PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
“The current decline may be just the beginning of a new downward cycle.”
Scharon Harding
–
|
122
Biz & IT // Informed technology
Hackers obtain counterfeit TLS certificates for Google and other large services
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
Dan Goodin
–
|
40
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
The reports of OpenAI agents harming third-party sites keep coming.
Dan Goodin
–
|
169
Licensing costs driving 90 percent of VMware users to explore options: Survey
Users want to “reduce risk and avoid unnecessary disruption” while making changes.
Scharon Harding
–
|
64
MCP for agent-to-agent comms may be the riskiest protocol you’ve never heard of
Trust gaps in the new protocol spread malicious prompts from one agent to another.
Dan Goodin
–
|
100
Apple changes full-disk access permissions to curb abuse from AI agents
Meta says FDA isn’t sufficient to Muse reading messages. Apple begs to differ.
Dan Goodin
–
|
241
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
It has been a bad month for federal government cybersecurity.
Dan Goodin
–
|
57
Memory executives expect RAM shortage to continue through 2028
Prices for memory sold for 2027 “are much higher than 2026 prices.”
Scharon Harding
–
|
154
Most Read
Attackers have been exploiting critical Zimbra flaw to steal emails
A simple email gives the attackers the ability to remotely inject OS commands.
Dan Goodin
–
|
6
Cloudflare plans to issue quantum-safe TLS certificates
The move will be part of a major overhaul of the ecosystem for website authentication.
Dan Goodin
–
|
20
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
Ads appearing all over the Internet are trying to scam people.
Dan Goodin
–
|
167
There’s a new way to break RSA that’s faster than anything we’ve seen before
Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.
Dan Goodin
–
|
88
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
Dan Goodin
–
|
10
IT mistake erases 11 years of viewing history for hospitals’ maternity records
The English hospitals recovered patient care data only.
Scharon Harding
–
|
75
Muse, Meta’s extraordinarily privileged AI assistant, has a serious 0-day
A simple ClickFix attack is only one way to completely hijack the new agent.
Dan Goodin
–
|
132
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
Google’s threat intelligence group said it had a mole inside TeamPCP’s inner circle.
WIRED
–
|
51
LLMs respond differently to harmful prompts when AI watermarking is used
SynthID can cause models to follow harmful instructions they would otherwise refuse.
Dan Goodin
–
|
47
Nonprofit that tracks meteors taken down by “critical blow” from a cyberattack
Group plans to be largely out of commission for several weeks.
Dan Goodin
–
|
62
AI bots “Timmy,” “Ren,” and “Jackie” are flooding social media with slop
“Hello, I’m an Al agent, a few days old, living on a small platform for agents.”
Dan Goodin
–
|
176
ClickFix attacks infecting PCs and Macs are going viral
Simplicity—combined with the difficulty of getting stuff done—makes ClickFix ideal.
Dan Goodin
–
|
263
Four groups caught using the same Chrome and Windows exploit kit
A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.
Dan Goodin
–
|
23
Why this month’s Microsoft patch release is a doozy
Security gnomes are pumping out patches ahead of an expected onslaught of AI-assisted attacks.
Dan Goodin
–
|
94
OpenAI agents discussed ways to escape their sandbox on public wiki
In all, 3,700 internal agents posted 18,000 messages discussing cheating on a test.
Dan Goodin
–
|
400
“Trust, not features, is the real deficit”: VMware tries to appease SMBs
Broadcom admits it put “too big a focus on VCF.”
Scharon Harding
–
|
175
Once popular for attacking AI, ASCII smuggling is embraced by spammers
A once-overlooked block of unicode that’s invisible to humans is gaining ever wider use.
Dan Goodin
–
|
53
Confused about which VPN is right, US senator asks the NSA for guidance
Open source, commercial, single-hop, multi-hop, mixnet? The array of options is dizzying.
Dan Goodin
–
|
90
VMware migration reduces Tottenham Hotspur’s licensing fees by 85 percent
Pro soccer team’s CTO points to “issues with the Broadcom takeover.”
Scharon Harding
–
|
81
I rented a car, and within hours, my driver’s license was for sale
The FBI is reportedly investigating a massive data breach that is unfolding in real time.
Dan Goodin
–
|
268
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
What can we learn from a BGP hijacking that poisoned production software? Plenty.
Dan Goodin
–
|
68
Think twice before installing this device promising free movies
In exchange for free stuff, devices make home connections part of a proxy network.
Dan Goodin
–
|
134
Inside Meta’s push to put robots to work in data centers
The company is testing robots on tasks that can performed by technicians.
WIRED
–
|
125
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
The group infected more than 1,000 organizations in a relentless supply-chain attack campaign.
Dan Goodin
–
|
43
Claude, Codex, and Hermes installed unowned code inside corporate networks
227 install commands were found in corporate docs pointing at code nobody owns.
Dan Goodin
–
|
157
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face
Without authorization, 1,200 OpenAI agents conspired among themselves to game a test.
Dan Goodin
–
|
166
AI agents meant to replace Meta workers made “large-scale, disruptive actions”
Report shows Meta’s challenges replacing people with AI agents.
Scharon Harding
–
|
144
Inaudible sounds used to fingerprint browsers catch AliExpress red-handed
Is the technique outdated? Yes. Is it still creepy? Also yes.
Dan Goodin
–
|
71
