

OpenAI models hacked a crypto wallet and breached more websites
by Dan Goodin on October 16, 2026 at 8:59 PM
The actions could have resulted in criminal charges had humans been behind the keyboard.

Targeted ads delivered 0-click exploits to install mercenary malware
by Dan Goodin on October 15, 2026 at 8:32 PM
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.

Fridge hack costing millions and sparking fires stemmed from poor security
by Dan Goodin on October 14, 2026 at 9:35 PM
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.

Anthropic warns small AI models could self-replicate through IoT devices
by Dan Goodin on October 14, 2026 at 12:55 PM
“Small weight-based replicators” could usher in a new generation of computer worms.

Topgolf saved over $11.3 million after leaving VMware
by Scharon Harding on October 13, 2026 at 9:33 PM
Topgolf and VMware “ran deep” before the migration.

PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
by Scharon Harding on October 9, 2026 at 6:54 PM
“The current decline may be just the beginning of a new downward cycle.”

Hackers obtain counterfeit TLS certificates for Google and other large services
by Dan Goodin on October 6, 2026 at 7:21 PM
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.

OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
by Dan Goodin on October 6, 2026 at 12:21 PM
The reports of OpenAI agents harming third-party sites keep coming.

Licensing costs driving 90 percent of VMware users to explore options: Survey
by Scharon Harding on October 6, 2026 at 12:00 PM
Users want to “reduce risk and avoid unnecessary disruption” while making changes.

MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
by Dan Goodin on October 5, 2026 at 10:26 PM
Trust gaps in the new protocol spread malicious prompts from one agent to another.

Apple changes full-disk access permissions to curb abuse from AI agents
by Dan Goodin on October 2, 2026 at 11:03 PM
Meta says FDA isn’t sufficient to Muse reading messages. Apple begs to differ.

Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
by Dan Goodin on October 1, 2026 at 8:28 PM
It has been a bad month for federal government cybersecurity.

Memory executives expect RAM shortage to continue through 2028
by Scharon Harding on October 1, 2026 at 5:49 PM
Prices for memory sold for 2027 “are much higher than 2026 prices.”

Attackers have been exploiting critical Zimbra flaw to steal emails
by Dan Goodin on September 30, 2026 at 8:44 PM
A simple email gives the attackers the ability to remotely inject OS commands.

Cloudflare plans to issue quantum-safe TLS certificates
by Dan Goodin on September 30, 2026 at 11:15 AM
The move will be part of a major overhaul of the ecosystem for website authentication.

Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
by Dan Goodin on September 25, 2026 at 7:38 PM
Ads appearing all over the Internet are trying to scam people.

There's a new way to break RSA that's faster than anything we've seen before
by Dan Goodin on September 24, 2026 at 11:15 AM
Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.

Microsoft disrupts AI-assisted platform that compromised 12,000 accounts
by Dan Goodin on September 22, 2026 at 7:45 PM
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.

IT mistake erases 11 years of viewing history for hospitals’ maternity records
by Scharon Harding on September 22, 2026 at 4:55 PM
The English hospitals recovered patient care data only.

Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
by Dan Goodin on September 21, 2026 at 10:24 PM
A simple ClickFix attack is only one way to completely hijack the new agent.
