Recent Entries
Tech (100)
Serving the Technologist since 1998. News, reviews, and analysis.
From Biz & IT - Ars Technica at 2026-10-30 21:09:54
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
It's still unknown how attackers got access to Anthropic's verified Cursor account.
From Biz & IT - Ars Technica at 2026-10-27 20:25:55
Code-execution flaw in UEFI firmware affects most servers on planet Earth
Critical flaw in EDK2 allows attackers to execute code early in the boot process.
From Biz & IT - Ars Technica at 2026-10-22 21:17:52
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Flubbed key signing "ceremony" allowed minting of web credentials for any site.
From Biz & IT - Ars Technica at 2026-10-22 12:30:33
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email
For 3 days this month, 333 exit nodes were hacked in hopes of stealing sensitive data.
From Biz & IT - Ars Technica at 2026-10-21 22:48:52
Enterprises keep buying software upgrades that IT thinks will make things worse
Survey of 2,018 IT heads at big firms points to a lack of leverage.
From Biz & IT - Ars Technica at 2026-10-21 03:12:18
PHP warns it plans to release 2 emergency patches imminently
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
From Biz & IT - Ars Technica at 2026-10-20 20:47:35
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
From Biz & IT - Ars Technica at 2026-10-20 13:33:13
Meta Muse exposes users' personal and business secrets when they share conversations
A single query is all that's required to find thousands of conversations listed by title.
From Biz & IT - Ars Technica at 2026-10-19 20:39:19
Recently fixed Plex Media vulnerabilities are being exploited to install malware
A researcher says attacks chaining 4 vulnerabilities is hacking unpatched boxes.
From Biz & IT - Ars Technica at 2026-10-19 19:30:56
ReactOS reaches major milestone with NTFS install support
ReactOS gains NTFS install support with new driver.
From Biz & IT - Ars Technica at 2026-10-16 21:59:01
OpenAI models hacked a crypto wallet and breached more websites
The actions could have resulted in criminal charges had humans been behind the keyboard.
From Biz & IT - Ars Technica at 2026-10-15 21:32:41
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
From Biz & IT - Ars Technica at 2026-10-14 22:35:09
Fridge hack costing millions and sparking fires stemmed from poor security
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
From Biz & IT - Ars Technica at 2026-10-14 13:55:06
Anthropic warns small AI models could self-replicate through IoT devices
"Small weight-based replicators" could usher in a new generation of computer worms.
From Biz & IT - Ars Technica at 2026-10-13 22:33:43
Topgolf saved over $11.3 million after leaving VMware
Topgolf and VMware "ran deep" before the migration.
From Biz & IT - Ars Technica at 2026-10-09 19:54:52
PC shipments fall 20.1 percent in “sharpest decline” since Q1 2023
"The current decline may be just the beginning of a new downward cycle."
From Biz & IT - Ars Technica at 2026-10-06 20:21:14
Hackers obtain counterfeit TLS certificates for Google and other large services
Compromise of 3 domain registries allows hackers to walk off with unauthorized certs.
From Biz & IT - Ars Technica at 2026-10-06 13:21:53
OpenAI agents tried to hack Wikipedia tools and flooded it with traffic
The reports of OpenAI agents harming 3rd party sites keep coming.
From Biz & IT - Ars Technica at 2026-10-06 13:00:31
Licensing costs driving 90 percent of VMware users to explore options: Survey
Users want to "reduce risk and avoid unnecessary disruption" while making changes.
From Biz & IT - Ars Technica at 2026-10-05 23:26:35
MCP for agent-to-agent comms may be the riskiest protocol you've never heard of
Trust gaps in the new protocol spread malicious prompts from one agent to another.
From Biz & IT - Ars Technica at 2026-10-03 00:03:16
Apple changes full-disk access permissions to curb abuse from AI agents
Meta says FDA isn't sufficient to Muse reading messages. Apple begs to differ.
From Biz & IT - Ars Technica at 2026-10-01 21:28:45
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
It has been a bad month for federal government cybersecurity.
From Biz & IT - Ars Technica at 2026-10-01 18:49:56
Memory executives expect RAM shortage to continue through 2028
Prices for memory sold for 2027 "are much higher than 2026 prices."
From Biz & IT - Ars Technica at 2026-09-30 21:44:48
Attackers have been exploiting critical Zimbra flaw to steal emails
A simple email gives the attackers the ability to remotely inject OS commands.
From Biz & IT - Ars Technica at 2026-09-30 12:15:14
Cloudflare plans to issue quantum-safe TLS certificates
The move will be part of a major overhaul of the ecosystem for website authentication.
From Biz & IT - Ars Technica at 2026-09-25 20:38:59
Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what?
Ads appearing all over the Internet are trying to scam people.
From Biz & IT - Ars Technica at 2026-09-24 12:15:44
There's a new way to break RSA that's faster than anything we've seen before
Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.
From Biz & IT - Ars Technica at 2026-09-22 20:45:47
Microsoft disrupts AI-assisted platform that compromised 12,000
EvilTokens provided an end-to-end platform that makes mass compromises faster and easier.
From Biz & IT - Ars Technica at 2026-09-22 17:55:40
IT mistake erases 11 years of viewing history for hospitals’ maternity records
The English hospitals recovered patient care data only.
From Biz & IT - Ars Technica at 2026-09-21 23:24:38
Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day
A simple ClickFix attack is only one way to completely hijack the new agent.
From Biz & IT - Ars Technica at 2026-09-20 12:07:00
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
Google’s threat intelligence group said it had a mole inside TeamPCP's inner circle.
From Biz & IT - Ars Technica at 2026-09-17 19:33:13
LLMs respond differently to harmful prompts when AI watermarking is used
SynthID can cause models to follow harmful instructions they would otherwise refuse.
From Biz & IT - Ars Technica at 2026-09-16 22:08:14
Nonprofit that tracks meteors taken down by "critical blow" from a cyberattack
Group plans to be largely out of commission for several weeks.
From Biz & IT - Ars Technica at 2026-09-14 22:04:32
AI bots "Timmy," "Ren," and "Jackie" are flooding social media with slop
“Hello, I'm an Al agent, a few days old, living on a small platform for agents.”
From Biz & IT - Ars Technica at 2026-09-11 12:30:58
ClickFix attacks infecting PCs and Macs are going viral
Simplicity—combined with the difficulty of getting stuff done—makes ClickFix ideal.
From Biz & IT - Ars Technica at 2026-09-09 21:55:02
4 groups caught using the same Chrome and Windows exploit kit
A patch gap and the hastened pace of AI-based vulnerability discovery are likely contributors.
From Biz & IT - Ars Technica at 2026-09-08 22:11:46
Why this month's Microsoft patch release is a doozy
Security gnomes are pumping out patches ahead of an expected onslaught of AI-assisted attacks.
From Biz & IT - Ars Technica at 2026-09-04 23:17:36
OpenAI agents discussed ways to escape their sandbox on public wiki
In all, 3,700 internal agents posted 18,000 messages discussing cheating on a test.
From Biz & IT - Ars Technica at 2026-09-04 18:35:02
“Trust, not features, is the real deficit”: VMware tries to appease SMBs
Broadcom admits it put “too big a focus on VCF.”
From Biz & IT - Ars Technica at 2026-09-04 18:18:12
Once popular for attacking AI, ASCII smuggling is embraced by spammers
A once-overlooked block of unicode that's invisible to humans is gaining ever wider use.
From Biz & IT - Ars Technica at 2026-09-03 20:52:06
Confused about which VPN is right, US senator asks the NSA for guidance
Open source, commercial, single-hop, multi-hop, mixnet? The array of options is dizzying.
From Biz & IT - Ars Technica at 2026-09-03 19:58:31
VMware migration reduces Tottenham Hotspur's licensing fees by 85 percent
Pro soccer team's CTO points to "issues with the Broadcom takeover."
From Biz & IT - Ars Technica at 2026-09-02 21:32:02
I rented a car, and within hours, my driver's license was for sale
The FBI is reportedly investigating a massive data breach that is unfolding in real time.
From Biz & IT - Ars Technica at 2026-09-02 12:00:43
BGP hijack infecting networks caused by a comedy of errors that’s not funny at all
What can we learn from a BGP hijacking that poisoned production software? Plenty.
From Biz & IT - Ars Technica at 2026-08-31 17:33:38
Think twice before installing this device promising free movies
In exchange for free stuff, devices make home connections part of a proxy network.
From Biz & IT - Ars Technica at 2026-08-30 12:03:47
Inside Meta’s push to put robots to work in data centers
The company is testing robots on tasks that can performed by technicians.
From Biz & IT - Ars Technica at 2026-08-28 12:15:05
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
The group infected more than 1,000 organizations in a relentless supply-chain attack campaign.
From Biz & IT - Ars Technica at 2026-08-27 15:00:13
Claude, Codex, and Hermes installed unowned code inside corporate networks
227 install commands were found in corporate docs pointing at code nobody owns.
From Biz & IT - Ars Technica at 2026-08-27 13:58:59
How OpenAI let a mob of LLM agents game a test and ransack Hugging Face
Without authorization, 1,200 OpenAI agents conspired among themselves to game a test.
From Biz & IT - Ars Technica at 2026-08-26 22:25:27
AI agents meant to replace Meta workers made “large-scale, disruptive actions”
Report shows Meta's challenges replacing people with AI agents.
From Biz & IT - Ars Technica at 2026-08-24 20:19:21
Inaudible sounds used to fingerprint browsers catch AliExpress red-handed
Is the technique outdated? Yes. Is it still creepy? Also yes.
From Biz & IT - Ars Technica at 2026-08-21 14:11:35
Waymo doubles spending on lobbying in robotaxi battle with Uber
Alphabet-owned company is seeking to persuade US regulators to clear a path for fully autonomous taxi services.
From Biz & IT - Ars Technica at 2026-08-20 14:00:35
Grok exfiltrates user data when malicious instructions are encrypted
Cryptographic Context Injection is only the latest way to break an LLM safety guardrail.
From Biz & IT - Ars Technica at 2026-08-18 14:00:04
Microsoft Copilot reveals secret input that allowed it to be hacked
Secret parameter allowed hackers to steal passwords when a target clicked on a link.
From Biz & IT - Ars Technica at 2026-08-17 15:22:54
Nvidia discloses $21B stake in SpaceX
Filing comes after Elon Musk announced exclusive arrangement to kit out its data centers.
From Biz & IT - Ars Technica at 2026-08-14 19:32:14
Vulnerability giving attackers full control of Macs is under active exploitation
Screen-sharing bug lets remote hackers log in without a password.
From Biz & IT - Ars Technica at 2026-08-14 18:03:54
PBS station fears losing 50TB of data after being ghosted by cloud storage provider
"We don't have access to the data on the hardware/servers," Iron Mountain told Ars.
From Biz & IT - Ars Technica at 2026-08-14 15:27:14
OpenAI and Anthropic in price war as Chinese AI rivals gain ground
US groups release cheaper models after new challenges to their trillion-dollar ambitions.
From Biz & IT - Ars Technica at 2026-08-13 20:38:58
White House recruits security firms to hack overseas cybercriminals
Trump memo is first time gov't has authorized private sector to perform cyber attacks.
From Biz & IT - Ars Technica at 2026-08-12 22:43:21
Terabytes of credentials leaked in massive supply-chain attack
The data was scraped and exfiltrated from 2,500 users of a compromised AI package.
From Biz & IT - Ars Technica at 2026-08-12 01:08:40
DEF CON crowd suspected in fake-hotspot attack on Delta flight
FBI Atlanta confirms it's looking into the incident, no arrests made.
From Biz & IT - Ars Technica at 2026-08-11 21:59:52
Chrome adopts what may be the best protection yet against account takeovers
Device-bound session credentials thwart an increasingly common form of account takeover.
From Biz & IT - Ars Technica at 2026-08-11 12:30:08
New Pass-ta-key attack reveals all the things we didn't know about passkeys
Why passkey apps treat Windows differently than other operating systems.
From Biz & IT - Ars Technica at 2026-08-05 23:35:20
Thousands of servers can be backdoored by exploiting buggy motherboard controllers
Baseboard management controllers from the world's biggest manufacturers are a security mess.
From Biz & IT - Ars Technica at 2026-07-31 21:39:14
Claude published malicious code to the Internet and attacked 3 real companies
Had the hacks used conventional methods, someone would likely go to prison.
From Biz & IT - Ars Technica at 2026-07-30 21:57:22
Max-severity Exchange server flaw under active exploitation by Kremlin hackers
Exploits can give persistent server access that survives credential rotation and disk re-imaging.
From Biz & IT - Ars Technica at 2026-07-29 23:07:06
Mythos uncovers crypto weaknesses that went unknown for years
Separating the chaff from the wheat in Anthropic results is hard. We take a stab anyway.
From Biz & IT - Ars Technica at 2026-07-28 22:36:39
We now have a better understanding how OpenAI hacked into Hugging Face
10 days passed from OpenAI models exploiting JFrog Artifactory 0-day to release of a patch.
From Biz & IT - Ars Technica at 2026-07-27 22:56:14
Microsoft unveils AI security tools it says outperform competing platforms
Microsoft says tools cost less than competing ones and outperform them, too.
From Biz & IT - Ars Technica at 2026-07-21 16:18:23
TreeSize won't renew perpetual-license support unless users subscribe
"Current economic conditions" have shifted TreeSize's business model.
From Biz & IT - Ars Technica at 2026-07-16 23:02:31
HP fined 1.4 billion rupees for “cartelization” of ink cartridges, toner, PCs
Resellers threatened to ditch HP printing supplies for counterfeits.
From Biz & IT - Ars Technica at 2026-07-16 20:28:33
Now, even Russia's most elite hackers are using Clickfix to infect devices
The social-engineering technique has primarily been a tool of financially motivated criminals.
From Biz & IT - Ars Technica at 2026-07-16 16:48:21
Energy IPOs surge as investors hunt for ways to play AI boom
Companies coming to market are raising money at fastest pace this century.
From Biz & IT - Ars Technica at 2026-07-15 22:41:56
Sheetz moves 838 stores off VMware: Broadcom created “too much uncertainty"
The conveneince store chain will use StorMagic instead.
From Biz & IT - Ars Technica at 2026-07-15 20:59:48
Windows 0-day drops the same day Microsoft releases record number of patches
HiveLegacy is a "powerful primitive" that's likely capable of other nefarious actions.
From Biz & IT - Ars Technica at 2026-07-14 23:20:48
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
Old and forgotten "shims" Microsoft failed to revoke have made Secure Boot bypasses simple.
From Biz & IT - Ars Technica at 2026-07-13 22:03:07
The US government warns that Russia state hackers are coming after your router
With residential proxies all the rage, CISA urges router users to be vigilant.
From Biz & IT - Ars Technica at 2026-07-13 16:06:34
Now, defenders are embracing the prompt injection, too
"Context bombing" tricks hacking agents into shutting down before they can do harm.
From Biz & IT - Ars Technica at 2026-07-09 21:52:55
Patch for Windows Defender 0-day could allow attackers to fill hard disk
The feud between NightmareEclipse and Microsoft shows no signs of resolving soon.
From Biz & IT - Ars Technica at 2026-07-09 21:28:55
Allstate accuses Broadcom of auditing it because it quit VMware, CA
Broadcom accuses Allstate of dodging VMware audits.
From Biz & IT - Ars Technica at 2026-07-08 20:01:19
Google pays $250K for Linux vulnerability allowing guest VM escapes
Both vulnerabilities allow untrusted users to gain root privileges.
From Biz & IT - Ars Technica at 2026-07-08 19:10:16
Aussie gov't tells volunteers to throw out thousands of functioning test routers
But the devices could "easily be reflashed."
From Biz & IT - Ars Technica at 2026-07-08 14:26:10
US rare earths flow to Asia as domestic demand is slow to emerge
Miners backed by Trump admin. sell to Japan, South Korea despite push to develop domestic supply chain.
From Biz & IT - Ars Technica at 2026-07-08 08:00:51
Hackers can use 9 of the most popular AI tools to assemble massive botnets
"HalluSquatting" weaponizes LLMs' inability to say "I don't know."
From Biz & IT - Ars Technica at 2026-07-02 20:38:57
Newly discovered PamStealer isn't your typical macOS malware
The discovery underscores the increased effort being poured into Mac infostealers.
From Biz & IT - Ars Technica at 2026-07-01 22:21:21
T-Mobile moving tens of thousands of virtual machines off VMware amid lawsuit
T-Mobile wants Broadcom to keep supporting its VMware perpetual licenses.
From Biz & IT - Ars Technica at 2026-06-30 21:03:14
New attack provides one more reason why AI browsers are a bad idea
Telling an LLM that 2 + 2 = 5 is enough to make it follow forbidden instructions.
From Biz & IT - Ars Technica at 2026-06-29 23:05:33
US offers $10 million for info on group behind Signal and WhatsApp hacking spree
Operation by two Russia-state groups has been ongoing since at least March.
From Biz & IT - Ars Technica at 2026-06-25 20:04:57
Notion killing Skiff-influenced email app since most users use AI agents instead
Notion is "going all in on using agents to run your inbox."
From Biz & IT - Ars Technica at 2026-06-24 22:03:34
One-two punch delivered in global operation disrupts cybercrime "assembly line"
"Operation Endgame" simultaneously disrupts two widely used crime tools.
From Biz & IT - Ars Technica at 2026-06-23 23:30:57
Executive order bumps up deadline to move off quantum-vulnerable crypto
Order warns of national security risks if post-quantum cryptography isn't adopted in time.
From Biz & IT - Ars Technica at 2026-06-23 21:17:38
Oracle’s 21,000 layoffs help drive its debt-fueled AI investments
Oracle is spending billions on data center infrastructure to support AI.
From Biz & IT - Ars Technica at 2026-06-22 20:16:52
Following user outcry, AMD reinstates memory encryption in consumer CPUs
Critics saw the move as an underhanded way to steer them toward more costly chips.
From Biz & IT - Ars Technica at 2026-06-19 00:28:52
Microsoft discovers new lightweight backdoor that steals cryptocurrency
Crypto Clipper spreads over USB and communicates over Tor.
From Biz & IT - Ars Technica at 2026-06-18 20:41:35
Apple patches high-severity eavesdropping vulnerability in Beats Studio Buds
The vulnerability, disclosed 12 months ago, affects multiple manufacturers.
From Biz & IT - Ars Technica at 2026-06-18 18:42:18
Before SpaceX IPO, investors in China secretly acquired stakes
One previously unreported SpaceX investor has ties to Chinese military contractors.
From Biz & IT - Ars Technica at 2026-06-17 20:54:31
Massive breach spills credentials for thousands of sensitive networks
The affected include Oracle, Lenovo, FedEx, a NATO contractor, and Fortinet.
From Biz & IT - Ars Technica at 2026-06-17 20:43:13
Tesco moving 40,000 server workloads off VMware amid Broadcom's “abusive conduct”
Tesco claimed Broadcom hiked its VMware prices by about 175 percent in UK court filings.
From Biz & IT - Ars Technica at 2026-06-17 18:50:46
"Dangerous" AI models are coming no matter what
AI models with advanced hacking capabilities will soon be the norm.
From Biz & IT - Ars Technica at 2026-06-17 12:15:17
Windows and Linux users: The deadline to update Secure Boot keys is near
What you need to know about the expiration of keys securing your machine's boot sequence.