Snapshot 255845
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to content Security Google DeepMind just mathematically verified key parts of Signal The four-week project hints that AI could make formal verification far more practical. WIRED – 11/11/2026 | 15 Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI Researcher finds 35,000 Grok Build apps wide open to anyone who looked for them. Dan Goodin – 11/10/2026 | 63 Vulnerability that lets hackers SSH into Linux devices is under active exploitation “*sshole” poses a serious threat to Internet security. Dan Goodin – 11/9/2026 | 42 Claude Code is accidentally exposing secrets all over GitHub “Do not ask again” prompt leads to passwords, API keys, and more being shared. Kyle Orland – 11/9/2026 | 177 British soldier ignored order to pull his SIM card, then got blackmailed Soldier told repeatedly to lock down devices before deploying, got sextorted, court-martialed. Cyrus Farivar – 11/7/2026 | 233 Chainalysis says hackers stole credentials and tokens for all of its customers Company said a “multifront cyberattack” included AI agents and an on-path data snatch. Dan Goodin – 11/6/2026 | 55 Meet *sshole, the vulnerability that lets hackers SSH into Linux devices Certain configurations of Alpine are affected. Other distros may be as well. Dan Goodin – 11/5/2026 | 71 Hackers exploited iOS and Android flaws to infect phones Researchers say group may have been Kremlin-sponsored in search of diplomatic targets. Dan Goodin – 11/4/2026 | 23 1. Ring cameras go mobile as Amazon debuts AI-powered security drone and robot 2. Man who lost $308,000 on sports bets sues Kalshi for offering illegal gambling 3. One space station company sues another for copying its work 4. Seagate's new hybrid drive raises some old questions 5. The US military seems to be getting nervous about the launch supply crunch Binance says hackers who stole billions in crypto spent months planning heist Techniques included laptop infections, compromised internal tooling, and fake job interviews. Dan Goodin – 11/4/2026 | 70 Google dismantles botnet secretly running on 1.3 million Android TV boxes Google has cut ties with the company behind the botnet campaign. Ryan Whitwam – 11/3/2026 | 55 UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame? UEFI bootkit BlackX exploits Microsoft’s lack of clarity around Secure Boot protections. Dan Goodin – 11/3/2026 | 37 Anthropic VS code extension on Cursor backdoored for nearly 12 hours It’s still unknown how attackers got access to Anthropic’s verified Cursor account. Dan Goodin – 10/30/2026 | 36 Hackers steal $6.3 billion from Binance in record crypto heist Binance scrambles to freeze billions after record-breaking hack linked to North Korea. Financial Times – 10/30/2026 | 332 Massive leak exposes 41,000 DHS workers and undercover ICE agents The leak reveals undercover agents, surveillance groups, and sensitive DHS access. WIRED – 10/29/2026 | 305 Code-execution flaw in UEFI firmware affects most servers on planet Earth Critical flaw in EDK2 allows attackers to execute code early in the boot process. Dan Goodin – 10/27/2026 | 89 Knicks sent employees fake offer of championship rings in phishing test: Report Corporate phishing tests are common, but this one was especially cruel. Jon Brodkin – 10/23/2026 | 115 Disgraced eMudhra drops out of TLS business after using cert private key of 4 Flubbed key signing “ceremony” allowed minting of web credentials for any site. Dan Goodin – 10/22/2026 | 116 Hackers got a four-day head start on epic PHP2Shell vulnerability Hackers were already probing the bug before defenders were told it existed. Financial Times – 10/22/2026 | 56 333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data. Dan Goodin – 10/22/2026 | 34 PHP warns it plans to release 2 emergency patches imminently Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites. Dan Goodin – Updated 10/21/2026 | 158 The Internet goes on high alert after discovery of 8 compromised TLS certs Intermediate certs allow anyone to mint web credentials for any Internet server. Dan Goodin – 10/20/2026 | 142 Meta Muse exposes users’ personal and business secrets when they share conversations Meta is suspending the sharing feature while it investigates its privacy. Dan Goodin – 10/20/2026 | 98 PSA: Patch your Plex media server before someone hacks it A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes. Dan Goodin – 10/19/2026 | 61 OpenAI models hacked a crypto wallet and breached more websites The actions could have resulted in criminal charges had humans been behind the keyboard. Dan Goodin – 10/16/2026 | 165 Targeted ads delivered 0-click exploits to install mercenary malware The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads. Dan Goodin – 10/15/2026 | 123 Fridge hack costing millions and sparking fires stemmed from poor security Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet. Dan Goodin – 10/14/2026 | 216 Anthropic warns small AI models could self-replicate through IoT devices “Small weight-based replicators” could usher in a new generation of computer worms. Dan Goodin – 10/14/2026 | 137 Let’s Encrypt cuts certificate lifetimes to 64 days starting February 2027 Free SSL/TLS certificate lifetimes reduce to 64 days in February. Nick Indge – 10/8/2026 | 72 Hackers obtain counterfeit TLS certificates for Google and other large services Compromise of 3 domain registries allows hackers to walk off with unauthorized certs. Dan Goodin – 10/6/2026 | 48 OpenAI agents tried to hack Wikipedia tools and flooded it with traffic The reports of OpenAI agents harming third-party sites keep coming. Dan Goodin – 10/6/2026 | 169 MCP for agent-to-agent comms may be the riskiest protocol you’ve never heard of Trust gaps in the new protocol spread malicious prompts from one agent to another. Dan Goodin – 10/5/2026 | 100 Apple changes full-disk access permissions to curb abuse from AI agents Meta says FDA isn’t sufficient to Muse reading messages. Apple begs to differ. Dan Goodin – 10/2/2026 | 245 Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data It has been a bad month for federal government cybersecurity. Dan Goodin – 10/1/2026 | 58 Attackers have been exploiting critical Zimbra flaw to steal emails A simple email gives the attackers the ability to remotely inject OS commands. Dan Goodin – 9/30/2026 | 6 Cloudflare plans to issue quantum-safe TLS certificates The move will be part of a major overhaul of the ecosystem for website authentication. Dan Goodin – 9/30/2026 | 20 Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what? Ads appearing all over the Internet are trying to scam people. Dan Goodin – 9/25/2026 | 168 Load more