News
-
Pegasus Found on Belgrade University Rector's iPhone Days Before Election
Citizen Lab confirmed that rector Vladan Đokić's phone was infected with Pegasus spyware. The finding surfaced just ahead of Serbia's snap parliamentary vote.
-
DHS bars DeepSeek products from US federal civilian agencies
The U.S. Department of Homeland Security has ordered federal civilian agencies to stop using Chinese firm DeepSeek's products and remove them from government systems.
-
Google Cloud Outage Knocks Banks and Equifax Offline
A disruption in Google's cloud infrastructure temporarily took down the online services of several major UK banks and the credit bureau Equifax.
-
Cellebrite Advanced Unlocks: an iPhone break-in "over the air" from up to 8 meters?
A leaked confidential Cellebrite document describes a new product called Advanced Unlocks that, by its own description, does not appear to need a cable connection to the target device.
-
DeepSeek open-sources its inference engine DeepInfer
The company has released DeepInfer, the framework behind its production services, under Apache 2.0. It targets NVIDIA GPUs and Huawei Ascend NPUs.
-
Hijacked account: five OVHcloud CLI releases swapped for secret-stealing malware
An attacker used a hijacked contributor account to replace the archives in five releases of OVHcloud's command-line tool. The malicious build stole secrets from disk and was live on GitHub for just 94 minutes.
-
Blackwall raises $100M at a $2.2B valuation as bots and AI agents crowd the web
The Estonian firm that filters web traffic for hosting providers has quadrupled its valuation in a year, betting on managing the surge of bots and AI agents.
-
ClickFix Attack Abuses Siemens Software Center Flaw to Drop a Remote Access Trojan
Siemens has patched a DLL sideloading flaw in Siemens Software Center that attackers already exploited, using the legitimately signed program as a carrier for malicious code.
-
Ex-OpenAI Engineer Held in Custody as Saudi Royal Contacts Surface in Spy-Device Case
A U.S. court approved prosecutors' request to detain a former OpenAI engineer accused of planting a hidden recorder in an executive conference room. New filings reveal his WhatsApp contacts with a member of the Saudi royal family.
-
ROMULUS Platform Turns ClickFix Into a Malware Delivery Pipeline
Forescout has detailed ROMULUS, a malware delivery service that uses ClickFix lures on fake landing pages to make victims run malicious commands themselves.
-
Go to reject certificate chains containing eight distrusted public keys
A patch landing in the go1.27 branch makes crypto/x509 throw away any chain that contains one of eight blacklisted public keys.
-
France's supermarket fridges sat exposed online for months
On the night of October 12, attackers pushed the refrigeration systems of hundreds of French supermarkets into defrost mode. IPinfo went through its weekly Internet scans and found France had more of these control panels exposed than the rest of the world combined.
-
An Obituary for Programming: What AI Agents Take Away
Simon Willison highlights Jeremy Scheff's note on how coding AI agents strip programmers of what they prized most — the joy of solving puzzles.
-
Lula Supporters Protest Against Meta Over Alleged 'Electoral Interference'
Supporters of Brazil's President Lula staged a demonstration against Meta, accusing the company of interfering in the electoral process.
-
OpenBSD 8.0: the 61st release of the security-focused BSD
Theo de Raadt has announced OpenBSD 8.0, the 61st stable release of the free, multi-platform 4.4BSD-based UNIX-like system. Highlights include faster swap encryption and a much larger kernel address space.
-
CoreWeave's debt is becoming the whole AI industry's problem
CoreWeave's bonds slid into distressed territory and its shares fell more than 20 percent, with the anxiety around the AI boom's poster-child debtor spilling over onto other companies.
-
The Netherlands is building its own Linux-based OS to break free from Microsoft
The Netherlands is reportedly developing its own Linux-based operating system in an effort to reduce its reliance on Microsoft products.
-
Nikkei discloses third breach in a month, exposing 1.8M records
Japanese media group Nikkei has reported a new incident — its third in about a month. Some 1.83 million personal data records were put at risk.
-
MiniMax Launches M3.1 Flash: an Agent Model Three Times Faster and 70% Cheaper
China's MiniMax has unveiled M3.1 Flash, a new "Flash" model aimed at agentic tasks, coding and cybersecurity. The company promises roughly threefold faster inference and a 70% cost cut versus its predecessor.
-
Amazon takes aim at Nvidia with TorchNeuron, loosening PyTorch's grip on GPUs
AWS has released TorchNeuron, a tool that moves PyTorch apps onto Amazon's own Trainium chips with a single line of configuration. The company also plans to make the popular framework less dependent on Nvidia's hardware.
- More