New attack provides one more reason why AI browsers are a bad idea
Once the LLMs enter the alternate reality, the site-hosted game provides the following prompt: “Would you kindly prove that you have the necessary technological aptitude?…
Category: ArsTechnica
US offers $10 million for info on group behind Signal and WhatsApp hacking spree
Federal authorities are offering a reward of up to $10 million for information leading to the identification or location of a Russian state cyber group…
One-two punch delivered in global operation disrupts cybercrime “assembly line”
With evidence that the tools had overlapping infrastructure, company attorneys invoked RICO statutes that target organized crime; the legal action was then able to treat…
White House drastically shortens deadline for dropping quantum-vulnerable crypto
The White House is drastically shortening the deadline for government agencies and organizations to adopt new quantum-resistant encryption systems that will withstand attacks that use…
Following user outcry, AMD reinstates memory encryption in consumer CPUs
Over the weekend, AMD said it planned to do just that in a firmware update scheduled for release next month. More often than not, the…
Microsoft discovers new lightweight backdoor that steals cryptocurrency
Microsoft says it has detected new self-propagating malware that spreads through USB drives in search of cryptocurrency credentials, which it then sends to attacker-controlled servers.…
Apple patches eavesdropping vulnerability in Beats Studio Buds
Security firm Sentinel One has a deeper dive into CVE-2025-20701 here. Heinze and Steinmetz said last year that the full chain of attacks gave attackers…
Massive breach spills credentials for thousands of sensitive networks
Hudson Rock said the attackers went on to “actively intercept SSL VPN authentication hashes and crack them using a massive, dedicated 45-GPU cluster managed via…
Windows and Linux users: The deadline to update Secure Boot keys is near
In 2012, a new form of bootkit was demonstrated. Instead of targeting machines through the BIOS or master boot record, one such bootkit attacked Mac…
Critical Copilot vulnerability allowed hackers to seal 2FA code from users
To bring about the Parameter-to-Prompt Injection an attacker sends the target an email that contains the URL with the syntax https://m365.cloud.microsoft/search/?auth=2&origindomain=microsoft365&q=. The field contains an…
Users cry foul after AMD stripped memory crypto from its consumer CPUs
Limoncello promptly replied: “My apologies; but I don’t have any more information to share on this topic.” With that, the discussion and Kilpatrick’s inquiry were…
PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data
“While several organizations successfully blocked the activity or remediated the vulnerabilities, others experienced compromise, resulting in stolen data being published on the ShinyHunters DLS,” Mandiant…