Bank of America kindly asks that you don’t share your banking password with your AI assistant
The banking giant reminds customers that “you’re responsible for activity” resulting from your AI agents’ access.
US government says hackers are now exploiting critical PHP web bugs
The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web’s software.
Japan internet giant GMO says hackers posted stolen customer data
Japan’s GMO Internet is verifying alleged customer data posted by suspected hackers following a cloud service breach.
UK Politician Jess Asato Got Deepfaked. Now She’s Taking xAI to Court
Jess Asato’s public campaigning for victims of online abuse put her in the crosshairs of Grok’s deepfake scandal. Then the UK member of parliament became a victim of the abuse…
The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans
Two US senators say the Trump administration is breaking the law by withholding the FISA court decision while it presses Congress to renew America’s most sweeping surveillance program.
Will AI expose the rickety infrastructure of the internet?
The moment you realize the internet is “held together by glue and dreams.”
PHP-ocalypse: How two critical web bugs almost broke the internet
Two critical bugs in the PHP web programming language, used by the majority of the internet, threatened to upend the internet — and it’s unlikely to be the last major…
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.
Abandoned Popcorn Time apps had to be disabled to prevent a zombie army
Remember Popcorn Time, the app that served as an easy-to-use front end for streaming torrents of movies and TV shows? Development of the MPAA’s least-favorite app of the 2010s has…
Knicks sent employees fake offer of championship rings in phishing test: Report
The New York Knicks organization sent employees a phishing email promising free championship rings in a test of its staff’s ability to detect scams, The New York Times reported yesterday.…
Lab testing giant Quest Diagnostics confirms patients’ personal and health data was compromised during breach
Quest is the latest in a series of healthcare technology companies that have been hacked in recent months.
Disgraced eMudhra drops out of TLS business after using cert private key of 4
eMudhra, the certificate authority that issued eight intermediate TLS credentials so weak that anyone could mint certificates for any website or mail server—one had a private encryption key of just…
Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
Microsoft points the blame for ConnectWise’s breach at a China-aligned hacker, which relied on AI agents to rapidly hack into thousands of its customers.
Hackers got a four-day head start on epic PHP2Shell vulnerability
Amazon has warned that vulnerabilities in a programming language that underpins much of the Internet, discovered using AI tools, are being “broadly exploited” as governments and companies rush to secure…
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
Unknown hackers hijacked more than 300 Tor exit nodes and reconfigured them to favor unencrypted email traffic and redirect SSH connections through servers they controlled, a researcher reported Tuesday. The…