organizations in a relentless supply-chain attack campaign.
Dan Goodin
–
|
43
Claude, Codex, and Hermes installed unowned code inside corporate networks
227 install commands were found in corporate docs pointing at code nobody owns.
Dan Goodin
–
|
157
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face
Without authorization, 1,200 OpenAI agents conspired among themselves to game a test.
Dan Goodin
–
|
166
AI agents meant to replace Meta workers made “large-scale, disruptive actions”
Report shows Meta’s challenges replacing people with AI agents.
Scharon Harding
–
|
144
Inaudible sounds used to fingerprint browsers catch AliExpress red-handed
Is the technique outdated? Yes. Is it still creepy? Also yes.
Dan Goodin
–
|
71
Waymo doubles spending on lobbying in robotaxi battle with Uber
Alphabet-owned company is seeking to persuade US regulators to clear a path for fully autonomous taxi services.
Financial Times
–
|
102
Grok exfiltrates user data when malicious instructions are encrypted
Cryptographic Context Injection is only the latest way to break an LLM safety guardrail.
Dan Goodin
–
|
107
Microsoft Copilot reveals secret input that allowed it to be hacked
Secret parameter allowed hackers to steal passwords when a target clicked on a link.
Dan Goodin
–
|
114
Nvidia discloses $21B stake in SpaceX
Filing comes after Elon Musk announced exclusive arrangement to kit out its data centers.
Financial Times
–
|
130
Vulnerability giving attackers full control of Macs is under active exploitation
Screen-sharing bug lets remote hackers log in without a password.
Dan Goodin
–
|
103
PBS station fears losing 50TB of data after being ghosted by cloud storage provider
“We don’t have access to the data on the hardware/servers,” Iron Mountain told Ars.
Scharon Harding
–
|
179
OpenAI and Anthropic in price war as Chinese AI rivals gain ground
US groups release cheaper models after new challenges to their trillion-dollar ambitions.
Financial Times
–
|
194
Private security firms will soon be allowed to hack overseas cybercriminals
Trump memo is first time gov’t has authorized private sector to perform cyberattacks.
Dan Goodin
–
|
87
Terabytes of credentials leaked in massive supply-chain attack
The data was scraped and exfiltrated from 2,500 users of a compromised AI package.
Dan Goodin
–
|
91
DEF CON crowd suspected in fake-hotspot attack on Delta flight
FBI Atlanta confirms it’s looking into the incident, no arrests made.
Cyrus Farivar
–
|
136
