Feeds
|
All News
|
Login

Dan Goodin


  1. Microsoft’s Secure Boot has been broken for a decade and no one noticed until now

  2. The US government warns that Russia state hackers are coming after your router

  3. Now, defenders are embracing the prompt injection, too

  4. Patch for Windows Defender 0-day could allow attackers to fill hard disk

  5. Google pays $250K for Linux vulnerability allowing guest VM escapes

  6. Hackers can use 9 of the most popular AI tools to assemble massive botnets

  7. New attack provides one more reason why AI browsers are a bad idea

  8. US offers $10 million for info on group behind Signal and WhatsApp hacking spree

  9. One-two punch delivered in global operation disrupts cybercrime "assembly line"

  10. White House drastically shortens deadline for dropping quantum-vulnerable crypto

  11. Following user outcry, AMD reinstates memory encryption in consumer CPUs

  12. Microsoft discovers new lightweight backdoor that steals cryptocurrency

  13. Apple patches high-severity eavesdropping vulnerability in Beats Studio Buds

  14. Massive breach spills credentials for thousands of sensitive networks

  15. Windows and Linux users: The deadline to update Secure Boot keys is near

  16. Critical Copilot vulnerability allowed hackers to seal 2FA code from users

  17. Users cry foul after AMD stripped memory crypto from its consumer CPUs

  18. PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data

  19. Locked in heated rivalry with researcher, Microsoft fixes 0-day they disclosed

  20. High-severity vulnerability in Linux caused by a single errant character

  21. For the 2nd time in weeks, Microsoft packages laced with credential stealer

  22. Highly reviewed speaker can be hacked over the air to infect connected devices

  23. Dashlane explains how attackers managed to download encrypted password vaults

  24. Dashlane issues opaque advisory warning 20 encrypted vaults were stolen

  25. Dozens of Red Hat packages backdoored through its official NPM channel

  26. Botnet of more than 17 million devices dismantled

  27. Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code

  28. Websites have a new way to spy on visitors: analyzing their SSD activity

  29. Millions of AI agents imperiled by critical vulnerability in open source package

  30. Texas AG sues Meta over claims that WhatsApp doesn't provide end-to-end encryption

  31. Google publishes exploit code threatening millions of Chromium users

  32. Zero-day exploit completely defeats default Windows 11 BitLocker protections

  33. Linux bitten by second severe vulnerability in as many weeks

  34. Chaos erupts as cyberattack disrupts learning platform Canvas amid finals

  35. Mozilla says 271 vulnerabilities found by Mythos have "almost no false positives"

  36. Widely used Daemon Tools disk app backdoored in monthlong supply-chain attack

  37. Ubuntu infrastructure has been down for more than a day

  38. The most severe Linux threat to surface in years catches the world flat-footed

  39. Why a recent supply-chain attack singled out security firms Checkmarx and Bitwarden

  40. Open source package with 1 million monthly downloads stole user credentials

  41. Why are top university websites serving porn? It comes down to shoddy housekeeping.

  42. In a first, a ransomware family is confirmed to be quantum-safe

  43. Microsoft issues emergency update for macOS and Linux ASP.NET threat

  44. Contrary to popular superstition, AES 128 is just fine in a post-quantum world

  45. US-sanctioned currency exchange says $15 million heist done by "unfriendly states"

  46. Recent advances push Big Tech closer to the Q-Day danger zone

  47. Iran-linked hackers disrupt operations at US critical infrastructure sites

  48. Thousands of consumer routers hacked by Russia's military

  49. OpenClaw gives users yet another reason to be freaked out about security

  50. New Rowhammer attacks give complete control of machines running Nvidia GPUs