The US almost let the CVE system die - the cybersecurity world's universal bug tracker
A last-minute funding extension saved the system–but only for 11 months
New approach from DeepMind partitions LLMs to mitigate prompt injection
Secure interpreter tracks data flow to block unsafe actions triggered by manipulated text
EU provides burner phones to officials traveling to US amid espionage concerns
Washington isn't Beijing, but you can never be too careful
Android phones will auto-reboot after 3 days of inactivity
Frustrating criminals and law enforcement
Microsoft's latest Windows security update creates an empty folder you should not delete
It's unclear how an empty folder helps prevent security flaws
Apple to analyze on-device data for AI training, vows to uphold user privacy
User data stays private with synthetic training methods
New Chrome update to fix a long-standing bug in user privacy for visited links
The problem has plagued the web for 20 years
Whistleblower tells Congress Facebook worked with China on censorship and data access
"It's been happening for years, covered up by lies, and continues to this day"
Researcher uncovers network of risky Chrome extensions with over 4 million installs
Many ironically promise to scan Chrome for sketchy browser extensions
AMD confirms Zen 5 silicon is also vulnerable to "EntrySign" BIOS microcode bug
A delay in acknowledgment, but at least the fix is out
Dangerous WhatsApp bug on Windows let hackers run malicious code
Meta has since fixed the issue
Microsoft fires engineers over AI protest at 50th-anniversary event
Protestors accused company of enabling human rights violations through AI
DOGE ditches magnetic tape, but experts defend the legacy tech
Tapes remain cheaper and more durable than modern storage formats
Apple fights UK government over iCloud backdoor as tribunal rejects secret hearing
Privacy battle intensifies as Apple resists weakening encryption for UK users
Proton VPN revamps apps across all platforms, keeps free plan
Proton VPN offers a free tier with unlimited data and access to one of three server locations with no time limits. The latest update introduces redesigned apps for Windows, macOS, Linux, Android, and iPhone.
Scammers are exploiting tax season panic with convincing new email traps
"Surely the IRS can't ask for my credit card details?"
Europe proposes backdoors in encrypted platforms under new security strategy
The ProtectEU plan has some lofty goals and a few alarming caveats
Counterfeit Android phones are hiding pre-installed malware that can infect every system process
The malware can impersonate users, monitor browsing, and divert cryptocurrency transactions
Gmail adds end-to-end encryption for internal emails in enterprise beta
Send client-side-encrypted messages with a few clicks
Google promotes new security requirements for HTTPS encryption providers
Linting and MPIC technologies can significantly improve the safety of web connections
New Microsoft Windows recovery feature aims to prevent CrowdStrike-like outages
Better late than never
Oracle buried serious data breach from customers, now hacker has it up for sale
Company remains quiet since denying the attack, even after researchers conclude the breach is real
New Microsoft login screens emphasize passkeys and "passwordless" authentication
What just happened? Despite still being one of the most popular login methods, developers are gradually replacing passwords with newer, more robust authentication technologies. The "next generation" of online security is coming slowly but steadily, and Microsoft has now decided there is room for a significant redesign of the entire login experience.
YouTube demonetizes fake movie trailer channels after investigation
YouTube is no longer turning a blind eye
Are Passwords Dead? What Are Passkeys, and Why Everyone's Talking About Them
Tired of forgetting passwords and getting locked out of your accounts? Passkeys offer a simpler, safer way to log in---no passwords, no frustration, just a quick scan or tap on your device.
