3507 matches found
Millions of Gigabyte Motherboards Were Sold With a Firmware Backdoor
Hidden code in hundreds of models of Gigabyte motherboards invisibly and insecurely downloads programs—a feature ripe for abuse, researchers say...
Netflix’s Password-Sharing Crackdown Has Hit the US
TikTok user data is exposed to Chinese ByteDance employees, a screen recording app goes rogue in Google Play, and privacy groups want Slack to expand encryption...
Bcrypt, a Popular Password Hashing Algorithm, Starts Its Long Goodbye
The coinventor of “bcrypt” is reflecting on the ubiquitous function’s 25 years and channeling cybersecurity’s core themes into electronic dance music...
The Security Hole at the Heart of ChatGPT and Bing
Indirect prompt-injection attacks can leave people vulnerable to scams and data theft when they use the AI chatbots...
China Hacks US Critical Networks in Guam, Raising Cyberwar Fears
Researchers say the state-sponsored espionage operation may also lay the groundwork for disruptive cyberattacks...
Chinese Labs Are Selling Fentanyl Ingredients for Millions in Crypto
And it's happening in plain sight...
There’s Finally a Way to Improve Cloud Container Registry Security
“Container registries” are ubiquitous software clearinghouses, but they’ve been exposed for years. Chainguard says it now has a solution...
Leaked EU Document Shows Spain Wants to Ban End-to-End Encryption
In response to an EU proposal to scan private messages for illegal material, the country's officials said it is “imperative that we have access to the data.”...
Meta’s $1.3 Billion Fine Is a Strike Against Surveillance Capitalism
The record-breaking GDPR penalty for data transfers to the US could upend Meta's business and spur regulators to finalize a new data-sharing agreement...
The Real Risks in Google’s New .Zip and .Mov Domains
While the company’s new top-level domains could be used in phishing attacks, security researchers are divided on how big of a problem they really pose...
A TikTok ‘Car Theft’ Challenge Is Costing Hyundai $200 Million
Plus: The FBI gets busted abusing a spy tool, an ex-Apple engineer is charged with corporate espionage, and collection of airborne DNA raises new privacy risks...
The Underground History of Turla, Russia's Most Ingenious Hacker Group
From USB worms to satellite-based hacking, Russia’s FSB hackers, known as Turla, have spent 25 years distinguishing themselves as “adversary number one.”...
How You, or Anyone, Can Dodge Montana’s TikTok Ban
Montana’s TikTok ban will be impossible to enforce. But it could encourage copycat crackdowns against the social media app...
A Mysterious Group Has Ties to 15 Years of Ukraine-Russia Hacks
Kaspersky researchers have uncovered clues that further illuminate the hackers’ activities, which appear to have begun far earlier than originally believed...
The US Post Office Is Spying on the Mail. Senators Want to Stop It
The USPS carries out warrantless surveillance on thousands of parcels every year. Lawmakers want it to end—right now...
The True Cost of a Free Telly TV
Telly TV tracks you and bombards you with ads on a dedicated second screen. It could help normalize smartphone-style surveillance in your living room...
ChatGPT Scams Are Infiltrating Apple's App Store and Google Play
An explosion of interest in OpenAI’s sophisticated chatbot means a proliferation of “fleeceware” apps that trick users with sneaky in-app subscriptions...
WhatsApp 2023: New Privacy Features, Settings, and More
The Meta-owned app offers end-to-end encryption of texts, images, and more by default—but its settings aren't as private as they could be...
Buffalo Mass Shooting Victims' Families Sue Meta, Reddit, Amazon
The families of victims of a mass shooting in Buffalo are challenging the platforms they believe led the attacker to carry out a racist massacre...
The UK’s Secretive Web Surveillance Program Is Ramping Up
A government effort to collect people’s internet records is moving beyond its test phase, but many details remain hidden from public view...
How to Use Google Authenticator
The two-factor authentication tool got some serious upgrades that can help you bolster security for your online accounts...
Toyota Leaked Vehicle Data of 2 Million Customers
The FBI disables notorious Russia-linked malware, the EU edges toward a facial recognition ban, and security firm Dragos has an intrusion of its own...
A Republican-Led Lawsuit Threatens Critical US Cyber Protections
Three states are suing to block security rules for water facilities. If they win, it may open the floodgates for challenges to other cyber rules...
Twitter’s Encrypted DMs Are Deeply Inferior to Signal and WhatsApp
The social network’s new privacy feature is technically flawed, opt-in, and limited in its functionality. All this for just $8 a month...
How to Reclaim Your Online Privacy
We talk to the Signal Foundation’s Meredith Whittaker about how the surveillance economy is newer than we all might realize—and what we can do to fight back...
A Mysterious New Hacker Group, Red Stinger, Is Lurking in Ukraine’s Cyberspace
The unidentified attackers have targeted people on both sides of Russia’s war against Ukraine, carrying out espionage operations that suggest state funding...
The Team of Sleuths Quietly Hunting Cyberattack-for-Hire Services
For a decade, a group called Big Pipes has worked behind the scenes with the FBI to target the worst cybercriminal “booter” services plaguing the internet...
How To Delete Your Data From ChatGPT
OpenAI has new tools that give you more control over your information—although they may not go far enough...
SafeGraph Lands US Air Force Contract After Targeting Abortion Clinics
Documents obtained by WIRED show SafeGraph, which sold location data related to Planned Parenthood visits, is now pursuing contracts with the US Air Force...
Your Twitter Feed Sucks Now. These Free Add-Ons Can Help
A few simple tools can help filter out most Twitter Blue users but still see the ones you like...
Russian ‘Ghost Ships’ Identified Near the Nord Stream Blasts
Plus: Apple and Google plan to stop AirTag stalking, Meta violated the FTC’s privacy order, and how to tell if your car is tracking you...
Doctors Behind Mifepristone Ban Called ‘Christians’ a Top Threat
Leaked documents reveal that the American College of Pediatricians viewed “mainstream medicine” and “nominal Christians” as its opposition...
Meta Moves to Counter New Malware and Repeat Account Takeovers
The company is adding new tools as bad actors use ChatGPT-themed lures and mask their infrastructure in an attempt to trick victims and elude defenders...
Google Is Rolling Out Passkeys, the Password-Killing Tech, to All Accounts
The tech industry’s transition to passkeys gets its first massive boost with the launch of the alternative login scheme for Google’s billions of users...
American College of Pediatricians Leak Exposes 10,000 Confidential Files
A Google Drive left public on the American College of Pediatricians’ website exposed detailed financial records, sensitive member details, and more...
Cops Just Revealed a Record-Breaking Dark Web Dragnet
Operation SpecTor likely drew on leads from multiple dark web market busts, including the secret takedown of Monopoly Market in 2021...
SolarWinds: The Untold Story of the Boldest Supply-Chain Hack
The attackers were in thousands of corporate and government networks. They might still be there now. Behind the scenes of the SolarWinds investigation...
The High-Stakes Scramble to Stop Classified Leaks
AI tools? A porn filter, but for Top Secret documents? Just classifying less stuff? US lawmakers are full of ideas but lack a silver bullet...
Apple, Google, and Microsoft Just Fixed Zero-Day Security Flaws
Firefox gets a needed tune-up, SolarWinds squashes two high-severity bugs, Oracle patches 433 vulnerabilities, and more updates you should make now...
The Tragic Fallout From a School District’s Ransomware Breach
Plus: Cyber Command’s disruption of Iranian election hacking, an exposé on child sex trafficking on Meta’s platforms, and more...
DOJ Detected SolarWinds Breach Months Before Public Disclosure
In May 2020, the US Department of Justice noticed Russian hackers in its network but did not realize the significance of what it had found for six months...
NSA Cybersecurity Director Says ‘Buckle Up’ for Generative AI
The security issues raised by ChatGPT and similar tech are just beginning to emerge, but Rob Joyce says it’s time to prepare for what comes next...
Brace Yourself for the 2024 Deepfake Election
No matter what happens with generative AI, its disruptive forces are already beginning to play a role in the fast-approaching US presidential race...
A US Bill Would Ban Kids Under 13 From Joining Social Media
The legislation would insert the government into online platforms’ age-verification efforts—a move that makes some US lawmakers queasy...
A Security Team Is Turning This Malware Gang’s Tricks Against It
The cybercriminals behind the Gootloader malware have found clever ways to avoid detection. But researchers are using those same mechanisms to stop them...
Google’s Authenticator App Now Lets You Sync 2FA Codes Across Devices
You can now sync sign-in codes across devices—but they aren’t end-to-end encrypted...
Intel Let Google Cloud Hack Its New Secure Chips and Found 10 Bugs
To protect its Confidential Computing cloud infrastructure and gain critical insights, Google leans on its relationships with chipmakers...
Hacker Group Names Are Now Absurdly Out of Control
Pumpkin Sandstorm. Spandex Tempest. Charming Kitten. Is this really how we want to name the hackers wreaking havoc worldwide?...