Anthropic VS code extension on Cursor backdoored for nearly 12 hours
It’s still unknown how attackers got access to Anthropic’s verified Cursor account.
Dan Goodin
–
|
32
Security
Hackers steal $6.3 billion from Binance in record crypto heist
Binance scrambles to freeze billions after record-breaking hack linked to North Korea.
Financial Times
–
|
175
Massive leak exposes 41,000 DHS workers and undercover ICE agents
The leak reveals undercover agents, surveillance groups, and sensitive DHS access.
WIRED
–
|
265
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Critical flaw in EDK2 allows attackers to execute code early in the boot process.
Dan Goodin
–
|
87
Knicks sent employees fake offer of championship rings in phishing test: Report
Corporate phishing tests are common, but this one was especially cruel.
Jon Brodkin
–
|
115
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Flubbed key signing “ceremony” allowed minting of web credentials for any site.
Dan Goodin
–
|
116
Hackers got a four-day head start on epic PHP2Shell vulnerability
Hackers were already probing the bug before defenders were told it existed.
Financial Times
–
|
56
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.
Dan Goodin
–
|
34
Most Read
PHP warns it plans to release 2 emergency patches imminently
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
Dan Goodin
–
|
157
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
Dan Goodin
–
|
136
Meta Muse exposes users’ personal and business secrets when they share conversations
Meta is suspending the sharing feature while it investigates its privacy.
Dan Goodin
–
|
98
PSA: Patch your Plex media server before someone hacks it
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
Dan Goodin
–
|
61
OpenAI models hacked a crypto wallet and breached more websites
The actions could have resulted in criminal charges had humans been behind the keyboard.
Dan Goodin
–
|
165
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
Dan Goodin
–
|
123
Fridge hack costing millions and sparking fires stemmed from poor security
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
Dan Goodin
–
|
214
Anthropic warns small AI models could self-replicate through IoT devices
“Small weight-based replicators” could usher in a new generation of computer worms.
Dan Goodin
–
|
137
Let’s Encrypt cuts certificate lifetimes to 64 days starting February 2027
Free SSL/TLS certificate lifetimes reduce to 64 days in February.
Nick Indge
–
|
72
Hackers obtain counterfeit TLS certificates for Google and other large services
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
Dan Goodin
–
|
48
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
The reports of OpenAI agents harming third-party sites keep coming.
Dan Goodin
–
|
169
MCP for agent-to-agent comms may be the riskiest protocol you’ve never heard of
Trust gaps in the new protocol spread malicious prompts from one agent to another.
Dan Goodin
–
|
100
Apple changes full-disk access permissions to curb abuse from AI agents
Meta says FDA isn’t sufficient to Muse reading messages. Apple begs to differ.
Dan Goodin
–
|
245
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
It has been a bad month for federal government cybersecurity.
Dan Goodin
–
|
58
Attackers have been exploiting critical Zimbra flaw to steal emails
A simple email gives the attackers the ability to remotely inject OS commands.
Dan Goodin
–
|
6
Cloudflare plans to issue quantum-safe TLS certificates
The move will be part of a major overhaul of the ecosystem for website authentication.
Dan Goodin
–
|
20
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
Ads appearing all over the Internet are trying to scam people.
Dan Goodin
–
|
168
There’s a new way to break RSA that’s faster than anything we’ve seen before
Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.
Dan Goodin
–
|
89
FBI rushes to investigate if ShinyHunters hack of thousands of employees is real
It’s unclear what will happen if FBI misses ShinyHunters’ deadline.
Ashley Belanger
–
|
73
Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
Dan Goodin
–
|
10
Muse, Meta’s extraordinarily privileged AI assistant, has a serious 0-day
A simple ClickFix attack is only one way to completely hijack the new agent.
Dan Goodin
–
|
132
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
Google’s threat intelligence group said it had a mole inside TeamPCP’s inner circle.
WIRED
–
|
51
Researchers used Claude to hack OpenAI
Researchers used Claude to reach an OpenAI employee account and sensitive GitHub data.
Financial Times
–
|
106
LLMs respond differently to harmful prompts when AI watermarking is used
SynthID can cause models to follow harmful instructions they would otherwise refuse.
Dan Goodin
–
|
47
Hackers reveal how Flock cameras really track cars and people
One hacked camera captured 1.6 million images and could detect people as well as cars.
WIRED
–
|
134
Nonprofit that tracks meteors taken down by “critical blow” from a cyberattack
Group plans to be largely out of commission for several weeks.
Dan Goodin
–
|
62
ClickFix attacks infecting PCs and Macs are going viral
Simplicity—combined with the difficulty of getting stuff done—makes ClickFix ideal.
Dan Goodin
–
|
263
Four groups caught using the same Chrome and Windows exploit kit
A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.
Dan Goodin
–
|
23