SECURITY Developer spotted hostname and credential string lurking in autocomplete PWNED Welcome, once again, to PWNED, the weekly column where we highlight others’ security failures.

security Attackers could extract data, even working from inside a guest VM Researchers from Germany’s Helmholtz Center for Information Security have found processors made by

Suspected Chinese cyber operatives used publicly available AI tools to compromise Taiwanese government systems before expanding the attack to its nuclear safety agency, supply-chain vendors,

security Eight years on, we’re still paying to hide the future glimpsed during speculative execution If you thought that the famous Spectre security vulns were

Security Helix claims nearly a million files, while the logistics biz says operations never hit the brakes Uber Freight says it is investigating a “data

The UK’s criminal records office, ACRO, has escaped a fine and received a regulatory reprimand after security failings potentially exposed highly sensitive data belonging to

Business Security AI took center stage, but the clearest lesson was less about what AI can do than about who is accountable when something goes

Security Gives a whole new meaning to Safe Mode An Akira ransomware affiliate rebooted a victim’s computer into Safe Mode to kill its security tools

For over two decades, the NIST National Vulnerability Database (NVD) has served as the U.S. government repository for standards-based vulnerability management data and as a

SECURITY Victoria is the first stop as privacy campaigners warn the technology is becoming routine British Transport Police is expanding its trial of live facial

security One big caveat, though: You need your contact’s phone number Signal has introduced a new layer of security to help make sure no one

This is an epic month for Microsoft patches, though not a record-setting one. Redmond addressed 421 bugs in its own products this month – about

security This is why we can’t have nice things, people A passenger on a Delta Air Lines flight from Las Vegas to Atlanta after DEF

Security Ukraine, Iran, and football inspire geopolitically motivated DDoS attacks, while 1 Tbps traffic jams up 519 percent Ongoing wars in Ukraine and Iran and

Security Face-swap software blinked for ‘barely a second,’ giving Spanish cops the break they needed Spain’s national police say they caught a cybercriminal after a

SECURITY Audit logs found no unexpected visitors, but release verification still needs an update Mozilla has revoked a cryptographic key used to sign Firefox and

security Researchers find standards-compliant functionality can be abused to hijack modems, downgrade connections, and even execute code Researchers have found that a malicious SIM card

Security Franklin project adds new security providers, employs digital twins and AI DEF CON hackers expanded their efforts to provide free cyber-defenses to rural water