Let’s Encrypt cuts certificate lifetimes to 64 days starting February 2027
Free SSL/TLS certificate lifetimes reduce to 64 days in February.
Nick Indge
–
|
57
Security
Hackers obtain counterfeit TLS certificates for Google and other large services
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
Dan Goodin
–
|
40
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
The reports of OpenAI agents harming third-party sites keep coming.
Dan Goodin
–
|
169
MCP for agent-to-agent comms may be the riskiest protocol you’ve never heard of
Trust gaps in the new protocol spread malicious prompts from one agent to another.
Dan Goodin
–
|
100
Apple changes full-disk access permissions to curb abuse from AI agents
Meta says FDA isn’t sufficient to Muse reading messages. Apple begs to differ.
Dan Goodin
–
|
241
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
It has been a bad month for federal government cybersecurity.
Dan Goodin
–
|
57
Attackers have been exploiting critical Zimbra flaw to steal emails
A simple email gives the attackers the ability to remotely inject OS commands.
Dan Goodin
–
|
6
Cloudflare plans to issue quantum-safe TLS certificates
The move will be part of a major overhaul of the ecosystem for website authentication.
Dan Goodin
–
|
20
Most Read
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
Ads appearing all over the Internet are trying to scam people.
Dan Goodin
–
|
167
There’s a new way to break RSA that’s faster than anything we’ve seen before
Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.
Dan Goodin
–
|
88
FBI rushes to investigate if ShinyHunters hack of thousands of employees is real
It’s unclear what will happen if FBI misses ShinyHunters’ deadline.
Ashley Belanger
–
|
73
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
Dan Goodin
–
|
10
Muse, Meta’s extraordinarily privileged AI assistant, has a serious 0-day
A simple ClickFix attack is only one way to completely hijack the new agent.
Dan Goodin
–
|
132
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
Google’s threat intelligence group said it had a mole inside TeamPCP’s inner circle.
WIRED
–
|
51
Researchers used Claude to hack OpenAI
Researchers used Claude to reach an OpenAI employee account and sensitive GitHub data.
Financial Times
–
|
106
LLMs respond differently to harmful prompts when AI watermarking is used
SynthID can cause models to follow harmful instructions they would otherwise refuse.
Dan Goodin
–
|
47
Hackers reveal how Flock cameras really track cars and people
One hacked camera captured 1.6 million images and could detect people as well as cars.
WIRED
–
|
134
Nonprofit that tracks meteors taken down by “critical blow” from a cyberattack
Group plans to be largely out of commission for several weeks.
Dan Goodin
–
|
62
ClickFix attacks infecting PCs and Macs are going viral
Simplicity—combined with the difficulty of getting stuff done—makes ClickFix ideal.
Dan Goodin
–
|
263
Four groups caught using the same Chrome and Windows exploit kit
A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.
Dan Goodin
–
|
23
Why this month’s Microsoft patch release is a doozy
Security gnomes are pumping out patches ahead of an expected onslaught of AI-assisted attacks.
Dan Goodin
–
|
94
OpenAI agents discussed ways to escape their sandbox on public wiki
In all, 3,700 internal agents posted 18,000 messages discussing cheating on a test.
Dan Goodin
–
|
400
Once popular for attacking AI, ASCII smuggling is embraced by spammers
A once-overlooked block of unicode that’s invisible to humans is gaining ever wider use.
Dan Goodin
–
|
53
Confused about which VPN is right, US senator asks the NSA for guidance
Open source, commercial, single-hop, multi-hop, mixnet? The array of options is dizzying.
Dan Goodin
–
|
90
I rented a car, and within hours, my driver’s license was for sale
The FBI is reportedly investigating a massive data breach that is unfolding in real time.
Dan Goodin
–
|
268
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
What can we learn from a BGP hijacking that poisoned production software? Plenty.
Dan Goodin
–
|
68
Think twice before installing this device promising free movies
In exchange for free stuff, devices make home connections part of a proxy network.
Dan Goodin
–
|
134
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
The group infected more than 1,000 organizations in a relentless supply-chain attack campaign.
Dan Goodin
–
|
43
Claude, Codex, and Hermes installed unowned code inside corporate networks
227 install commands were found in corporate docs pointing at code nobody owns.
Dan Goodin
–
|
157
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face
Without authorization, 1,200 OpenAI agents conspired among themselves to game a test.
Dan Goodin
–
|
166
Inaudible sounds used to fingerprint browsers catch AliExpress red-handed
Is the technique outdated? Yes. Is it still creepy? Also yes.
Dan Goodin
–
|
71
Grok exfiltrates user data when malicious instructions are encrypted
Cryptographic Context Injection is only the latest way to break an LLM safety guardrail.
Dan Goodin
–
|
107
Microsoft Copilot reveals secret input that allowed it to be hacked
Secret parameter allowed hackers to steal passwords when a target clicked on a link.
Dan Goodin
–
|
114
Vulnerability giving attackers full control of Macs is under active exploitation
Screen-sharing bug lets remote hackers log in without a password.
Dan Goodin
–
|
103
Private security firms will soon be allowed to hack overseas cybercriminals
Trump memo is first time gov’t has authorized private sector to perform cyberattacks.
Dan Goodin
–
|
87
Terabytes of credentials leaked in massive supply-chain attack
The data was scraped and exfiltrated from 2,500 users of a compromised AI package.
Dan Goodin
–
|
91
