Google accidentally published a four-year-old Chromium security bug, then tried to hide it again
Discovered in 2022 and rated high priority, it still hasn't been fixed
Microsoft is pulling the plug on SMS codes, wants you to switch to passkeys
The future of login is "passwordless, secure, and user-friendly"
Discord now encrypts every voice and video call by default
Discord just flipped on end-to-end encryption for every voice and video call across DMs, group chats, voice channels and streams. It's one of the platform's biggest privacy upgrades yet.
AI could steal fingerprints from high-resolution selfies, experts warn
Hackers only need photos from within 5 feet
A security researcher says Microsoft secretly built a backdoor into BitLocker, releases an exploit to prove it
YellowKey exploit bypasses BitLocker full volume encryption via USB stick and WinRE
Two brothers deleted 96 federal databases after being fired – one googled how to hide the evidence afterward
Government contractor unknowingly hired felons who hacked the government in 2015
The FCC has banned new foreign-made routers, but existing ones can keep receiving updates until 2029
The agency doesn't want to leave devices vulnerable while its crackdown on foreign-made hardware continues
Newly disclosed "Dirty Frag" vulnerability left Linux exposed for nearly a decade
Another massive support headache for the Linux world
Facepalm: The open-source community is once again facing a major security incident tied to an "unprecedented" vulnerability. The new flaw could give attackers a reliable way to escalate user privileges, and no patch is available yet. Fortunately, the mitigation process is relatively straightforward. Still, kernel developers are already growing frustrated with the seemingly endless stream of critical bugs.
Europe is moving to block Microsoft, Amazon, and Google from handling government health, financial, and legal data
The latest move in a widening standoff over who controls Europe's digital infrastructure – but private companies are exempt
Say goodbye to burner phones? FCC robocall plan raises privacy fears
Carriers could be forced to collect government ID and other personal data before activating service
A cyberattack on Canvas knocked out access for students at Harvard, Columbia, and hundreds of other schools during finals
The breach is a case study in how a single platform compromise can take down an entire sector at once
Your Yarbo lawnmower is a backdoor into your Wi-Fi network
A security researcher found that every Yarbo robot ships with a backdoor that exposes your Wi-Fi password in plain text
Kaspersky warns that passwords hashed with MD5 algorithm can be cracked in minutes using a GPU
Moving away from insecure passwords is now a critical priority
A student halted multiple Taiwan bullet trains by spoofing the rail network's emergency radio signals
Police say the 23-year-old decoded rail radio parameters and used handheld devices to trigger an emergency alarm
Hackers used Daemon Tools' own website to silently install backdoors on thousands of PCs for nearly a month
While thousands of users across 100 countries were infected, Kaspersky believes the attack was targeted at specific organizations
Microsoft Edge stores all your saved passwords unencrypted in memory
The behavior was first documented in 2022 and has persisted for at least four years
The FCC wants to ban Chinese labs from certifying electronics, but 75% of devices are tested there now
That could push up prices on phones, laptops, and smart home devices
Utah just passed the first US law targeting VPN use for age verification
A new Utah law assumes websites can detect VPNs and find your real location. They can't.
"Copy Fail" is a rare Linux bug that can turn an unprivileged user into a root admin in seconds
Affects virtually every Linux distro released in the past nine years, and working exploits were on GitHub within 24 hours
Facepalm: Security researchers recently unveiled "Copy Fail," a bug that could potentially bring the entire Linux ecosystem to a screeching halt. The flaw can be reliably exploited across all Linux-based systems, both on local machines and in cloud environments. Vendors are now scrambling to patch the issue.
Meta contractor fires 1,100 AI trainers after they revealed Ray-Ban glasses recorded private and intimate footage
The same firm that helped train ChatGPT is now at the center of Meta's smart glasses privacy scandal
New ransomware is so badly coded it destroys your files instead of holding them hostage
Is this a vibe-coded experiment or sheer incompetence? Either way, victims' data is gone for good
A federal agent said WhatsApp's encryption is a lie. Then the investigation was shut down
A 10-month Commerce Department probe concluded Meta could view all WhatsApp messages in unencrypted form
Consumer tech lobby warns FCC that blocking router updates creates botnet risk for devices already in US homes
A temporary FCC waiver allows updates only until March 2027
Denuvo may have reached the end as every protected PC game is now crackable
The takeaway: The PC piracy scene appears to have reached a milestone many once thought unlikely: Denuvo, long regarded as one of the most formidable DRM and anti-tamper systems in gaming, has effectively been defeated. With hypervisor bypasses emerging as the latest breakthrough, there is now no known PC game protected by Denuvo that cannot be obtained for free through either a crack or a functional bypass.
