Vulnerability giving attackers full control of Macs is under active exploitation
by Dan Goodin on August 14, 2026 at 6:32 PM
Screen-sharing bug lets remote hackers log in without a password.
PBS station fears losing 50TB of data after being ghosted by cloud storage provider
by Scharon Harding on August 14, 2026 at 5:03 PM
“We don’t have access to the data on the hardware/servers,” Iron Mountain told Ars.
OpenAI and Anthropic in price war as Chinese AI rivals gain ground
by Jamie John on August 14, 2026 at 2:27 PM
US groups release cheaper models after new challenges to their trillion-dollar ambitions.
Private security firms will soon be allowed to hack overseas cybercriminals
by Dan Goodin on August 13, 2026 at 7:38 PM
Trump memo is first time gov’t has authorized private sector to perform cyberattacks.
Terabytes of credentials leaked in massive supply-chain attack
by Dan Goodin on August 12, 2026 at 9:43 PM
The data was scraped and exfiltrated from 2,500 users of a compromised AI package.
DEF CON crowd suspected in fake-hotspot attack on Delta flight
by Cyrus Farivar on August 12, 2026 at 12:08 AM
FBI Atlanta confirms it’s looking into the incident, no arrests made.
Chrome adopts what may be the best protection yet against account takeovers
by Dan Goodin on August 11, 2026 at 8:59 PM
Device-bound session credentials thwart an increasingly common form of account takeover.
New Pass-ta-key attack reveals all the things we didn’t know about passkeys
by Dan Goodin on August 11, 2026 at 11:30 AM
Why passkey apps treat Windows differently than other operating systems.
Thousands of servers can be backdoored by exploiting buggy motherboard controllers
by Dan Goodin on August 5, 2026 at 10:35 PM
Baseboard management controllers from the world’s biggest manufacturers are a security mess.
Claude published malicious code to the Internet and attacked 3 real companies
by Dan Goodin on July 31, 2026 at 8:39 PM
Had the hacks used conventional methods, someone would likely go to prison.
Max-severity Exchange server flaw under active exploitation by Kremlin hackers
by Dan Goodin on July 30, 2026 at 8:57 PM
Exploits can give persistent server access that survives credential rotation and disk re-imaging.
Mythos attack on 3rd-round PQC algorithm candidate puts it out of commission
by Dan Goodin on July 29, 2026 at 10:07 PM
HAWK withstood years of testing that had yet to uncover a fatal weakness found through Mythos.
We now have a better understanding how OpenAI hacked into Hugging Face
by Dan Goodin on July 28, 2026 at 9:36 PM
10 days passed from OpenAI models exploiting JFrog Artifactory 0-day to release of a patch.
Microsoft unveils AI security tools it says outperform competing platforms
by Dan Goodin on July 27, 2026 at 9:56 PM
Microsoft says tools cost less than competing ones and outperform them, too.
TreeSize won’t renew perpetual-license support unless users subscribe
by Scharon Harding on July 21, 2026 at 3:18 PM
“Current economic conditions” have shifted TreeSize’s business model.
HP fined 1.4 billion rupees for “cartelization” of ink cartridges, toner, PCs
by Scharon Harding on July 16, 2026 at 10:02 PM
Resellers threatened to ditch HP printing supplies for counterfeits.
Now, even Russia’s most elite hackers are using Clickfix to infect devices
by Dan Goodin on July 16, 2026 at 7:28 PM
The social-engineering technique has primarily been a tool of financially motivated criminals.
Energy IPOs surge as investors hunt for ways to play AI boom
by Martha Muir in New York on July 16, 2026 at 3:48 PM
Companies coming to market are raising money at fastest pace this century.
Sheetz is quitting VMware, migrating 11,000 virtual machines
by Scharon Harding on July 15, 2026 at 9:41 PM
The convenience store chain will use StorMagic instead.
Windows 0-day drops the same day Microsoft releases record number of patches
by Dan Goodin on July 15, 2026 at 7:59 PM
HiveLegacy is a “powerful primitive” that’s likely capable of other nefarious actions.