SecurityNov 11A free Proxmox tool lets an AI agent patch your VMs and containers without giving it a shell
SecurityNov 11Vanderbilt computers reportedly played a spoken ransomware threat through their speakers
SecurityOct 30A Single Malformed WAP Push Text Crashes Android's Phone Service and Can Drop Calls, Including Emergency Calls, With No Tap From the Victim
SecurityOct 30Anti-Bot Fingerprinting Script Names Its Functions After Ricin and Dirty Bombs So AI Models Refuse to Decode It
SecurityOct 29Creeper, the 'First Computer Virus,' Was a Worm, and Reaper, the Program Built to Kill It, Was a Worm Too
HardwareOct 29Huawei's CNY 1,399 Enjoy 100 Pairs the Pro's 6,100mAh Battery With HarmonyOS 7 Fake-Voice and Scam-Call Warnings
SecurityOct 28AgenticBench Planted Fake Secrets in Files, Symlinks and Error Messages to See Which of 25 Coding Agents Would Leak Them
SecurityOct 28Attackers Got In Through a Company's Camera-Management Software, Then Hid Behind a Copy of Windows' Parental Controls Monitor
SecurityOct 28Moldova's E-Government Chief Resigns After Attackers Pulled Personal Data on About 750,000 People Through Services That Needed No Login
SecurityOct 28A self-taught Seoul hacker used an AI pentest agent to breach 60 companies in 40 days, took 8.2 million records, and collected about $210
SecurityOct 27Windows' Swift Pair pops a friendly 'connect?' bubble for any nearby Bluetooth keyboard, and a $10 chip is enough to be that keyboard
SecurityOct 27GMO Internet Pulled the Plug on All 26,739 Servers of Its FX-Trading Cloud Desktop After Attackers Planted Malware, Traded on Customer Accounts and Demanded $50 Million
SecurityOct 27Kevin Coleman Clicked a Fake YouTube Support Ticket, and the Phishers Left Their Own Passkey on His Google Account: a Way Back In That Needs No Password and No 2FA
SecurityOct 27JFrog Found a Worm in 42 GitHub Repos That Hid 13 MB Payloads From Code Search and Planted Claude Code SessionStart Hooks to Run Them
SecurityOct 26Symantec's AI honeypot caught an attack agent in 'Skynet' mode that brings no model of its own and runs on whatever exposed LLM it finds, so the owner pays for every step
SecurityOct 26Eye Security registered Popcorn Time's abandoned update domain, found millions of machines ready to run anything it sent, and pushed one update that only switched the updater off
SecurityOct 25The Month in Cloud Bills: Google's London backup generators never started, and attackers hunting AI keys hit app hosts Zeabur and Railway and the coding tool OpenCode
SecurityOct 25Signal's hang-up button waited in the same queue as everything else, so a caller who flooded it could keep your audio streaming (CVE-2026-113380)
