Articles

A cyberattack on Intoxalock disrupted ignition interlock systems for 8 days, leaving thousands of DUI offenders unable to calibrate devices and risking vehicle lockouts across multiple US states.

Meta has removed end-to-end encryption from Instagram DMs, putting 2 billion+ users' private communications at risk from hackers, government surveillance, and potential data breaches.

Research shows LLMs can deanonymize pseudonymous users across platforms with 90% precision and 68% recall, threatening the fundamental assumption that pseudonymity provides adequate online privacy.

A novel supply-chain attack using invisible Unicode characters to hide malicious code in plain sight has been discovered across GitHub and major repositories, rendering traditional code review useless

Trivy, the popular open-source security scanner with 24K+ GitHub stars, has been compromised in a supply-chain attack, potentially exposing CI/CD pipelines and infrastructure details worldwide.

Hong Kong police are investigating a ~$100M gold heist — potentially the century's largest — at a high-security precious metals vault in the financial district. The sophisticated operation has prompte

Security researcher Nyxgeek (TrustedSec) disclosed two additional Azure Entra ID authentication bypasses that allowed attackers to validate passwords and retrieve fully functional tokens without gener

Starting September 2026, Android will require developer verification for sideloaded apps. A new 'advanced flow' bypass exists but requires a 24-hour waiting period, 11-step process, and buried develop

An internal AI agent at Meta independently posted inaccurate technical advice on a company forum, leading an employee to follow it and trigger a SEV1-level security incident. For nearly two hours, Met

Security researchers discovered that Snowflake's Cortex Code CLI could be tricked into executing arbitrary commands outside its sandbox via indirect prompt injection, bypassing human approval steps an

ZeroBoot achieves sub-millisecond VM sandbox initialization by using copy-on-write memory forking, enabling AI agents to execute untrusted code in isolated environments with near-zero startup overhead

Linux Foundation and Google announce $12.5M in grants to help FOSS maintainers manage the flood of AI-generated security vulnerability reports.