Microsoft issues emergency update for macOS and Linux ASP.NET threat
Microsoft released an emergency patch for its ASP.NET Core to fix a high-severity vulnerability that allows unauthenticated attackers to gain SYSTEM privileges on devices that…
Category: ArsTechnica
Crypto scam lures ships into Strait of Hormuz, falsely promising safe passage
Crypto scammers are targeting the thousands of ships stranded near the Strait of Hormuz—and at least one ship that faced Iranian gunfire may have been…
Mozilla: Anthropic’s Mythos found 271 security vulnerabilities in Firefox 150
By identifying bugs so efficiently, Holley writes that AI tools like Mythos tilt the cybersecurity balance toward defenders, who benefit when discovering vulnerabilities becomes cheaper…
Contrary to popular superstition, AES 128 is just fine in a post-quantum world
On Monday Valsorda finally channelled years’ worth of frustration fueled by the widely held misunderstanding into a blog post titled Quantum Computers Are Not a…
US-sanctioned currency exchange says $15 million heist done by “unfriendly states”
Grinex, a US-sanctioned cryptocurrency exchange registered in Kyrgyzstan, said it’s halting operations after experiencing a $13 million heist carried out by “western special services” hackers.…
Recent advances push Big Tech closer to the Q-Day danger zone
Sometime around 2010, sophisticated malware known as Flame hijacked the mechanism that Microsoft used to distribute updates to millions of Windows computers around the world.…
“TotalRecall Reloaded” tool finds a side entrance to Windows 11’s Recall database
The problem, as detailed by Hagenah on the TotalRecall GitHub page, isn’t with the security around the Recall database, which he calls “rock solid.” The…
UK gov’s Mythos AI tests help separate cybersecurity threat from hype
Here, Mythos outshone all previous models, becoming “the first model to solve TLO from start to finish,” AISI said. While Anthropic’s new model only succeeded…
Iran-linked hackers disrupt operations at US critical infrastructure sites
Hackers working on behalf of the Iranian government are disrupting operations at multiple US critical infrastructure sites, likely in response to the country’s ongoing war…
Thousands of consumer routers hacked by Russia’s military
The Russian military is once again hacking home and small office routers in widespread operations that send unwitting users to sites that harvest passwords and…
OpenClaw gives users yet another reason to be freaked out about security
For more than a month, security practitioners have been warning about the perils of using OpenClaw, the viral AI agentic tool that has taken the…
New Rowhammer attacks give complete control of machines running Nvidia GPUs
So where do we go now? The researchers said that both the RTX 3060 and RTX 6000 cards are vulnerable. Changing BIOS defaults to enable…