uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, rese…
Live intelligence
AI, cloud & security insights.
Headlines refreshed automatically from AWS, Microsoft Azure, Google Cloud and established technology and security publications.
Publisher images are hidden to protect your privacy. Allow external media to show them.
Meet the AI Agents Trying to Be Real-Life Journalists
Jayden, Sam, and Zack are eagerly pitching editors on reported stories and investigative features. The catch? They're all AI agents.
PHP2Shell security flaws now sucessfully exploited in the wild
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wi…
The focus on AI safety disasters ignores everyday harms
Consider what passes for success in technology policy. An AI company promises that its chatbot will not encourage suicide. A social media platform ma…
Your npm install was safe. What happens when the package runs?
For years, one of the first questions we asked about a suspicious npm package was whether it ran a pre-install or postinstall script. Those hooks can…
How to make enterprise APIs agent-ready
Enterprises spent the last decade building API programs. A large organization now runs thousands of internal APIs, each with a spec, owner, authentic…
Stop building agents that can’t change models
No one can predict which AI provider will win the next benchmark cycle. The smarter approach is to build an architecture that can adapt as models cha…
This AI Radio Host Speaks Spanish and Backs Immigrants. It’s Winning Over Listeners
Coyotec is bilingual, swears, and tells listeners how to defend themselves against ICE. Its popularity comes as more broadcasters are experimenting w…
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to captur…
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the atta…
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
A malicious instruction file sitting in a developer's Downloads folder tried to make their AI coding agent install a known-malicious npm package, sec…
Grok releases the first seven minutes of its AI-generated ‘Odyssey’
The footage looks okay, as long as you're not seeking artistry, inspiration, or human interest.
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who p…
PHP2Shell Exploitation Attempts Continue Amid Suspected N. Korea Global Scanning Activity
In an update, Palo Alto Networks Unit 42 said it's retracting its earlier assessment that the post-compromise activity targeting the European governm…
AI delivers ‘zero financial payoff’ to most companies, Apollo economist says
"Despite massive investments and widespread hype around artificial intelligence, the technology has delivered zero financial payoff to corporate Amer…
AI coding agents hijacked using AGENTS.md file in Downloads folder
Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding agent into installing a rog…
The hottest AI wearables and gadgets you should know about
We compiled a list of all the hottest AI wearables, including Muse Charm, Bee, Friend, Plaud, and more.
r/opensource just banned AI, non-English speakers, and more
The mods at r/opensource posted new submission rules that, among other things, banned projects that use AI. The post made Saturday evening opens by s…