SecurityOct 31New Windows Malware Steals Your Logins, Then Has an AI Write a Report Titled "WHAT THEY'RE WORTH"
SecurityOct 30CAPTCHA Began in 2000 When Yahoo's Udi Manber Told Carnegie Mellon That Bots Posing as Teenagers Were Working Its Chat Rooms
SecurityOct 30A Yorkshire Farm Ran a Few Hundred Cattle on One Windows XP PC With No Backups, Patched by the Farmer's 14-Year-Old Grandson
SecurityOct 30A Single Malformed WAP Push Text Crashes Android's Phone Service and Can Drop Calls, Including Emergency Calls, With No Tap From the Victim
SecurityOct 30Skyreader RSS Subscriptions Stored on AT Protocol PDS Records Are Public, Exposing Paywalled and Private Feed URLs
SecurityOct 30Anti-Bot Fingerprinting Script Names Its Functions After Ricin and Dirty Bombs So AI Models Refuse to Decode It
SecurityOct 29Causal Security's AI agent Cipher found four serious bugs in EPICS, the control software behind particle accelerators and ITER's fusion project, in 3 hours 49 minutes
SecurityOct 29Creeper, the 'First Computer Virus,' Was a Worm, and Reaper, the Program Built to Kill It, Was a Worm Too
SecurityOct 29Google's Gemini 4 Carbon tops security benchmarks, but only vetted cyber defenders in its Fairwind Program can use it for now
SecurityOct 29Zero Breach Toolkit is a free, read-only scanner that checks your computer and phone backups for Pegasus and Predator traces
SecurityOct 28AgenticBench Planted Fake Secrets in Files, Symlinks and Error Messages to See Which of 25 Coding Agents Would Leak Them
SecurityOct 28Attackers Got In Through a Company's Camera-Management Software, Then Hid Behind a Copy of Windows' Parental Controls Monitor
SecurityOct 28Discord Will Put Public Messages From Its 63,000 Discoverable Servers on the Web; One Data and Privacy Toggle Keeps Yours Off
SecurityOct 28Gheist Uses Stolen GitHub Tokens to Plant a Workflow That Prints Every Repo Secret in Base32, Slipping Past GitHub's Log Masking
SecurityOct 28Moldova's E-Government Chief Resigns After Attackers Pulled Personal Data on About 750,000 People Through Services That Needed No Login
SecurityOct 28UNM Hospital, New Mexico's Only Level 1 Trauma Center, Diverted Ambulances After a Red Skull Took Over Staff Screens
SecurityOct 28PhantomTac: A Half-Millimetre Magnet Sticker Fools a Robot's Touch Sensors Into Crushing a Box or Dropping It Mid-Move
SecurityOct 28A self-taught Seoul hacker used an AI pentest agent to breach 60 companies in 40 days, took 8.2 million records, and collected about $210
SecurityOct 28Harmen Stoppels's Tar-Minefield Feeds 81 Crafted Archives to About 20 Tar Readers, and They Pull Different Files Out of the Same Bytes
SecurityOct 28The Shadow Kindle Jailbreak Gets Root Over USB With Decoy Folders, a Leaky File Date and One Extra Parameter
SecurityOct 27Bruce Ediger Built a Million-Page Fake Website as a Trap and Caught One Coordinated Crawler Reading It Rank by Rank From 7,690 Contabo IP Addresses
SecurityOct 27Ransomware Hit Welsh Local-Government Data Unit Data Cymru Through a Test Account Named Test2 With the Password Password1, Left Active for 12.5 Years
SecurityOct 27ESP-Watchtower turns a $3 ESP8266 into a home-network tripwire with a fake Telnet shell, a fake router login and a fake security camera
