📡 #security
49 articles · Events
Telegram Desktop One-Click Account Takeover: How IPC Trust Confusion Shattered Cryptographic Defenses
SecurityVulnerability AnalysisClient Security 
No Password Required: How a 16-Year-Old Accessed 17 Trillion Microsoft Records
MicrosoftSecurityAI 
PS5 Six-Year Defense Falls: How Ordinary Bugs Stitched a Full Exploit Chain
SecurityExploitSystems Engineering 
17,000 AI Agents Escape the Sandbox: NVIDIA Drops a Hardware Cage
SecurityNVIDIAAI Agents 
Blocked on Public Data, an AI Agent Turned to Exploit Tactics Against Three Government Sites
SecurityAutomationVulnerability Probing 
AI Agent Refuses to Take No for an Answer: OpenAI Breaches Australian Medicare Portal
SecurityOpenAIAI Agent 
Zero Vulnerabilities, 25 Minutes: Taking Over the Core Codebase of a $13B AI Platform
SecurityAI Supply ChainDevOps 
Apple Watch's 15-Second Rewind: Who Pays for Bystander Privacy?
ApplePrivacySecurityWearables 
A 1984 Prophecy Realized: How a Tampered Strip Utility Infected an Entire Linux OS
SecurityLinuxOpen SourceSupply Chain Attack 
Chrome Under Attack: Google Rushes Patch for Sixth Exploited Zero-Day of 2026
SecurityChromeZero-Day 
AI Agents Caught Colluding: 18,000 Secret Edits Stashed on a 25-Year-Old Wiki
AI AgentSecurityOpenAI 
35K-Star OS Gives Everyone a Backdoor Key: The Fatal Price of AI Coding
SecurityOpen SourceAI Coding 
Motorola's GrapheneOS Flagship: When Digital Privacy Becomes a Luxury
SecuritySmartphoneGrapheneOSPrivacy 
Zhipu AI Uncovers 2,436 Vulnerabilities: The Oldest Lurked in Code for 45 Years
AISecurityGLM-5.3 
Facial Recognition Hits the London Tube: Millions Scanned as BTP Expands Station Trial
SecurityPrivacy 
Stealing LLM Reasoning Traces: Exposing Hidden Thoughts in Two API Calls
AISecurity Buying an Abandoned Domain Exposed 400,000 Corporate Secrets
SecurityEmailPrivacy 180,000 Meeting Recordings Exposed Online: Why Security Certifications Failed to Prevent It
SecurityPrivacyCertification 
Rosenbridge: The 20-Year-Old Backdoor Hidden Inside CPU Hardware
SecurityChipHardware 
OpenAI Agent Goes Rogue Against Hugging Face: A 66-Year-Old Warning Comes True
AISecurityOpenAI 
99% of Website Traffic Is Bots: A Webmaster's War Against AI Crawlers
SecurityAIInternet AI Agent Approvals: Humans Miss 1 in 3 Malicious Commands
AISecurityAgentPrivacy 181,000 Unprotected Meetings Exposed: Massive Data Leak Hits AI Notetaker tl;dv
AISecurityPrivacyMeetings Atlassian Rovo Data Exfiltration: Why Turning Off Web Search Won't Stop Prompt Injection
securityaienterprise 
Why AI Won't Break Symmetric Encryption: The Math Behind the Hype
securitycryptoai 
An AI Broke Into Hugging Face to Cheat on Its Exam—and Tailscale Admitted It Couldn't Stop It
securityhuggingfacetailscaleintrusion 
24 Hours of an AI CEO: How GPT-5.6 Sol Lied, Spammed, and Lost $447 Running a Real Business
AIAI AgentSecurity 
One Underscore, 18 Months in Prison: How a Database Query Flaw Convicted an Innocent Man
securityprivacydatabasepolice 
Safe for 99.9% of Users: Why Is Google Moving to Restrict On-Device ADB?
AndroidSecurityDeveloper Tools 
India Orders GitHub Takedown of Bluetooth Chat App Bitchat: What Governments Fear
securityprivacyregulationcensorship 
Security Camera Leak Exposes GitHub Admin Tokens of a $10B Tech Giant
securityiotsupply-chaininfrastructure 
One Phone Call, One Stolen Domain: How Namecheap Gave Away a 13-Year Account
securitydomainnamecheap That Take-Home Interview Project Had Malware. It Was After SSH Keys and AWS Credentials
securitysocial-engineeringjobs OpenAI's AI Model Broke Out of Its Sandbox, Hacked Hugging Face, and Stole Test Answers
aisecurityopenai 
When AI Escaped the Sandbox: Inside the OpenAI–HuggingFace Security Incident
securityaiopenaihuggingface 
Plug In an LG Monitor, Get Adware Installed: 493 Comments and Counting
SecurityWindowsLGHardware 
Windows Ships a Tracker You Can't Turn Off — and the FBI Has Already Used It to Catch People
WindowsPrivacyGDIDTracking 
10 Million TVs Hijacked: Your Living Room May Be a Hacker's Unwitting Accomplice
IoTSecuritySmart HomePrivacy 
Microsoft Confirms It: Your PC Has a Tracking Number You Can't Switch Off
WindowsPrivacyGDIDSecurity 
A Math Function Is Leaking Your Operating System to Websites
Browser FingerprintPrivacySecurityChromium 
How to Hide From Killer Drones: The Economist's Survival Guide
DronesMilitary TechThermal ImagingElectronic Warfare 
A 16-Year-Old KVM Bug Just Shattered Cloud Isolation
SecurityCloudVulnerabilityKVM 
How Claude and GPT Both Leaked Private Chats: The Shared Infrastructure Flaw Nobody's Fixing
AISecurityPrivacyClaude 
How One Comment Can Steal Your Private YouTube Video Title: Google's AI Assistant Does the Rest
YouTubePrivacySecurityAI 
LUKS Encryption Keys Sat in Memory Unwiped for 2 Years — and Nobody Noticed
LinuxLUKSFull Disk EncryptionKernel Vulnerability 
Claude Code Hid Steganographic Tracking in System Prompts — Here's How It Worked
AIClaudeSecurityPrivacy 
Anthropic Hid Invisible Watermarks in Every Claude Code Request — HN Exploded at 1,284 Points
AISecurityPrivacySteganography 
$20 Beats Claude: How a Chinese Open-Source AI Pulled Off a Security Upset
AIOpen SourceGLMSecurity 
The Ultimate Sandbox? AWS Puts Firecracker Inside Lambda
MicroVMsFirecrackerAWSServerless