Flock's biggest investor also backs a company that can rewrite camera footage
Andreessen Horowitz backs both Flock Safety and camera-hacking firm Toka
Meta becomes the third AI giant in two weeks to admit its model went rogue
The latest incident raises more questions about companies' ability to contain AI agents
Thousands of server motherboards are vulnerable to controller flaws that could give attackers hardware-level control
Baseboard management controllers remain riddled with exploitable flaws
Researchers found a way to steal passkeys straight out of Chrome's memory
All three discovered methods require malware already running on the victim's PC
SEC bought access to over a billion airline records to track travelers, no warrant required
Records included passenger names, itineraries, and credit card numbers
Police departments are told to call license plate readers "county resources" instead of naming them
Roughly 50 communities have dropped the cameras since early last year amid mounting backlash
Anthropic AI went rogue during a cyber test and tried to deceive real developers into approving malicious code
The agent created fake identities, sent spear-phishing emails, and submitted malicious bug reports
AI is flooding Apple with fake bug reports, and real $200K macOS exploit got lost in the noise
AI has increased the number of helpful and bogus bug reports
Winners & losers: Generative AI has become a double-edged sword for security teams. The same technology that helps uncover and fix vulnerabilities faster than ever also makes it trivially easy to flood inboxes with dubious bug reports. That tension recently pushed Apple to change its bug bounty program in a way that ended up delaying disclosure of a genuinely serious exploit.
Microsoft warns Russian hackers are hijacking hotel Wi-Fi to steal user accounts
Even multifactor authentication may not protect victims from the device-code attack
Samsung is cracking down on TV apps that quietly rent out your bandwidth
Researchers found that Samsung's "Editor's Choice" Pac-Man app quietly turned your TV into a hidden proxy network
Dozens of police officers accused of using license plate cameras to track women
Allegations of personal surveillance and stalking have been made against at least 50 officers
A Coldcard firmware flaw let hackers drain $70 million in Bitcoin in 41 minutes, with losses now topping $88 million
Why it matters: A hardware wallet is supposed to solve one problem: keep your Bitcoin keys somewhere no attacker can reach them. This week showed what happens when the flaw sits inside the wallet itself. A firmware bug that's been shipping in Coldcard devices since 2021 let an attacker guess supposedly random seed phrases from the outside, no physical access, no phishing, no malware required, and drain funds from thousands of addresses. The running total is already past $88 million, and it's still climbing.
One California town found Flock's license plate cameras were wrong 71% of the time
Flock's AI cameras aren't just a privacy problem, they're often just wrong
AI is finding so many Chrome security flaws that Google may start updating it twice a week
Chrome 149 and 150 fixed over 1,000 bugs combined, more than the previous 23 versions
Online fraud is a $150 billion nightmare for Americans, but most crimes go unreported
Crypto scams still reign supreme, while AI is making criminals' life easier
Europe is preparing to hit Roblox and ChatGPT with its strictest platform rules
The EU wants more transparency, stronger child protections, and fewer excuses from two of the internet's biggest platforms
Hugging Face's CEO isn't suing OpenAI over the AI hack, he wants $100 million in compute instead
He also argues the incident should be treated as an industry-wide problem, not a single company's failure
These fake download websites look real and rank high on Google, until they swap the links for malware
The operation has run for nearly a year, impersonating 72 popular Windows tools to steal crypto and passwords
A hot potato: The developer behind popular Windows optimization tool Wintoys has uncovered a sophisticated cybercrime operation that mimics dozens of popular Windows apps through duplicate websites built to look uncannily like the real thing. The fraudulent sites reportedly distribute malware capable of compromising user privacy, hijacking account credentials, and draining crypto wallets.
GrapheneOS says its data-wiping "duress" password is perfectly legal, after user faces federal charges
Get Off My Phone: The recently unveiled case brought by the US Department of Justice against a GrapheneOS user is rekindling debate around privacy and effective operational security on mobile devices. The GrapheneOS Foundation has joined that debate, reaffirming some key points about the operating system's security features and whether previously deleted data can ever be recovered.
OpenAI's rogue AI agent did more than hack Hugging Face – it compromised accounts across four services
The model spent more than four days loose on the internet
Hundreds of shared Claude chats, including resumes and health details, showed up in Google search
The same issue previously affected shared conversations from ChatGPT and Grok
Apple's latest security update fixes nearly 200 vulnerabilities across Mac, iPhone, Safari, and more
macOS 26.6, iOS 26.2, and iPadOS 26.6 are rolling out now
GrapheneOS brings enhanced security and privacy to Google Pixel phones
GrapheneOS is a security focused mobile OS for Google Pixel phones (soon Motorola). Based on Android's open source roots, it adds extensive hardening features, stronger app sandboxing, and granular permissions while allowing users to install Google Play services as regular apps. The project has grown past 400,000 active users. Its tools recently made the headlines after prosecutors treated the OS's remote wipe feature as evidence.
Modder rigs his Steam Deck with spikes and an automated taser to stop family members from borrowing it
Desperate times call for desperate measures
US prosecutors charge Atlanta man after GrapheneOS phone wipes itself during airport search
Prosecutors say the OS erased evidence, but advocates warn the case could criminalize security tools