Researchers found a way to bring expired credit cards back from the dead
"Zombie card" exploit uses two smartphones to rewrite credit card expiration data
Apple just patched a critical macOS flaw that let hackers break in without a password
The Screen Sharing flaw, rated 9.8 out of 10 in severity, was already being exploited in the wild
A botched Mastercard update left Australian shoppers unable to pay
Apple Pay and cash withdrawals were also affected during the outage
Three new Windows flaws can bypass security, gain system privileges, and even install malware remotely
The flaws include "Download More RAM," the ShieldBreak zero-day, and a remote "plug and pwn" attack
Nine PBS lost access to 50TB of archives after its cloud storage provider vanished
A failed cloud vendor left 70 years of broadcasting history stranded inside a Denver data center
The US will let private companies hack back at cybercriminals for the first time
Vetted companies will be able to surveil, disrupt, and destroy criminal infrastructure
Disgruntled security researcher just dropped another Windows zero-day, right on schedule
ShieldBreak reportedly bypasses Microsoft's Windows Defender patch with a "100% success rate"
Sounding off: NightmareEclipse did it again. The security researcher who's been on a crusade against Microsoft has published a new zero-day flaw affecting all supported Windows versions. Redmond threatened to sue, but the researcher is keeping his promise to disclose a new dangerous flaw after every month's Patch Tuesday.
Microsoft is killing off SMS login codes, citing AI-powered hacking
Microsoft Entra ID to phase out SMS authentication on February 1
AMD's TPM implementation includes two high-severity flaws, but fixes have been available since May
TPM was supposed to prevent these types of issues
Chrome's new security feature could make stolen session cookies virtually useless
Hardware-backed keys strengthen web sessions
Windows 11's latest update quietly ends support for picture passwords
The change affects both Windows 10 and Windows 11, but only for new enrollments
License plate readers can now track your phone too, thanks to new surveillance tech
SignalTrace says it doesn't identify people, but experts say that claim doesn't hold up
A California city just declared an emergency after malware hit its 911 systems
Suisun City joins a growing list of small California cities hit by cyberattacks this year
An AI agent was asked to book a gym class, whe none was available, it decided to hack the system and jump the queue
The agent found a weak API while doing a simple chore, and took actions the user never requested
Flock wanted to put license plate cameras on 350,000 Uber and Lyft dashcams
The plan to turn Ubers into surveillance cameras never happened, but it was close
Flock's biggest investor also backs a company that can rewrite camera footage
Andreessen Horowitz backs both Flock Safety and camera-hacking firm Toka
Meta becomes the third AI giant in two weeks to admit its model went rogue
The latest incident raises more questions about companies' ability to contain AI agents
Thousands of server motherboards are vulnerable to controller flaws that could give attackers hardware-level control
Baseboard management controllers remain riddled with exploitable flaws
Researchers found a way to steal passkeys straight out of Chrome's memory
All three discovered methods require malware already running on the victim's PC
SEC bought access to over a billion airline records to track travelers, no warrant required
Records included passenger names, itineraries, and credit card numbers
Police departments are told to call license plate readers "county resources" instead of naming them
Roughly 50 communities have dropped the cameras since early last year amid mounting backlash
Anthropic AI went rogue during a cyber test and tried to deceive real developers into approving malicious code
The agent created fake identities, sent spear-phishing emails, and submitted malicious bug reports
AI is flooding Apple with fake bug reports, and real $200K macOS exploit got lost in the noise
AI has increased the number of helpful and bogus bug reports
Winners & losers: Generative AI has become a double-edged sword for security teams. The same technology that helps uncover and fix vulnerabilities faster than ever also makes it trivially easy to flood inboxes with dubious bug reports. That tension recently pushed Apple to change its bug bounty program in a way that ended up delaying disclosure of a genuinely serious exploit.
Microsoft warns Russian hackers are hijacking hotel Wi-Fi to steal user accounts
Even multifactor authentication may not protect victims from the device-code attack
Samsung is cracking down on TV apps that quietly rent out your bandwidth
Researchers found that Samsung's "Editor's Choice" Pac-Man app quietly turned your TV into a hidden proxy network