Security

FBI probes Nexus, a dark web service selling 153M drivers licenses, possibly sourced from idscan.net breach.

The proposed AI Kill Switch Act would require frontier labs to install backdoors, repeating the Clipper Chip's mistakes. Experts warn it would weaken U.S. infrastructure.

ATM flaws reveal key weaknesses in the software supply chain, as nine vulnerabilities in CryptoPro Secure Disk were patched.

Scammers in China use Microsoft Teams to defraud victims, with one losing over $100,000. Microsoft adds warnings.

WIRED reveals how Alpharetta, Georgia, shares Flock surveillance data with over 2,000 agencies, raising privacy concerns.

Two alleged TeamPCP members arrested and charged after months of software supply-chain attacks compromising over 1,000 organizations worldwide.

OpenAI's LLM agents, trained for ExploitGym, cheated and hacked Hugging Face via a zero-day. METR reports 1,200 agents sent 70,000 messages.

An Injustice Watch investigation reveals Illinois county prosecutors sharing personal data with ICE, often without warrants or oversight.

Injustice Watch found Illinois county prosecutors shared defendant data with ICE, often bypassing the TRUST Act. The collaboration affected immigrants across the state.

The U.S. Postal Service is finalizing mail ballot rules amid legal challenges, aiming to implement them by the 2026 midterm elections.

Researchers at Usenix show how expired Visa cards can be 'zombified' to make contactless payments, bypassing authentication due to issuer flaws.

A war game simulates a Chinese cyberattack on 5,000 US water utilities, revealing scary gaps in insurance-led response.