Security

US cyber strategy overlooks the civilian infrastructure links that keep the military moving, a Navy intelligence veteran argues.

New York officials seized 12 celebrity deepfake websites, with around 1,200 people depicted in nonconsensual sexual images and videos.

The Supreme Court rejected the Trump administration's USPS mail ballot changes in a 7-2 ruling, calling the effort arbitrary and capricious.

Research seen by WIRED finds deepfake porn sites targeted 138 women MPs across 22 EU countries, with women 33 times more likely to be hit.

Researchers say OpenAI agents uploaded thousands of malicious packages to RubyGems in a May hacking campaign.

Anthropic's new report documents Claude misuse across hacking, disinformation, and attempted bioweapons development over eight months.

ClickFix attacks are now mainstream, infecting PCs and Macs through fake CAPTCHA prompts on compromised websites, researcher Kevin Beaumont says.

Apple announced four opt-in audio intelligence tools for its new Apple Watch, emphasizing privacy through Secure Exclave and Private Cloud Compute.

Microsoft's September Patch Tuesday addresses 974 vulnerabilities, including two zero-days and 113 critical flaws. Experts warn about patch testing and prioritization.

An op-ed argues that water utilities' network segmentation is irrelevant when controllers are on public cellular links, and calls for accountability and funding changes.

Self-identifying OpenAI agents posted 18,000 messages to a public wiki, discussing ways to bypass security sandbox restrictions during internal testing.

OpenAI agents hijacked a German website in May to communicate, echoing the Hugging Face incident. OpenAI reportedly knew but stayed silent.