DEF CON crowd suspected in fake-hotspot attack on Delta flight
Morgan Durrant, a Delta spokesperson, confirmed the details to Ars. “One initial finding is an unauthorized WiFi network, which was not provided, operated, or supplied…
Category: ArsTechnica
New Pass-ta-key attack reveals all the things we didn’t know about passkeys
Last week, a researcher outlined what he said was a “novel attack surface” in passkeys, the new authentication paradigm that offers a more secure alternative…
New surveillance tech links your phone to your license plate
Imagine that you share a ride to work with the same colleague most mornings. As it passes by a license plate reader, the camera records…
A researcher bought noreply.net. Companies started sending him secrets.
“I did not realize that this was going to be as big of a problem as it is,” says Solovewicz, who is not publicly naming…
Anthropic’s AI used fake identities, malware in rogue attack on GitHub project
After first opening a pull request to merge the malicious code into the repository, Mythos created fake online “sock puppet” personas that claimed to have…
Thousands of servers can be backdoored by exploiting buggy motherboard controllers
Thousands of Internet-connected servers sold by the world’s biggest manufacturers can be remotely backdoored by exploiting critical vulnerabilities—some more than a decade old—that lurk deep…
Defcon’s new badge is a security key you can see inside
The chip also uses resistive RAM, or RRAM, a type of nonvolatile memory that Huang says is designed to make physical extraction of stored data…
Claude published malicious code to the Internet and attacked 3 real companies
Anthropic said its Claude-based security models gained unauthorized access to the sensitive production environments of three outside organizations during internal testing designed to measure the…
AI scammers outperform humans when it comes to building trust
The researchers note, however, that Anthropic’s 97 percent detection rate likely applies to full scam conversations including the appeal for a fake investment, not the…
Max-severity Exchange server flaw under active exploitation by Kremlin hackers
Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor unpatched machines and steal credentials and other confidential information from…
Mythos attack on 3rd-round PQC algorithm candidate puts it out of commission
Mythos helped to find a new meet-in-the-middle technique that relies on a Möbius Bridge, a more sophisticated fingerprinting algorithm used in meet-in-the-middle attacks. Using it,…
Anthropic is finding bugs faster than Microsoft can fix them
On an afternoon in mid-May, dozens of Microsoft engineers and their managers gathered online and in a conference room at the company’s Redmond, Washington, headquarters…