Germany Expands Surveillance Tech
Germany's federal cabinet has advanced legislation to expand law enforcement use of surveillance technology, including automated biometric image matching against publicly available internet data.
HalluSquatting is an attack where researchers pre-compute fake repository, package, or skill names that AI coding agents predictably invent, register those names first, and load them with malicious instructions.
Germany's federal cabinet has advanced legislation to expand law enforcement use of surveillance technology, including automated biometric image matching against publicly available internet data.
Approximately 5.4 million end-of-life package versions are not being checked by security tools, leaving organizations vulnerable to exploits.
A Latvian ransomware affiliate has been sentenced to over 8 years in prison for conducting attacks on behalf of Conti and Akira, causing $56 million in losses.
The Cybersecurity and Infrastructure Security Agency has seen significant gains from AI automation in its security operations unit, enabling faster threat triage and response.
The Federal Trade Commission has banned data broker Kochava from selling sensitive location information without consumers' explicit consent.
Joey Melo, a Principal Security Researcher at CrowdStrike, discusses his approach to hacking AI systems, focusing on controlling the experience without changing the rules.
The Amazon Simple Email Service is being increasingly abused to send convincing phishing emails that bypass standard security filters and render reputation-based blocks ineffective.
Attackers are actively exploiting a Linux vulnerability, dubbed 'Copy Fail', which allows for total control of a system with authenticated local access, affecting mainstream Linux kernels built since 2017.
Congress extended Section 702 of the Foreign Intelligence Surveillance Act for 45 days, allowing warrantless surveillance of foreign targets to continue.