Google's AI-powered search can recommend malicious sites, including scams and malware
The incredible power of AI
Unpatchable Apple Silicon vulnerability could leak encryption keys
In brief: Hardware-based security flaws have become more frequent over the last several years but have mostly affected Intel and AMD processors. Now, Apple joins those ranks with a recently discovered vulnerability that causes Mac M-series CPUs to expose encryption keys. Since it is hardware-based, there is little users can do besides keeping macOS updated.
Ethical hackers show how to open millions of hotel keycard locks
Any NFC-enabled Android phone could forge a master key for every room in a hotel
In a nutshell: Over three million hotel room locks in 13,000 buildings in 131 countries are vulnerable to an exploit that lets attackers forge master keys for any door. Although the manufacturer of the affected locks is rolling out a fix, it's unclear when or if every impacted hotel will upgrade its systems.
TSA fail: Man arrested for stealing boarding pass QR codes with his phone's camera
Used picture of one passenger's pass to get through TSA and another to board the plane
White House warns of cyberattacks targeting critical US water systems
Water plants can be an easy target for hackers
Denuvo now provides a watermarking solution to track sources of game build leaks
Securing the game industry in these suspenseful times
Apex Legends tournament postponed after players hacked mid-match
Was a RCE bug to blame?
LockBit ransomware group member sentenced to four years for infecting over 1,000 systems
He must also pay a $635,000 fine
Hackers can access your private, encrypted AI assistant chats
The entry point is the token-length side-channel, which is present in most of the major AI assistants
Google Chrome gets real-time phishing and malware protection with upgraded Safe Browsing feature
It will be available on all desktop and mobile platforms by the end of this month
International organization Cybercrime Atlas wants to disrupt cybercrime on a global scale
In a nutshell: The biggest security threats active today work on the international stage, which means an effective attempt to disrupt them should be global as well. Members of the Cybercrime Atlas are trying to do just that, starting with a shared intelligence on cybercrime gangs and their operations.
Some QNAP NAS devices affected by a critical vulnerability, updates available right now
The company is once again scrambling to improve security of its network OSes
Google awarded $10 million in bug bounties last year, the second highest in the program's history
The largest single payout was $113,337
Russian state-sponsored hackers compromised Microsoft source code repositories
The previously disclosed attack is worse than initially thought - and it's ongoing
Tesla Berlin Gigafactory to be without power for another week following eco-terrorist attack
Musk called them the dumbest eco-terrorists on Earth
VMware forced to patch dangerous vulnerabilities in discontinued products
Flaws so severe, the company felt the need to update the now-abandoned ESXi hypervisor
Sam Altman's iris-scanning Worldcoin crypto project has been banned in Spain over privacy concerns
Would you hand over your iris scans for free crypto?
Ransomware group scams its partner out of a share of $22 million by faking an FBI takedown
Who said there is "honor among thieves?"
Russian authorities used facial recognition tech to identify and arrest Navalny funeral attendees
Cameras were installed days before the ceremony
Microsoft left a kernel-level, zero-day bug in Windows for six months before patching it
Hackers exploited the issue to spread an extremely stealthy rootkit
Researchers prove they can exploit chatbots to spread AI worms
Hackers could deploy the worms in plain text emails or hidden in images
In context: Big Tech continues to recklessly shovel billions of dollars into bringing AI assistants to consumers. Microsoft's Copilot, Google's Bard, Amazon's Alexa, and Meta's Chatbot already have generative AI engines. Apple is one of the few that seems to be taking its time upgrading Siri to an LLM and hopes to compete with an LLM that runs locally rather than in the cloud.
More than 100,000 GitHub repositories found spreading malicious packages
An effective way to compromise the software supply chain with developers' help
WhatsApp scores major legal victory over Pegasus spyware maker, forcing it to provide closely-guarded code
Pegasus is thought to have been used by governments around the world to spy on political dissidents, journalists and human rights activists
Foreign spies are learning how to sabotage critical infrastructure, Australian intelligence agency warns
Adversarial nations could plan a major disruption in the future
Researchers develop self-destructing circuits to defend against attacks, counterfeiting
This chip will self-destruct in three, two...