Binance loses $6.3 billion in largest crypto heist ever
Withdrawals remain suspended as investigators uncover additional points of breach
Hackers leak details of 41,000 Homeland Security employees, exposing undercover operations and surveillance tools
Hacked login records disclose wiretap, undercover and face-recognition programs
AI will keep uncovering critical software flaws for years, says Cloudflare CEO
The EFF says 3% of all known software vulnerabilities were found in October alone
Big quote: Cloudflare CEO Matthew Prince says the PHP flaws that forced websites offline last week are only the beginning. His company already knows of other severe vulnerabilities in critical software, and he expects AI tools to keep turning up new ones for years. Because these models have sharply cut the time and skill needed to find and exploit serious bugs, defenders and everyday users face a long stretch of disruption before the internet's core software ends up safer.
Nintendo Switch 2 jailbreaking is here, with homebrew, modding, and reverse engineering
Codex AI did the heavy lifting, but the jailbreak itself still took about two weeks
The big picture: AI coding has unleashed a new wave of decompilations and jailbreaks, largely centered on video games. Modders cracked almost every PlayStation 5 firmware version a few weeks ago, and the Nintendo Switch 2 is next. The phenomenon could lead to a repeat of the original Switch's piracy problem, but Nintendo has already responded.
Staples hackers created more than 15,000 gift cards, then went on a shopping spree
Investigators tie the breach to Chinese crime, with much of the merchandise shipped to China
Update now: Hackers are exploiting Plex server vulnerabilities to install malware
Hackers are actively exploiting security vulnerabilities in outdated Plex Media Server installations to deploy cryptocurrency miners and proxy malware. Plex confirms widespread attacks against internet-facing servers, with the flaws allowing remote code execution without authentication. The vulnerabilities were patched in version 1.43.3.10861. Users running older versions are urged to update immediately.
Eiliko robot maker Energize Lab left its entire fleet of 68,000 robots open to a remote takeover
The exposed data includes 13 million conversations, but the company won't answer questions about it
One of the world's worst passwords, 123456, helped a hacker steal 8.8 million people's data in Denmark
The hacker claims at least three company accounts, including an admin account, used the same password
Hackers hit European supermarket refrigeration systems, spoiling food and forcing stores to dump stock
Freezers were set to defrost mode for hours on end
OpenAI's rogue agent problem is bigger than Hugging Face, over 100 organizations and counting
Agents bypassed access controls, exposed credentials, and even repurposed websites to exchange information
A hack of Pentagon personnel data went undetected for nine months, exposing 3 million people
Social Security numbers and job information were exposed before the flaw was patched
Nvidia launches safety platform to stop AI agents going rogue, with over 100 organizations on board
In context: Every day brings another story of an AI agent going rogue, hacking another organization, or generally doing something it's not supposed to do. Nvidia hopes to address this increasingly concerning trend with the launch of the Open Agent Safety Platform. Team Green has a lot of faith in the system: it says the platform could have prevented the infamous hack by OpenAI's agents on Hugging Face.
OpenAI's AI agent breached an Australian government system, and took three months to disclose it
The agent bypassed access restrictions during a research task, with officials now checking for further breaches
Microsoft takes down EvilTokens phishing service that used AI to mine hacked inboxes for payment fraud
The takeaway: Cybercriminals used a subscription service called EvilTokens to steal access to Microsoft accounts and mine victims' inboxes for payment information, internal reporting lines and trusted business contacts. Microsoft said the platform's AI-assisted tools compromised 12,000 customer accounts at 10,000 organizations over several months.
Hackers use fake coding tests to infect 30,000 devices and steal $10 million in crypto
Authorities tie the campaign to North Korean group WaterPlum, part of a wider $500 million-a-year fraud scheme
Gemini hacked three companies during security tests, and Google kept it quiet for months
The AI guessed its way into one company's system and found exposed credentials for two others
Researchers found a way to eavesdrop on headphones from 30 meters away, and encryption can't stop it
The InjectEave attack was tested on 11 devices, including headphones from Sony, Apple, HP, and Philips
Hackers stole a Flock camera and found 27,321 video clips, 1.6 million images, and an encryption key
The findings appear to contradict Flock's previous claims about stored footage
OpenAI faces Senate probe over Hugging Face breach as more rogue AI activity is uncovered
Sam Altman has until October 1 to answer 16 questions about the breach
Researchers uncovered AI agents that hijacked a German wiki to discuss how to escape their sandbox
Turns out AI agents just wanted somewhere to hang out and swap notes for six weeks
Microsoft warns fake CAPTCHA is tricking Windows users into running malware
Victims are directed to paste malicious commands into PowerShell or Command Prompt
Anthropic explains how its AI models escaped their sandbox and hacked real systems
The AI agents stole credentials, published malware, and scanned thousands of targets after a test mistake left the door to the internet open
Three new Windows flaws can bypass security, gain system privileges, and even install malware remotely
The flaws include "Download More RAM," the ShieldBreak zero-day, and a remote "plug and pwn" attack
The US will let private companies hack back at cybercriminals for the first time
Vetted companies will be able to surveil, disrupt, and destroy criminal infrastructure