Patch for Windows Defender 0-day could allow attackers to fill hard disk
A patch Microsoft released on Wednesday to fix a zero-day vulnerability in its Defender security engine may cause Windows machines to write files large enough…
Category: ArsTechnica
Google pays $250K for Linux vulnerability allowing guest VM escapes
A Linux vulnerability that allows untrusted virtual machines to gain root access to host machines is one of two high-severity flaws to surface this week…
Hackers can use 9 of the most popular AI tools to assemble massive botnets
In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are inherently unable to distinguish between…
Newly discovered PamStealer isn’t your typical macOS malware
Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs with stealthy, custom-developed credential-stealing code. The…
NASA inspector general suggests Boeing’s Starliner will now be a decade late
NASA Administrator Jared Isaacman formally classified the 2024 crewed flight of the Starliner spacecraft as a “Type A” mishap in February, acknowledging that the test…
New attack provides one more reason why AI browsers are a bad idea
Once the LLMs enter the alternate reality, the site-hosted game provides the following prompt: “Would you kindly prove that you have the necessary technological aptitude?…
US offers $10 million for info on group behind Signal and WhatsApp hacking spree
Federal authorities are offering a reward of up to $10 million for information leading to the identification or location of a Russian state cyber group…
One-two punch delivered in global operation disrupts cybercrime “assembly line”
With evidence that the tools had overlapping infrastructure, company attorneys invoked RICO statutes that target organized crime; the legal action was then able to treat…
White House drastically shortens deadline for dropping quantum-vulnerable crypto
The White House is drastically shortening the deadline for government agencies and organizations to adopt new quantum-resistant encryption systems that will withstand attacks that use…
Following user outcry, AMD reinstates memory encryption in consumer CPUs
Over the weekend, AMD said it planned to do just that in a firmware update scheduled for release next month. More often than not, the…
Microsoft discovers new lightweight backdoor that steals cryptocurrency
Microsoft says it has detected new self-propagating malware that spreads through USB drives in search of cryptocurrency credentials, which it then sends to attacker-controlled servers.…
Apple patches eavesdropping vulnerability in Beats Studio Buds
Security firm Sentinel One has a deeper dive into CVE-2025-20701 here. Heinze and Steinmetz said last year that the full chain of attacks gave attackers…