Biz & IT
Targeted ads delivered 0-click exploits to install mercenary malware
Among the major vendors that listed Discover-Tech as a “certified” or “verified” vendor were Google and the advertising industry association IAB Europe.…
Fridge hack costing millions and sparking fires stemmed from poor security
Besides running controllers with outdated firmware, the affected stores likely also failed to put the devices behind a VPN and create a…
Anthropic warns small AI models could self-replicate through IoT devices
This finding was the starting point for further research that asked: Would it be possible for small models to create self-replicating infections…
Hackers obtain counterfeit TLS certificates for Google and other large services
“While Chrome took steps during these incidents to identify and block suspected unauthorized certificates across the affected ccTLDs, browser-side intervention should not…
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
The publisher of Wikipedia said Monday that OpenAI agents attempted to hack a note-taking tool it hosts, made unauthorized edits, and sent…
MCP for agent-to-agent comms may be the riskiest protocol you’ve never heard of
Skip to content Trust gaps in the new protocol spread malicious prompts from one agent to another. The adoption of AI agents…
Apple changes full-disk access permissions to curb abuse from AI agents
Apple says it is changing its macOS privacy settings to stop third-party app developers from misusing them to access message histories. Friday’s…
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
The Pentagon is informing more than 2 million current and former military members that their personnel records storing sensitive personal information were…
Attackers have been exploiting critical Zimbra flaw to steal emails
Hackers have been exploiting a critical vulnerability in the Zimbra Collaboration Suite in an attempt to obtain email backups and authentication credentials…
Cloudflare plans to issue quantum-safe TLS certificates
In February, Google announced a solution: Merkle Trees. These hierarchical data structures use cryptographic hashes and other math to verify the contents of…