5+ day, 8+ hour ago   (354+ words) CISA, the NSA, and the FBI warn that several China-based artificial intelligence companies have run industrial-scale campaigns to extract proprietary capabilities from leading US AI models. The agencies say the activity, underway since at least late 2024, involved billions of tokens…...

6+ day, 5+ hour ago   (244+ words) Cybercriminals and state-backed hackers are moving beyond using AI as a coding or research assistant and are instead building agentic systems that can autonomously scan targets, troubleshoot failures, and harvest credentials. Google Threat Intelligence Group (GTIG) says one financially motivated…...

1+ week, 3+ hour ago   (499+ words) The Gamers Nexus investigation also found extensive advertising and viewing telemetry tied to LG’s automatic content recognition (ACR) systems. Separately, security researchers demonstrated vulnerabilities that could allow compromised TVs to be abused as listening devices. For the investigation, Gamers Nexus…...

1+ week, 5+ hour ago   (399+ words) Security researchers have demonstrated a new electromagnetic attack that can recover audio playing through ordinary wired and wireless headphones, with intelligible speech captured from as far as 30 meters away. The technique, called InjectEave, can also operate through walls and expose…...

1+ week, 5+ day ago   (453+ words) The FBI is investigating an apparent breach involving identity verification provider IDScan after a dark web service began selling access to more than 153 million US and Canadian driver’s license scans, according to an exclusive KrebsOnSecurity report. The marketplace, called Nexus,…...

1+ week, 5+ day ago   (482+ words) Socket’s Threat Research Team uncovered the packages on Packagist, where they were disguised as themes for OphimCMS and KKPhim, two Laravel-based content management systems used by Vietnamese movie and comic streaming websites. The malicious themes were published across five Packagist…...

2+ week, 5+ hour ago   (511+ words) GrapheneOS says it may abandon support for Google’s Pixel 11 series after discovering that the new devices appear to lack usable support for ARM Memory Tagging Extension (MTE). MTE is a hardware security feature the privacy-focused Android project relies on extensively…...

2+ week, 5+ hour ago   (446+ words) California lawmakers have passed AB 1856, a bill that would exclude qualifying open-source software distributors from being treated as operating system providers under the state’s upcoming Digital Age Assurance Act (DAAA). The measure passed the Senate 39–0 on August 26, and the Assembly…...

2+ week, 5+ day ago   (361+ words) Malicious websites impersonating Rockstar Games are exploiting interest in Grand Theft Auto VI leaks and an upcoming official preview to distribute the Vidar information stealer. The campaign uses fake “Play Now” and “Official Download” prompts that deliver a 1.1 MB executable…...