Security

Are These Microsoft packages Safe? What to Know
Dozens of Microsoft packages were laced with a credential stealer. If you use AI coding agents, here is what you must do.

Inside Meta's Abrupt Removal of NameTag
The sudden deletion of the NameTag face-recognition code from Meta's smart glasses app highlights intense privacy concerns.

AI Governance: What It Means for Your Security
AI governance is crucial. As AI models like Claude Mythos emerge, learn why industry accountability, not just compliance, is key for your trust and security.

Google’s Anti-Scam AI Tool: The iPhone Gap
Google’s new Android feature fights AI voice-cloning scams with a silent device handshake. Here is the honest take on what it can actually do—and why iPhones are left out.

Claude Cowork Could Be Your Biggest Insider Threat
DTEX research finds Claude Cowork grants near-total access to sensitive data, making AI agents insider threats for businesses.

Dashlane Encrypted Password Vaults Downloaded in Coordinated Attack
Dashlane encrypted password vaults were downloaded in a coordinated attack that affected fewer than 20 users, the company said Thursday.

xAI Seeks to Strip Alleged Grok Deepfake Nudes Victims of Anonymity
xAI moves to unmask four Grok deepfake nudes victims, who say public identification would force them to abandon the lawsuit.

Meta AI Support Chatbot Exploited to Steal Instagram Accounts
Hackers used a VPN and the Meta AI support chatbot to reset email addresses on Instagram accounts, bypassing security. The vulnerability affected high-profile accounts and was patched on May 29.

Manhattan Institute Behind 'Civil Terrorism' Bills in Utah and Arizona
The Manhattan Institute's push for 'civil terrorism' laws reclassifies protest crimes as felonies; Utah passed it, Arizona may follow.

Federal Audit Reveals NIST's NVD Plagued by Poor Planning and Duplication
NIST's NVD backlog hit 27,000 flaws, with manual scoring matching independent results 12% of the time and $200,000 in duplication with CISA.

What Is FROST? The New SSD Side-Channel That Spies on Web Visitors
FROST, a new side-channel attack, lets websites spy by measuring SSD latency via OPFS and a neural network to detect open tabs and apps.
