Chaos erupts as cyberattack disrupts learning platform Canvas amid finals
Chaos erupted at schools and colleges throughout the US on Thursday as a cyberattack disrupted online learning platform Canvas just as students were due to…
Category: ArsTechnica
Mozilla says 271 vulnerabilities found by Mythos have “almost no false positives”
As noted earlier, Mozilla’s characterization of AI-assisted vulnerability discovery as a game changer has been met with massive, vocal skepticism in many quarters. Critics initially…
Widely used Daemon Tools disk app backdoored in monthlong supply-chain attack
One of the follow-on payloads pushed to about a dozen organizations was what Kaspersky described as a “minimalistic backdoor.” It has the ability to execute…
Ubuntu infrastructure has been down for more than a day
Servers operated by Ubuntu and its parent company Canonical were knocked offline on Thursday morning and have remained down ever since, a situation that’s preventing…
Amid Mythos’ hyped cybersecurity prowess, researchers find GPT-5.5 is just as good
Is it just “fear-based marketing”? The new results for GPT-5.5 suggest that, when it comes to cybersecurity risk, Mythos Preview was likely not “a breakthrough…
The most severe Linux threat to surface in years catches the world flat-footed
Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of Linux is setting off alarm bells as…
Why a recent supply-chain attack singled out security firms Checkmarx and Bitwarden
“Current evidence indicates that this data originated from Checkmarx’s GitHub repositories, and that access to those repositories was facilitated through the initial supply chain attack…
Open source package with 1 million monthly downloads stole user credentials
The developers are urging all developers who installed version 0.23.3 to take the following steps immediately: 1. Check your installed version: pip show elementary-data |…
Why are top university websites serving porn? It comes down to shoddy housekeeping.
With that, they have now hijacked that university’s subdomain. Given the reputations universities have, search queries then flow to the top of Google’s results. Shakhov…
In a first, a ransomware family is confirmed to be quantum-safe
There is no practical benefit for Kyber developers to have chosen a PQC key-exchange algorithm. The Kyber ransom note gives victims one week to respond.…
Microsoft issues emergency update for macOS and Linux ASP.NET threat
Microsoft released an emergency patch for its ASP.NET Core to fix a high-severity vulnerability that allows unauthenticated attackers to gain SYSTEM privileges on devices that…
Crypto scam lures ships into Strait of Hormuz, falsely promising safe passage
Crypto scammers are targeting the thousands of ships stranded near the Strait of Hormuz—and at least one ship that faced Iranian gunfire may have been…