4+ day, 1+ hour ago   (378+ words) Skullcandy Dime 3 wireless earbuds have a Bluetooth vulnerability that lets a nearby attacker pair with the device without putting it into pairing mode or getting the owner's approval. Successful exploitation can let an attacker disrupt audio playback and potentially capture…...

6+ day, 2+ hour ago   (399+ words) Security researchers have demonstrated a new electromagnetic attack that can recover audio playing through ordinary wired and wireless headphones, with intelligible speech captured from as far as 30 meters away. The technique, called InjectEave, can also operate through walls and expose…...

1+ week, 4+ day ago   (453+ words) The FBI is investigating an apparent breach involving identity verification provider IDScan after a dark web service began selling access to more than 153 million US and Canadian driver’s license scans, according to an exclusive KrebsOnSecurity report. The marketplace, called Nexus,…...

1+ week, 6+ day ago   (511+ words) GrapheneOS says it may abandon support for Google’s Pixel 11 series after discovering that the new devices appear to lack usable support for ARM Memory Tagging Extension (MTE). MTE is a hardware security feature the privacy-focused Android project relies on extensively…...

1+ week, 6+ day ago   (446+ words) California lawmakers have passed AB 1856, a bill that would exclude qualifying open-source software distributors from being treated as operating system providers under the state’s upcoming Digital Age Assurance Act (DAAA). The measure passed the Senate 39–0 on August 26, and the Assembly…...

2+ week, 4+ day ago   (361+ words) Malicious websites impersonating Rockstar Games are exploiting interest in Grand Theft Auto VI leaks and an upcoming official preview to distribute the Vidar information stealer. The campaign uses fake “Play Now” and “Official Download” prompts that deliver a 1.1 MB executable…...

2+ week, 5+ day ago   (400+ words) WhatsApp is rolling out support for multiple passkeys, stronger two-step verification passwords, and additional information for calls from unknown numbers. The changes, announced today, are intended to make account authentication harder to compromise while giving users more context before answering…...

3+ week, 4+ day ago   (436+ words) Microsoft Defender users are reporting widespread scan failures after a recent security intelligence update, with Quick and Full scans crashing the antivirus engine and Offline scans reportedly freezing near completion. Reports from system administrators, home users, and Microsoft's support forum…...