SecurityPerfect-10 GitLab bug under attack days after patch lands
CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers
Sep 14, 20261 min
Security
401 articles
SecuritySecurity
A College Girl Was Exploited on Camera. A Network of Anonymous Men Got to Work
Maddie Kowalski is one of countless young women who’ve had their lives destroyed by the burnerverse, a loosely connected online community of sports fans. Now she’s fighting back.
Sep 14, 20263 min
SecurityUK.gov begins killing off passwords for 23 million users
Passkeys promise fewer phishing headaches – and £600 a day off Whitehall's SMS bill
Sep 14, 20262 min
Security
Astra and Fable still hack on simple variants of alignment evals from 2025
Article URL: https://www.lesswrong.com/posts/munJKF7iWMsWJLAH2/astra-and-fable-still-hack-on-simple-variants-of-alignment Comments URL: https://news.ycombinator.com/item?id=49684393 Points: 208 # Comments: 81
Sep 13, 20261 min
SecurityYour car is selling your data
This is The Stepback, a weekly newsletter breaking down one essential story from the tech world. For more on cars, data privacy, and autonomous vehicles, follow Andrew J. Hawkins. The Stepback arrives in our subscribers' inboxes at 8AM ET. Opt in for The Stepback here. How it started Earlier this year, the Federal Trade Commission […]
Sep 13, 20267 min
SecurityThe benefits of leaving your VPN on all the time
Using a VPN has plenty of benefits, but should you have yours enabled all the time? Think carefully about what yours is doing to decide.
Sep 12, 20262 min
SecurityLG denies accusations of smart TVs continuously recording its users
The company said that user privacy is a "fundamental principle" of its products.
Sep 12, 20262 min
SecurityIs a free VPN worth using? Here's why it could be risky
A free VPN might seem like a great deal, but they're not all created equal. While you can expect some compromises, you shouldn't use any old service.
Sep 12, 20266 min
Security
From Hacks to Bioweapons, Claude Misuse Is Now Everywhere
Plus: The US disrupts the internet’s biggest black market, a Conti ransomware hacker gets prison time, Meta fails to stop AI-generated videos of child abuse.
Sep 12, 20263 min
SecuritySerial Microsoft 0-day hunter drops yet another Defender exploit
A bypass of a bypass of a bypass
Sep 12, 20262 min
SecurityEU's Cyber Resilience Act starts the 24-hour vulnerability clock
Manufacturers must now disclose actively exploited flaws and severe security incidents through ENISA's new reporting platform
Sep 12, 20264 min
Security
A Stealth Startup Thinks It Just Hacked the Memory Shortage
Kepler Computing claims a new approach to chip design—and a proprietary material—can help end the supply bottlenecks that have sent memory prices surging.
Sep 12, 20262 min
SecurityUkrainian lawyer's second career as a Conti coder earns him 4 years behind bars
Swapping legal work for malware development ended in extradition and a guilty plea
Sep 12, 20262 min
Security9to5Mac Overtime 081: iPhone Duo thoughts and impressions
Jeff and Fernando discuss their initial thoughts and impressions of the iPhone Duo, Apple’s first foldable smartphone. Sponsored by Bitwarden: Register for the free, virtual Open Source Security Summit on September 17, featuring cybersecurity leaders David Sanger and Joseph Menn — and check out Bitwarden for trusted open source password, passkey, and secrets management, with end-to-end encryption and seamless autofill across all your devices. more…
Sep 11, 20261 min
SecurityScammers target hundreds of thousands of crypto owners after Trezor confirms data breach of email provider
This is the second data breach affecting a company that hardware crypto wallet maker Trezor relies on.
Sep 11, 20262 min
SecurityID verification giant IDScan confirms data breach with more than 150 million driver’s licenses stolen
The ID checking company said the data breach included people's full names and driver's licenses and other government-issued identity documents.
Sep 10, 20262 min
SecurityTrezor, BitBox users targeted in newsletter phishing spree
Attackers exploit legitimate mailing channels to demand crypto wallet backups
Sep 10, 20263 min
SecurityGroup of bipartisan lawmakers ask US government to ban several hack-for-hire firms
The three Indian companies are accused of using hackers to steal information used to sway litigation.
Sep 9, 20263 min
SecurityOpenAI's Artifactory opened covert data-stealing channel alongside Hugging Face attack
Researchers disclosed the cross-account trick the same day rogue agents exploited another zero-day for admin access
Sep 8, 20264 min
SecurityLG accused of 'egregious invasion of privacy' over TV data collection
Claims follow scrutiny over monitors installing adware without user consent
Sep 8, 20264 min