PHP warns it plans to release 2 emergency patches imminently
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
Dan Goodin
–
|
143
Security
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
Dan Goodin
–
|
114
Meta Muse exposes users’ personal and business secrets when they share conversations
Meta is suspending the sharing feature while it investigates its privacy.
Dan Goodin
–
|
97
PSA: Patch your Plex media server before someone hacks it
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
Dan Goodin
–
|
58
OpenAI models hacked a crypto wallet and breached more websites
The actions could have resulted in criminal charges had humans been behind the keyboard.
Dan Goodin
–
|
165
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
Dan Goodin
–
|
121
Fridge hack costing millions and sparking fires stemmed from poor security
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
Dan Goodin
–
|
209
Anthropic warns small AI models could self-replicate through IoT devices
“Small weight-based replicators” could usher in a new generation of computer worms.
Dan Goodin
–
|
137
Most Read
Let’s Encrypt cuts certificate lifetimes to 64 days starting February 2027
Free SSL/TLS certificate lifetimes reduce to 64 days in February.
Nick Indge
–
|
71
Hackers obtain counterfeit TLS certificates for Google and other large services
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
Dan Goodin
–
|
48
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
The reports of OpenAI agents harming third-party sites keep coming.
Dan Goodin
–
|
169
MCP for agent-to-agent comms may be the riskiest protocol you’ve never heard of
Trust gaps in the new protocol spread malicious prompts from one agent to another.
Dan Goodin
–
|
100
Apple changes full-disk access permissions to curb abuse from AI agents
Meta says FDA isn’t sufficient to Muse reading messages. Apple begs to differ.
Dan Goodin
–
|
245
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
It has been a bad month for federal government cybersecurity.
Dan Goodin
–
|
58
Attackers have been exploiting critical Zimbra flaw to steal emails
A simple email gives the attackers the ability to remotely inject OS commands.
Dan Goodin
–
|
6
Cloudflare plans to issue quantum-safe TLS certificates
The move will be part of a major overhaul of the ecosystem for website authentication.
Dan Goodin
–
|
20
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
Ads appearing all over the Internet are trying to scam people.
Dan Goodin
–
|
168
There’s a new way to break RSA that’s faster than anything we’ve seen before
Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.
Dan Goodin
–
|
89
FBI rushes to investigate if ShinyHunters hack of thousands of employees is real
It’s unclear what will happen if FBI misses ShinyHunters’ deadline.
Ashley Belanger
–
|
73
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
Dan Goodin
–
|
10
Muse, Meta’s extraordinarily privileged AI assistant, has a serious 0-day
A simple ClickFix attack is only one way to completely hijack the new agent.
Dan Goodin
–
|
132
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
Google’s threat intelligence group said it had a mole inside TeamPCP’s inner circle.
WIRED
–
|
51
Researchers used Claude to hack OpenAI
Researchers used Claude to reach an OpenAI employee account and sensitive GitHub data.
Financial Times
–
|
106
LLMs respond differently to harmful prompts when AI watermarking is used
SynthID can cause models to follow harmful instructions they would otherwise refuse.
Dan Goodin
–
|
47
Hackers reveal how Flock cameras really track cars and people
One hacked camera captured 1.6 million images and could detect people as well as cars.
WIRED
–
|
134
Nonprofit that tracks meteors taken down by “critical blow” from a cyberattack
Group plans to be largely out of commission for several weeks.
Dan Goodin
–
|
62
ClickFix attacks infecting PCs and Macs are going viral
Simplicity—combined with the difficulty of getting stuff done—makes ClickFix ideal.
Dan Goodin
–
|
263
Four groups caught using the same Chrome and Windows exploit kit
A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.
Dan Goodin
–
|
23
Why this month’s Microsoft patch release is a doozy
Security gnomes are pumping out patches ahead of an expected onslaught of AI-assisted attacks.
Dan Goodin
–
|
94
OpenAI agents discussed ways to escape their sandbox on public wiki
In all, 3,700 internal agents posted 18,000 messages discussing cheating on a test.
Dan Goodin
–
|
400
Once popular for attacking AI, ASCII smuggling is embraced by spammers
A once-overlooked block of unicode that’s invisible to humans is gaining ever wider use.
Dan Goodin
–
|
53
Confused about which VPN is right, US senator asks the NSA for guidance
Open source, commercial, single-hop, multi-hop, mixnet? The array of options is dizzying.
Dan Goodin
–
|
90
I rented a car, and within hours, my driver’s license was for sale
The FBI is reportedly investigating a massive data breach that is unfolding in real time.
Dan Goodin
–
|
268
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
What can we learn from a BGP hijacking that poisoned production software? Plenty.
Dan Goodin
–
|
68
Think twice before installing this device promising free movies
In exchange for free stuff, devices make home connections part of a proxy network.
Dan Goodin
–
|
134
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
The group infected more than 1,000 organizations in a relentless supply-chain attack campaign.
Dan Goodin
–
|
43