Microsoft Copilot reveals secret input that allowed it to be hacked
Secret parameter allowed hackers to steal passwords when a target clicked on a link.
Dan Goodin
–
|
92
Security
Vulnerability giving attackers full control of Macs is under active exploitation
Screen-sharing bug lets remote hackers log in without a password.
Dan Goodin
–
|
102
Private security firms will soon be allowed to hack overseas cybercriminals
Trump memo is first time gov’t has authorized private sector to perform cyberattacks.
Dan Goodin
–
|
86
Terabytes of credentials leaked in massive supply-chain attack
The data was scraped and exfiltrated from 2,500 users of a compromised AI package.
Dan Goodin
–
|
89
Researchers found a way to hijack devices through Zoom screen sharing
A public AI tool found the dangerous Zoom flaw in under 20 prompts.
WIRED
–
|
32
DEF CON crowd suspected in fake-hotspot attack on Delta flight
FBI Atlanta confirms it’s looking into the incident, no arrests made.
Cyrus Farivar
–
|
136
Chrome adopts what may be the best protection yet against account takeovers
Device-bound session credentials thwart an increasingly common form of account takeover.
Dan Goodin
–
|
50
New surveillance tech links your phone to your license plate
Phone and Bluetooth signals could turn roadside cameras into far richer tracking tools.
Nicole M. Bennett, The Conversation
–
|
181
Most Read
New Pass-ta-key attack reveals all the things we didn’t know about passkeys
Why passkey apps treat Windows differently than other operating systems.
Dan Goodin
–
|
263
A researcher bought noreply.net. Companies started sending him secrets.
Companies treat some email domains as digital trash cans, despite the risks.
WIRED
–
|
88
Thousands of servers can be backdoored by exploiting buggy motherboard controllers
Baseboard management controllers from the world’s biggest manufacturers are a security mess.
Dan Goodin
–
|
54
Anthropic’s AI used fake identities, malware in rogue attack on GitHub project
Anthropic and OpenAI models’ unprompted actions forced halt to UK cyber tests.
Jeremy Hsu
–
|
120
Defcon’s new badge is a security key you can see inside
A removable chip lets hackers inspect their badge—and keep using it after Defcon.
WIRED
–
|
39