A federal agent said WhatsApp's encryption is a lie. Then the investigation was shut down
A 10-month Commerce Department probe concluded Meta could view all WhatsApp messages in unencrypted form
Consumer tech lobby warns FCC that blocking router updates creates botnet risk for devices already in US homes
A temporary FCC waiver allows updates only until March 2027
Denuvo may have reached the end as every protected PC game is now crackable
The takeaway: The PC piracy scene appears to have reached a milestone many once thought unlikely: Denuvo, long regarded as one of the most formidable DRM and anti-tamper systems in gaming, has effectively been defeated. With hypervisor bypasses emerging as the latest breakthrough, there is now no known PC game protected by Denuvo that cannot be obtained for free through either a crack or a functional bypass.
Android wants to replace email verification codes with one-tap credentials
Editor's take: Google is once again trying to simplify something that was already fairly easy and convenient. Mountain View's latest target is email-based authentication, which is now dropping the email-checking step altogether thanks to a new Android API update.
Ransomware groups are using "post-quantum" hype to intimidate victims
Quantum-resistant ransomware may be more marketing stunt than cryptographic leap
Weak IoT security could make EV chargers vulnerable to mass shutdowns
Predictable device IDs and weak authentication could let attackers knock public charging networks offline
Mozilla uses Anthropic's Mythos to uncover 271 bugs in Firefox 150
Mozilla frames its latest release as evidence that machine-led analysis can sweep entire codebases faster and cheaper than human teams
Iran claims US botnets or backdoors disabled routers from Cisco, Juniper, and Fortinet
The unverified claim draws on past router implant disclosures and recent wartime cyber operations
A $5 Bluetooth tracker hidden in a postcard exposed a warship's movements
A journalist slipped the device into the mail and mapped a Dutch frigate during deployment
Researchers warn Microsoft Defender vulnerability is already being exploited
The "Red Sun" flaw can overwrite system files and grant elevated access through Defender's file handling behavior
Open-source tool decrypts all private data collected by Windows Recall on Copilot PCs
Editor's take: Windows Recall continues to raise security concerns. Microsoft has redesigned the feature to improve data and identity protection following public outcry, but a new tool is now reigniting the controversy. I have to suspect that few people in their right mind would choose to enable or use it at this point.
Popular WordPress plugins backdoored after ownership change, putting thousands of websites at risk
The backdoor was dormant for months
Malware campaign lures users with fake Windows Update website
A file with zero VirusTotal detections isn't necessary safe
What was the first ransomware attack to demand payment in Bitcoin?
Test your cyber history savvy in this week's trivia.
Rockstar Games hit with ransom demand after third-party data breach
Shinyhunters warns Rockstar to pay up or face data leak
Gmail encryption goes mobile, but email itself remains the weak link
Despite Google's best efforts, encrypted emails can still be a pain in the neck to deal with
Florida launches probe into OpenAI as company eyes massive IPO
Attorney general raises concerns over data security, foreign access, and alleged links to harmful AI use
FBI recovers "deleted" Signal messages through iPhone notifications
iPhones store push notification content, which forensic software can access
Microsoft OneDrive users report mysterious spam files that won't go away
Users continue to receive unsolicited files that are likely phishing attempts
A version of Windows 10 released a decade ago is now eligible for additional security patches
Windows 10 is dead, but its enterprise heart is still beating
Iran-linked hackers are now targeting industrial controllers in US infrastructure
Attackers are exploiting internet-facing PLCs with legitimate tools, causing operational disruptions in energy, water, and government systems
Hackers are turning home routers into tools to spy on Microsoft 365 users
Russian cyber-spies are back with a vengeance
German police identify REvil and GandCrab mastermind now living in Russia
They allege Daniil Shchukin ran two of the most prolific ransomware operations and helped rebuild them under a new name
Anthropic unveils new powerful AI that finds software flaws, but says it's too dangerous to release
Claude Mythos Preview has already identified thousands of high-severity bugs across major systems and software
Russia's attempt to block VPNs is causing widespread banking outages
Telegram founder warns against the unexpected outcome of Kremlin's internet restrictions