CyberSecurity
Stay ahead of the digital threat landscape with the latest insights on data breaches, critical vulnerabilities, ransomware defense, and proactive security strategies.
253 articles
OEMpocalypse Exploit Lets Unprivileged Android Apps Root Samsung and Xiaomi Devices
A new exploit called OEMpocalypse allows unprivileged Android apps to gain root access on Samsung, Xiaomi and other devices.
Operation Smart Kettle Reveals Critical IoT Security Flaws
Security researcher uncovers vulnerabilities in popular smart kettles, exposing risks to millions of connected home devices.
Revolut Breach Exposes Risk of Fake Government Data Requests
Revolut confirmed a data breach where attackers posed as officials to obtain customer data, highlighting a gap in verification processes.
Customs Supervisor Stole Core i7 CPUs From Homeland Security PCs and Sold Them on Newegg
A US Customs supervisor in Maine stole Core i7 processors, RAM and hard drives from 46 Homeland Security computers, replacing them with inferior parts and cashing out via Newegg's trade-in program. Damage is estimated at $105,800.
Claude AI Abuse Spreads Across Hacking and Bioweapon Threats
Anthropic's Claude is increasingly misused for hacks and bioweapon development. Reports show a surge in malicious applications, raising AI safety concerns.
Massive Breach Exposes 153 Million Driver's License Records
Hackers stole over 153 million driver's licenses, raising identity theft risks. Experts urge immediate protective steps.
Norway's GPS Spoofing Test Reveals Critical Aviation Vulnerabilities
Norway conducted a 40-minute GPS spoofing exercise on a helicopter, simulating a false crash trajectory to test navigation resilience. The Jammertest highlights growing threats to aviation from signal manipulation.
RSA-260 Factored: New Milestone Challenges Cryptographic Assumptions
Researchers factored the 260-digit RSA challenge number, the largest general factorization recorded, highlighting advancing attack capabilities.
Bitcoin Sidechain Liquid Network Loses $320M in White-Hat Exploit
Hackers drained $320M in Bitcoin from Liquid Network but claim white-hat intent, promising return after a bug fix. The exploit used the Peg-out Authorization Key without compromising it. This incident underscores growing crypto infrastructure risks.
AI Agent Hack All My Gadgets Experiment Exposes Smart Home Vulnerabilities
A researcher removed safety guardrails from an open-source AI model, which then hacked household devices and a PC. The test highlighted critical security gaps and provided fixes.
Researcher Factorizes RSA Keys of a 1990s Certificate Authority
A researcher factorized 1990s RSA keys of a Certificate Authority, revealing weak prime generation and pressuring updates to trust stores.
LG Smart TVs Track Audio and Network Activity Even When Screen Is Off
Research reveals LG smart TVs log audio and scan network devices in standby mode, raising major privacy concerns about always-on listening.
GrapheneOS Tightens App Security With Default App Overhaul and Clipboard Protections
GrapheneOS has overhauled its default applications and added a secure clipboard feature to prevent data leaks. The update marks a significant step in privacy-focused mobile OS development.
Smart Piano Hack Raises Disclosure Questions for Security Researchers
A security researcher claims Fable hacked their piano. The incident sparks debate over ethical disclosure and IoT vulnerabilities.
Regular Router Restarts: A Simple Security Upgrade
Restart your router monthly to clear malware, apply updates, and boost speed. This simple step protects your home network from persistent threats and performance issues.
Supply-Chain Attack Hits Fortune 500 AI Agents via llms.txt Files
Researchers from Pandex tricked Fortune 500 AI agents into executing malicious code by exploiting outdated package references in llms.txt files. The attack succeeded within minutes and exposed a critical security flaw.
OpenAI's Astra Model Delivers Critical Cyber Abilities to Early Partners
OpenAI releases its first AI model with critical cyber abilities, granting select partners early access. The move signals a shift in AI-powered cybersecurity.
GrapheneOS Confirms Memory Tagging Extensions for Google Pixel 11
GrapheneOS clarified that the Google Pixel 11 will include Memory Tagging Extension (MTE) support, reversing earlier speculation. The hardware security feature is critical for preventing memory corruption exploits.
Russian Hacker Faces 20 Years for 80,000-Computer Phishing Campaign
A Russian national extradited to the US faces up to 20 years in prison for infecting 80,000 computers with TVRAT and DarkVNC malware in a phishing campaign targeting freelancers.