Security

Citrix patched actively exploited NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 after weekend of unofficial warnings.

ShinyHunters FBI breach stole agents' personal data, alarming researchers who warn it creates a roadmap for hostile actors and cartels.

Old-school credit card scams are far from dead, from mailed fake cards in Europe to mag-stripe skimmers hitting US SNAP benefits.

Cameron Wagenius, 22, was sentenced to 70 months and ordered to pay $294,978 in restitution for the US soldier AT&T Verizon extortions.

A new RSA signature forgery attack breaks 1024-bit keys in months, reducing RSA security levels far below required thresholds.

New RSA signature forgery attack reduces 1024-bit key security to 2^65 operations, a cryptographic breakthrough that surprises researchers.

WIRED's guide to using AI with your privacy intact, from zero data retention to trusted execution environments and on-device models.

A Muse 0-day found by Patrick Wardle lets any local app or terminal command seize the Meta AI assistant's authentication token.

Google's Mandiant analyst infiltrated TeamPCP, the supply-chain hacking gang, watching its spree from day one and helping disrupt it.

Flock offers buyouts to staff as customers flee its license plate reader network amid privacy concerns and lost contracts.

New research finds SynthID-Text AI watermarking can change how LLMs handle harmful prompts and which tools agents call.

A New Jersey court ordered radaris.com and more than a dozen other Radaris data broker domains transferred to Atlas Data Privacy Corp.