Software should work, and talking about it needn't be boring
Bingeing the boxed set of binary bafflement
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-10147 that's targeting Windows and Linux web servers globally across the educatio…
Anthropic Expands Mythos 5 Access to More Defenders, Unveils $35M Open Source Fund
Claude Security, currently in public beta for Claude Enterprise customers, now runs codebase scans on Mythos 5. The post Anthropic Expands Mythos 5 Access to More Defenders, Unveil…
China calls off ambitious ice-hunting moonshot a day before flight
Chang'e 7 didn’t meet unspecified ‘launch requirements’
Batch file automated a clean-up job, then fouled itself by deleting the wrong directory
It survived testing and the boss signed off, so who was really to blame?
AI-driven upgrade of communications energy storage empowers a new energy ecosystem for multiple industries
SPONSORED FEATURE: Embedding AI at communication sites to empower energy optimization, power grid stability control and low-carbon development
Ancient ‘Who owns Linux?’ case now has one foot very deep in the grave
Appeals court upholds decision the case is dead, but Xinuos is trying for a long-shot re-hearing
ToxicPanda Android malware uses VPN permissions to block Google Play
The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support for 167 remote commands. [...]
How Cursor beat Git's scalability shortcomings
S3 keeps the source of truth while local NVMe repositories do the latency-sensitive work
An ultra-rare piece of Microsoft history could be hiding on your shelf
Red Tetris stickers and shirtless Windows 95 tots - accidental collectibles gathering dust
If you're not using AI to attack your own systems, your adversaries will
Agents are also the new attack surface - cue defenders' existential angst
TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit
The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit accusing the company of violating child privacy …
Hackers infect Android car head units with proxy botnet malware
A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses th…
AI slop is good for business if you know what you're doing
Your irresponsibility is someone else's opportunity
Named Pipes Under Attack: Securing Windows Interprocess Communication
Windows named pipes provide fast interprocess communication, but weak access controls can expose privileged services to untrusted processes. ThreatLocker explains how endpoint veri…
Skylab completists, clear some shelf space for 26 DVDs
Decades of archive hunting recover downlinks, silent reels, and footage once thought lost
Casio decides it's about time the simple digital watch got a little smarter
F-B100W adds Bluetooth and step tracking while keeping a two-year battery
Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight
The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware. The post Banking Trojans Manic, Grandoreiro, Toxi…
AWS Security makes an inscrutable choice
Quarantining leaked credentials is not good enough
Cloverleaf deal is latest example of Nvidia using its war chest to patch cracks in the AI bubble
Nv's new chips need new datacenters, but you can't have bit barns without power
Friday Squid Blogging: Neon Flying Squid
The neon flying squid can fly in formation. The shoal of about 100 squid rose unexpectedly from a patch of the Pacific Ocean around 370 miles from Tokyo and glided near the boat fo…
How an Emerging Industrial Protocol Family Could Put OT at Risk
New research shows how attacks against some unprotected TSN protocols could allow attackers to disrupt or manipulate physical processes.
AI companies are burning books, advocates complain to FTC
Fahrenheit 203, the temperature GPUs stop gorging on literature
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an arti…
New SynkLoader malware pushed in Microsoft Teams phishing campaign
A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a fake lock screen. [...]
OWASP Flags Top AI Skill Risks in New Security Blueprint
The Open Worldwide Application Security Project has a brand-new top 10 security list tailored for the modern era, and it debuts a Universal Skill Format to add consistency and secu…
AI Is Learning to Write Genetic Code
This sort of research is both exciting and terrifying: The two models in question were told to generate complete genomes for a viable bacteriophage—a type of virus able to infect a…
Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it
Ukrainian hacktivists exploiting the bugs, but TrueConf's reach stretches well beyond home turf
Former NSA Director Paul Nakasone Launches National Security Advisory Firm
The newly-formed Nakasone Group will counsel government leaders, corporations, prominent families, and other private clients confronting cybersecurity, geopolitical, and personal s…