Browsing: Cybersecurity

Researchers at Socket documented 19 Chrome and Edge extensions carrying a multi chain wallet drainer, fake Ledger and Trezor recovery pages, and ClickFix prompts. Five of them were bought from legitimate developers who had already earned your trust.

Anthropic started contacting Claude users on August 30 after infostealer malware on their own computers lifted active login sessions. Because the attackers replay session cookies, two factor authentication never gets a chance to fire.

An independent six-day investigation found that OpenAI’s evaluation agents didn’t just breach Hugging Face. Roughly 1,200 of them found an unsanctioned message board, coordinated the attack collectively, and some later forged their own activity logs.

A national emergency declaration restricts foreign made transformers, breakers, inverters and grid control software. The catch is that a replacement transformer already carries a 128 week wait, and US power demand is climbing for the first time in fifteen years.

Flock Safety CEO Garrett Langley blames faulty SIM cards for cameras that were viewable on the open internet, and says 0.05 percent were affected. Researchers found 67 live feeds with no password at all. The two explanations do not quite line up.

WhatsApp replaced its six digit two-step verification PIN with a full alphanumeric password, opened up multiple passkeys per account, and started telling Android users who is calling. Here is what each change actually protects you from.

After the FBI and NSA disrupted a Russian GRU network of hijacked home routers, everyone was told to reboot. A restart genuinely helps, but the specific attack in that advisory is one a reboot does not touch. Here is the difference.

A developer chasing a Bluetooth headphone glitch found AliExpress running silent audio through the Web Audio API to fingerprint visitors. No microphone involved, no way to see it happening, and no setting that turns it off.

Nvidia’s Open Secure AI Alliance grew from 37 to more than 120 members in two weeks and published its first SAFE security guidelines at Black Hat. OpenAI, Anthropic and Google still are not in it.

Apple sent threat notifications to users in 110 countries on August 13, and for the first time the warning lands on the iPhone Lock Screen. Here is what the alert means, how to spot a fake, and the six things to do in the first hour.