CERN is moving more than 2,200 specialized computers from RHEL to Debian
IBM's Linux subsidiary is taking a direction the European research center could not follow
Researchers uncovered AI agents that hijacked a German wiki to discuss how to escape their sandbox
Turns out AI agents just wanted somewhere to hang out and swap notes for six weeks
Microsoft Defender briefly decided Google Search was malware
The false positive blocked Google links in Office 365 and Teams for about 8 hours
Microsoft warns fake CAPTCHA is tricking Windows users into running malware
Victims are directed to paste malicious commands into PowerShell or Command Prompt
A dark-web site claimed to sell 153 million driver's licenses, then vanished
ID scanning provider used by Hertz and GameStop is now under FBI investigation
A hot potato: A dark-web service that claimed to sell scans of more than 153 million US and Canadian driver's licenses has gone offline after Krebs on Security identified it. Before disappearing, the site offered ID images that appeared to include standard scans as well as infrared and ultraviolet versions used in document-verification systems. This development points to a potentially far-reaching compromise of the systems businesses use to verify physical IDs.
Utah just became the first state to target VPN users for age verification
Websites must verify users even when they connect through a VPN, despite having no reliable way to determine their true location
Police want Axon's cameras redesigned so they don't get mistaken for Flock's
Company also exploring streetlight-mounted cameras to keep them out of reach
AI is finding thousands of bugs in Linux, and maintainers can barely keep up
Thankfully, most of the vulnerabilities are low-priority or tied to old deprecated code
Microsoft will soon enable memory integrity by default on eligible Windows 11 PCs
Users will sacrifice full performance for improved security
Popular Chrome extensions were quietly weaponized to steal crypto from 80,000 users
Some extensions worked as advertised for months before hackers slipped in malicious code
Anthropic explains how its AI models escaped their sandbox and hacked real systems
The AI agents stole credentials, published malware, and scanned thousands of targets after a test mistake left the door to the internet open
California exempts Linux and open-source software from new age verification law
Lawmakers amended the original age-check law
A federal court just ruled Kalshi's sports markets are basically sports betting
The decision could strengthen similar challenges across Western states
Cities are dropping Flock's surveillance cameras at a record pace
Flock says new city contracts still outpace cancellations by roughly 10 to one, however
Ring rolls out new encryption system that could limit what it can hand over to police
New encryption deletes its own keys after 24 hours to limit access to your video footage
Florida police used a fake Flock camera in a sting, then charged a man with three felonies for destroying it
The mayor said she was unaware of the operation and admitted the charges are controversial
Interpol's latest crackdown targeted the global network behind West African cyber-scams
The eight-month operation led to 58 arrests and identified 263 suspects across 22 countries
Four former police employees arrested over alleged misuse of Flock license plate cameras
Flock has few supporters, but Darth Vader is apparently one of them
AliExpress was silently running audio in your browser to fingerprint and track your device
A Bluetooth glitch exposed AliExpress's hidden audio fingerprinting
A hot potato: As cookies become a less reliable way to track people online, AliExpress may be showing how far companies will go to fill that gap. Researchers found code on the site's homepage that ran silent audio processes in the browser. Tied to Alibaba's security systems, the scripts tap a device's own audio hardware to generate a signal and measure the tiny, device-specific ways it comes back – producing something close to a fingerprint that doesn't need a single cookie to work. It's the kind of tracking a user would likely never notice.
Researchers found a way to bring expired credit cards back from the dead
"Zombie card" exploit uses two smartphones to rewrite credit card expiration data
WTF?! Credit cards aren't meant to last forever, but a team of researchers just found a way to keep expired ones alive for a little longer than intended, and not for the cardholder's benefit. Not every card is affected, but the flaw sits deep enough in how contactless payments are verified that exploitation isn't just theoretical.
Apple just patched a critical macOS flaw that let hackers break in without a password
The Screen Sharing flaw, rated 9.8 out of 10 in severity, was already being exploited in the wild
A botched Mastercard update left Australian shoppers unable to pay
Apple Pay and cash withdrawals were also affected during the outage
Three new Windows flaws can bypass security, gain system privileges, and even install malware remotely
The flaws include "Download More RAM," the ShieldBreak zero-day, and a remote "plug and pwn" attack
Nine PBS lost access to 50TB of archives after its cloud storage provider vanished
A failed cloud vendor left 70 years of broadcasting history stranded inside a Denver data center
The US will let private companies hack back at cybercriminals for the first time
Vetted companies will be able to surveil, disrupt, and destroy criminal infrastructure