(Security) hole-ier than thou

Attack models gonna attack

Gatekeeper has one job and it's not doing it for some software

Phishing for dummies

Aftermarket dealer-installed KARR/SWDS security systems all use the same secure key, say UCSD researchers

Experts say the era of AI bug hunting is here, so defenders will simply have to adapt to busier workloads

CISA widens alert beyond Rockwell controllers as intruders target internet- facing devices across critical infrastructure

Researchers say OpenAI flaw let phishing bait create an autonomous corporate mole armed with employee access

Stadler refuses $12.3M demand after thieves swipe technical data through supplier platform

Who needs a working security badge when you know how to talk your way into the records room?

Closed models with guardrails can still cause harm, but may also not be able to fix problems they caused

Closed models with guardrails can still cause harm, but may also not be able to fix problems they caused

Sunday-to-Monday onslaught fuels speculation over AI-assisted bug reports

Move over Flipper. There's a new Dophin X in town

Some never saw their files again either, infosec biz Proofpoint finds

Herefordshire employee handed suspended sentence for breach of Computer Misuse Act

Sandboxed experiment found itself a zero day, escaped onto the open internet and validated scary predictions about rogue agents

Don't call them chatbots

Trust but verify doesn't work when verification is difficult

Alleged developer arrested in Indonesia after more than 200 servers slain

Have I Been Pwned confirms scale for first time

Firewall maker looks to safeguard its custom ASIC production with homegrown silicon

French cloud backported a patch into Debian and didnt seek customer consent, despite chance of downtime

Plus dozens of PoCs in the public domain

IC3 says any account claiming to represent it is fake

Datacenters tax utilities normally, so just imagine what they could do if workloads were designed to destroy

Chinese open-weight model GLM 5.2 happily obliged

Malware hides commands in appointments set for 2050 and uses Redmond's own cloud to phone home

Connect all the things and watch what happens

Turns out decades-old email tricks still work against some LLM-powered email filters

Command injection vulns land on exploited list after researchers spot abuse attempts

A specific multi-touch gesture bypasses an authentication prompt, allowing anyone to send messages

Adapting existing local LLM project for security and sovereignty purposes and hopes to one day match Mythos

Data purges deemed an example of 'misaligned behavior' that upstart is working to avoid

Models demand trust without offering verification

Newly documented stealer ClickLock comes for the more trusting Mac user with spot of social engineering

Sentencing bookends the biggest cybercrime conviction in UK history

One in six machines still run the old OS as migration stalls and patch deadlines creep closer

t.me borked for a day until platform proved it had no ties to service favored by cybercriminals

Using the admin password, you could be anyone and see anything