Live stream
Security Radio Listen to this section's headlines in an AI voice
Now:
Press play to start the stream
This browser does not support voice playback. Try Chrome, Edge or Safari.
Security
A tool started benign and turned sour after a little while, stealing tokens and granting persistent access.
June 1, 2026
· 1 min read
Security
If you're using Linux, make sure you patch up and disable unnecessary file sharing features.
June 1, 2026
· 1 min read
Security
Across the frontier labs, the highest prompt injection figures published this spring are Anthropic’s. Point a red-teamer at its newest model in a browser, and the attacker hijacked it 31.5%…
June 1, 2026
· 8 min read
Security
Presented by SnowflakeToo often, the history of enterprise security has been a history of making things harder to use. A new threat emerges, a new control gets bolted on, and…
June 1, 2026
· 6 min read
Security
In 2024, researchers from the University of Illinois found that GPT-4, when provided with a common vulnerabilities and exposures (CVE) description, could autonomously exploit 87% of a curated 15-vulnerability one-day…
May 31, 2026
· 8 min read
Security
Researcher reported the vuln in March. Maintainers haven't responded to his messages since
May 29, 2026
· 3 min read
Security
Threat actors are abusing ChatGPT's content-sharing feature to display fake OpenAI outage pages that direct users to download malware disguised as the ChatGPT desktop application. [...]
May 29, 2026
· 1 min read
Security
California Attorney General Rob Bonta filed a lawsuit against 23andMe, now Chrome Holding Co., over the company's failure to protect sensitive customer genetic and personal information. [...]
May 29, 2026
· 1 min read
Security
Dozens of fake FIFA sites are out there, stealing people's data and possibly even money.
May 29, 2026
· 1 min read
Security
The agency is giving practical advice on how to remain secure in an increasingly unsecure environment.
May 29, 2026
· 1 min read
Security
in late April, ShinyHunters claimed responsibility for the breach.
May 29, 2026
· 1 min read
Security
DDoS attacks are increasingly being sold like subscription services, complete with pricing tiers, support, and reseller programs. Flare explores how the DDoS-as-a-Service market has evolved from scattered tools into polished…
May 29, 2026
· 1 min read
Security
Dutch authorities have taken offline a massive botnet of 17 million devices and seized more than 200 servers at a local provider that supported the operation. [...]
May 29, 2026
· 1 min read
Security
The threat actor tricked tens of thousands of MAGA and QAnon community members into believing he was a USAF veteran.
May 29, 2026
· 1 min read
Security
Confidence is high, despite malware running rampant and businesses losing login credentials left and right.
May 29, 2026
· 1 min read
Security
Hosting provider pulled the plug after police traced 200 servers to the Netherlands
May 29, 2026
· 4 min read
Security
The European Commission is sending representatives to San Francisco to talk about using Mythos.
May 29, 2026
· 1 min read
Security
Google says the Chrome Device Bound Session Credentials (DBSC) security feature is now generally available and is rolling out to all users to prevent account takeovers. [...]
May 29, 2026
· 1 min read
Security
A North Carolina man was sentenced to more than 10 years in prison for selling the personal information of over 7 million elderly Americans to Jamaican scammers. [...]
May 29, 2026
· 1 min read
Security
A Google security engineer was charged with insider trading after winning $1.2 million using confidential company data to place bets on the cryptocurrency-based Polymarket decentralized prediction market. [...]
May 29, 2026
· 1 min read
Security
The ShinyHunters extortion gang stole personal information from 4.9 million accounts after hacking the U.S. telecom giant Charter Communications in early April, according to data breach notification service Have I…
May 29, 2026
· 1 min read
Security
A likely Russian threat cluster tracked as GreyVibe has been targeting Ukrainian entities with AI-generated lures and a rich set of custom malware tools. [...]
May 29, 2026
· 1 min read
Security
Lawmakers push DoD to tighten smartphone controls after adversaries exploited commercial tracking data
May 29, 2026
· 5 min read
Security
An Android remote access trojan named BTMOB is offered to cybercriminals with a builder interface for generating malware payloads tailored to phishing lures. [...]
May 29, 2026
· 1 min read
Security
Six 0-days, three under active exploitation, more to come on July 14?
May 28, 2026
· 7 min read
Security
Businesses are aware of AI-powered attacks, but their infrastructure can't keep up with the speed of change.
May 28, 2026
· 1 min read
Security
A new side-channel attack was discovered but exploiting it is not as easy as it sounds.
May 28, 2026
· 1 min read
Security
The FBI is warning of fake websites impersonating FIFA ahead of the 2026 World Cup, to steal personal and financial information, sell fake tickets and hospitality packages, and push other…
May 28, 2026
· 1 min read
Security
A new hacking campaign is trying to trick Signal users to give up their secret recovery key, which can be used to access online backups containing past messages.
May 28, 2026
· 1 min read
Security
Dell has been awarded a contract to supply Microsoft 365 software and other services for the Department of Defense, the intelligence community, and the US Coast Guard.
May 28, 2026
· 1 min read
Security
Pay Tel secured the publicly exposed data after security researchers discovered the leak containing callers' sensitive ID documents and inmate communications.
May 28, 2026
· 1 min read
Security
Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ. [...]
May 28, 2026
· 1 min read
Security
Kali365 is abusing legitimate Microsoft login mechanisms to hijack Outlook, Teams, and OneDrive services.
May 28, 2026
· 1 min read
Security
The UK wants to use AI to defend against Russia and China's "relentless attacks" on critical infrastructure.
May 28, 2026
· 1 min read
Security
An unpatched zero-day vulnerability in the Gogs self-hosted Git service can allow attackers to gain remote code execution (RCE) on Internet-facing instances. [...]
May 28, 2026
· 1 min read
Security
Numerous legitimate tools being used in RMM attacks against Brazilian targets.
May 28, 2026
· 1 min read
