“There’s a lot to be worried about,” the project lead said.

The rise of open source self-driving systems like openpilot have made it easy for anyone to run custom tech to control your car.

Security researchers have demonstrated a faster way to undermine certain RSA deployments without factoring the public modulus, challenging the assumption that RSA’s practical strength always tracks th...

YouTube video by The Nerd Reich with Gil Duran

An online movement say that the sensors on traffic lights can cause heart attacks, brain cancer, anxiety and even sudden death

OpenAI claims to have solved one of the 'Millennium' challenges

An investigation by Gamers Nexus found LG smart TVs sweep local networks to map phones and nearby devices. Tests also showed the sets can capture microphone audio with the screen off — they then uploa...

Forget about an AI utopia of effortless abundance. Get ready for the messy, unintended consequences foreseen by science fiction’s arch-realist.

From the very beginning of this recent obsession with identifying everyone online (yes, they like to call it "age" verification, but it always ends up as identity verification), we've been pointing out that it was a huge privacy nightmare waiting to happen. Or maybe it wasn't waiting. Maybe it was already happening. This week a...

Visit the post for more.

The surveillance seems aimed at the domestic market, but it knocks huge holes in the security of the devices it's found in.

Orion is an AI security framework, inspired by The Art of War, for red and blue teams. It uncovers and mitigates model vulnerabilities with adversarial ML, maps risks to MITRE ATLAS, and offers a F...

A full reverse-engineering teardown of the CrowdStrike Falcon sensor: the six kernel callback sources, the WFP network engine, the file-system minifilter, the cspcm4 broker, the user-mode service…

The Chaos ransomware group uses new malware "msaRAT" that hijacks browsers. The malware doesn't communicate directly with C2 but connects through the browser. It enables arbitrary command execution…

Although it presents itself as a Spanish company, Passwork was actually developed in Russia and operates with a license from Russia's FSB domestic intelligence agency. The situation raises major secur...

While analyzing an AI dataset, a group of researchers discovered a user who spent months cranking out outrage AI fetish content.

Russian cybercriminals managed to hack into a Quebec municipality's water treatment plant systems.

The leaders of the House Energy and Commerce Committee will unveil a bipartisan deal Monday on guardrails for protecting kids against online harms.

A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if hand...

Yes, protection still matters. But if you can’t survive the breach, was the wall ever a viable security strategy?

By the authority vested in me as President by the Constitution and the laws of the United States of America, it is hereby ordered: Section 1.  Background

Companies over-relying on AI could be suffering from knowledge decay and a growing "workslop" problem.

Alt: Skeptical Fry from Futurama

Not saying this boat's shady. Just saying it ticks a lot of weird boxes. Sketchiness score inside.

A proposed FCC rule would kill burner phones: phones whose accounts are not attached to a particular person. The FCC plans to do this by legally forcing the country’s telecoms to store a wealth of personal information about essentially all phone customers, including a government issued identification number and their physical address, alarming privacy advocates and civil rights activists who compare the measures to those from authoritarian countries where it can be difficult to buy a mobile phone plan without giving up your identity. The proposed change would drastically shake up how people obtain phone plans in the U.S., and have all sorts of privacy and cybersecurity knock-on effects. The FCC is proposing the data collection partly as a way to combat scammers, with telecoms being required to collect other information on business and foreign customers like the intended use case of their bulk phone plan purchase and their IP address. But the changes would mean telecoms collect data on all new and renewing customers, and the FCC provides a long list of other things that the collected data could help authorities with...

A Searchable Database of Community Notes on X