TikTok has already faced several actions involving the privacy and security of children, who have always been one of the biggest demographic groups on the platform. A new FTC investigation has raised the issue again.
This is a password leak compilation largely built on massive breaches of the recent past. The 1.5 billion passwords added since the last RockYou edition appear to all be from breaches that took place from 2021 to 2024.
Google Threat Intelligence Group is now reporting "multiple intrusions" at US-based insurance firms by Scattered Spider, which in some cases has caused outages and business disruptions.
The Copilot vulnerability chain requires three steps, two of which are old-fashioned injections and request forgeries. But they are kicked off by using a P2P injection that convinces Copilot it is OK to serve up malicious links. The end result is that the AI assists with data theft from across the target’s Microsoft ecosystem.
Report finds that the vast majority of app developers are pushing vulnerable code, and that truly secure applications capable of repelling a determined attacker are few and far between.
Slack debuted its long-awaited direct messaging feature but within just a few days it was gone, pulled due to a technical oversight that created major security concerns.
Recent creative crypto scams illustrate some specific things that investors need to be prepared for. A scam involving Squid Game demonstrates how FOMO can catch investors, and a Google Ads scheme used phishing techniques to steal wallets.
Attacker exploiting new Intel chip vulnerability will need to go through multiple complex steps and have physical access to the device to gain full access to the system.
The sheer number of reports that cloud security teams deal with are becoming a serious problem, and "alert fatigue" is causing critical alerts to be missed at an alarming rate.
The wording of Google’s latest privacy policy update essentially declares that the entire internet is its domain to scrape for training its AI models and creation of its AI products, a position that is all but assured to generate legal challenges.
