Security

Google’s Anti-Scam AI Tool: The iPhone Gap
Google’s new Android feature fights AI voice-cloning scams with a silent device handshake. Here is the honest take on what it can actually do—and why iPhones are left out.

Claude Cowork Could Be Your Biggest Insider Threat
DTEX research finds Claude Cowork grants near-total access to sensitive data, making AI agents insider threats for businesses.

Dashlane Encrypted Password Vaults Downloaded in Coordinated Attack
Dashlane encrypted password vaults were downloaded in a coordinated attack that affected fewer than 20 users, the company said Thursday.

xAI Seeks to Strip Alleged Grok Deepfake Nudes Victims of Anonymity
xAI moves to unmask four Grok deepfake nudes victims, who say public identification would force them to abandon the lawsuit.

Meta AI Support Chatbot Exploited to Steal Instagram Accounts
Hackers used a VPN and the Meta AI support chatbot to reset email addresses on Instagram accounts, bypassing security. The vulnerability affected high-profile accounts and was patched on May 29.

Manhattan Institute Behind 'Civil Terrorism' Bills in Utah and Arizona
The Manhattan Institute's push for 'civil terrorism' laws reclassifies protest crimes as felonies; Utah passed it, Arizona may follow.

Federal Audit Reveals NIST's NVD Plagued by Poor Planning and Duplication
NIST's NVD backlog hit 27,000 flaws, with manual scoring matching independent results 12% of the time and $200,000 in duplication with CISA.

What Is FROST? The New SSD Side-Channel That Spies on Web Visitors
FROST, a new side-channel attack, lets websites spy by measuring SSD latency via OPFS and a neural network to detect open tabs and apps.

Iran's National Intranet Project: A Strategic Shift
Iran's national intranet project is exposed by a partial internet reconnection, highlighting a power struggle and digital sovereignty push.

BadHost Vulnerability: What AI Users Need to Know
A critical BadHost vulnerability in the Starlette framework puts millions of AI agents and tools at risk of data theft. Here's what users should do.

How AI Is Fueling a Bug Hunting Arms Race
Bug Hunting Arms Race accelerates as AI submissions flood programs. Curl, Google adjust; Linux mailing list overwhelmed. 90-day disclosure may be obsolete.
