Recent Entries
Tech (100)
Serving the Technologist since 1998. News, reviews, and analysis.
From Biz & IT - Ars Technica at 2026-07-31 21:39:14
Claude published malicious code to the Internet and attacked 3 real companies
Had the hacks used conventional methods, someone would likely go to prison.
From Biz & IT - Ars Technica at 2026-07-30 21:57:22
Max-severity Exchange server flaw under active exploitation by Kremlin hackers
Exploits can give persistent server access that survives credential rotation and disk re-imaging.
From Biz & IT - Ars Technica at 2026-07-29 23:07:06
Mythos uncovers crypto weaknesses that went unknown for years
Separating the chaff from the wheat in Anthropic results is hard. We take a stab anyway.
From Biz & IT - Ars Technica at 2026-07-28 22:36:39
We now have a better understanding how OpenAI hacked into Hugging Face
10 days passed from OpenAI models exploiting JFrog Artifactory 0-day to release of a patch.
From Biz & IT - Ars Technica at 2026-07-27 22:56:14
Microsoft unveils AI security tools it says outperform competing platforms
Microsoft says tools cost less than competing ones and outperform them, too.
From Biz & IT - Ars Technica at 2026-07-21 16:18:23
TreeSize won't renew perpetual-license support unless users subscribe
"Current economic conditions" have shifted TreeSize's business model.
From Biz & IT - Ars Technica at 2026-07-16 23:02:31
HP fined 1.4 billion rupees for “cartelization” of ink cartridges, toner, PCs
Resellers threatened to ditch HP printing supplies for counterfeits.
From Biz & IT - Ars Technica at 2026-07-16 20:28:33
Now, even Russia's most elite hackers are using Clickfix to infect devices
The social-engineering technique has primarily been a tool of financially motivated criminals.
From Biz & IT - Ars Technica at 2026-07-16 16:48:21
Energy IPOs surge as investors hunt for ways to play AI boom
Companies coming to market are raising money at fastest pace this century.
From Biz & IT - Ars Technica at 2026-07-15 22:41:56
Sheetz moves 838 stores off VMware: Broadcom created “too much uncertainty"
The conveneince store chain will use StorMagic instead.
From Biz & IT - Ars Technica at 2026-07-15 20:59:48
Windows 0-day drops the same day Microsoft releases record number of patches
HiveLegacy is a "powerful primitive" that's likely capable of other nefarious actions.
From Biz & IT - Ars Technica at 2026-07-14 23:20:48
Microsoft’s Secure Boot has been broken for a decade and no one noticed until now
Old and forgotten "shims" Microsoft failed to revoke have made Secure Boot bypasses simple.
From Biz & IT - Ars Technica at 2026-07-13 22:03:07
The US government warns that Russia state hackers are coming after your router
With residential proxies all the rage, CISA urges router users to be vigilant.
From Biz & IT - Ars Technica at 2026-07-13 16:06:34
Now, defenders are embracing the prompt injection, too
"Context bombing" tricks hacking agents into shutting down before they can do harm.
From Biz & IT - Ars Technica at 2026-07-09 21:52:55
Patch for Windows Defender 0-day could allow attackers to fill hard disk
The feud between NightmareEclipse and Microsoft shows no signs of resolving soon.
From Biz & IT - Ars Technica at 2026-07-09 21:28:55
Allstate accuses Broadcom of auditing it because it quit VMware, CA
Broadcom accuses Allstate of dodging VMware audits.
From Biz & IT - Ars Technica at 2026-07-08 20:01:19
Google pays $250K for Linux vulnerability allowing guest VM escapes
Both vulnerabilities allow untrusted users to gain root privileges.
From Biz & IT - Ars Technica at 2026-07-08 19:10:16
Aussie gov't tells volunteers to throw out thousands of functioning test routers
But the devices could "easily be reflashed."
From Biz & IT - Ars Technica at 2026-07-08 14:26:10
US rare earths flow to Asia as domestic demand is slow to emerge
Miners backed by Trump admin. sell to Japan, South Korea despite push to develop domestic supply chain.
From Biz & IT - Ars Technica at 2026-07-08 08:00:51
Hackers can use 9 of the most popular AI tools to assemble massive botnets
"HalluSquatting" weaponizes LLMs' inability to say "I don't know."
From Biz & IT - Ars Technica at 2026-07-02 20:38:57
Newly discovered PamStealer isn't your typical macOS malware
The discovery underscores the increased effort being poured into Mac infostealers.
From Biz & IT - Ars Technica at 2026-07-01 22:21:21
T-Mobile moving tens of thousands of virtual machines off VMware amid lawsuit
T-Mobile wants Broadcom to keep supporting its VMware perpetual licenses.
From Biz & IT - Ars Technica at 2026-06-30 21:03:14
New attack provides one more reason why AI browsers are a bad idea
Telling an LLM that 2 + 2 = 5 is enough to make it follow forbidden instructions.
From Biz & IT - Ars Technica at 2026-06-29 23:05:33
US offers $10 million for info on group behind Signal and WhatsApp hacking spree
Operation by two Russia-state groups has been ongoing since at least March.
From Biz & IT - Ars Technica at 2026-06-25 20:04:57
Notion killing Skiff-influenced email app since most users use AI agents instead
Notion is "going all in on using agents to run your inbox."
From Biz & IT - Ars Technica at 2026-06-24 22:03:34
One-two punch delivered in global operation disrupts cybercrime "assembly line"
"Operation Endgame" simultaneously disrupts two widely used crime tools.
From Biz & IT - Ars Technica at 2026-06-23 23:30:57
Executive order bumps up deadline to move off quantum-vulnerable crypto
Order warns of national security risks if post-quantum cryptography isn't adopted in time.
From Biz & IT - Ars Technica at 2026-06-23 21:17:38
Oracle’s 21,000 layoffs help drive its debt-fueled AI investments
Oracle is spending billions on data center infrastructure to support AI.
From Biz & IT - Ars Technica at 2026-06-22 20:16:52
Following user outcry, AMD reinstates memory encryption in consumer CPUs
Critics saw the move as an underhanded way to steer them toward more costly chips.
From Biz & IT - Ars Technica at 2026-06-19 00:28:52
Microsoft discovers new lightweight backdoor that steals cryptocurrency
Crypto Clipper spreads over USB and communicates over Tor.
From Biz & IT - Ars Technica at 2026-06-18 20:41:35
Apple patches high-severity eavesdropping vulnerability in Beats Studio Buds
The vulnerability, disclosed 12 months ago, affects multiple manufacturers.
From Biz & IT - Ars Technica at 2026-06-18 18:42:18
Before SpaceX IPO, investors in China secretly acquired stakes
One previously unreported SpaceX investor has ties to Chinese military contractors.
From Biz & IT - Ars Technica at 2026-06-17 20:54:31
Massive breach spills credentials for thousands of sensitive networks
The affected include Oracle, Lenovo, FedEx, a NATO contractor, and Fortinet.
From Biz & IT - Ars Technica at 2026-06-17 20:43:13
Tesco moving 40,000 server workloads off VMware amid Broadcom's “abusive conduct”
Tesco claimed Broadcom hiked its VMware prices by about 175 percent in UK court filings.
From Biz & IT - Ars Technica at 2026-06-17 18:50:46
"Dangerous" AI models are coming no matter what
AI models with advanced hacking capabilities will soon be the norm.
From Biz & IT - Ars Technica at 2026-06-17 12:15:17
Windows and Linux users: The deadline to update Secure Boot keys is near
What you need to know about the expiration of keys securing your machine's boot sequence.
From Biz & IT - Ars Technica at 2026-06-16 23:11:15
HPE tempts VMware users, partners with year of free virtualization software
Partner tells Ars that HPE should be giving out more free VM Essentials licenses.
From Biz & IT - Ars Technica at 2026-06-16 12:15:46
Critical Copilot vulnerability allowed hackers to seal 2FA code from users
SearchLeak exploit shows why the industry's approach to LLM security fails over and over.
From Biz & IT - Ars Technica at 2026-06-15 18:55:46
Users cry foul after AMD stripped memory crypto from its consumer CPUs
AMD's stripping of TSME from consumer CPUs appears to be a deliberate, covert move.
From Biz & IT - Ars Technica at 2026-06-12 20:26:47
PeopleSoft 0-day affecting hundreds of organizations steals gigabytes of data
Vulnerability in the Oracle-owned PeopleSoft software is about as critical as they come.
From Biz & IT - Ars Technica at 2026-06-09 21:56:52
Locked in heated rivalry with researcher, Microsoft fixes 0-day they disclosed
A separate zero-day also disclosed by Nightmare Eclipse appears to be patched as well.
From Biz & IT - Ars Technica at 2026-06-09 16:12:43
High-severity vulnerability in Linux caused by a single errant character
Use-after-free bug can be exploited to evade sandbox defenses.
From Biz & IT - Ars Technica at 2026-06-08 19:34:23
For the 2nd time in weeks, Microsoft packages laced with credential stealer
73 packages run self-replicating stealer as soon as they're opened by an AI agent.
From Biz & IT - Ars Technica at 2026-06-05 22:00:29
How a USB-connected speaker can infect a PC without ever being touched
Seller of the Sound Blaster Katana V2X doesn't consider the behavior a vulnerability.
From Biz & IT - Ars Technica at 2026-06-04 21:02:04
Dashlane explains how attackers managed to download encrypted password vaults
By targeting large numbers of users, attackers increased their chances of success.
From Biz & IT - Ars Technica at 2026-06-03 20:53:14
Dashlane issues opaque advisory warning 20 encrypted vaults were stolen
Security advisory leaves out key details. Dashlane maintains complete silence.
From Biz & IT - Ars Technica at 2026-06-01 20:49:09
Dozens of Red Hat packages backdoored through its offical NPM channel
Anyone who has downloaded affected Red Hat packages should investigate immediately.
From Biz & IT - Ars Technica at 2026-05-29 19:46:33
Botnet of more than 17 million devices dismantled
The botnet was reportedly tied to a Russia-based residential proxy network.
From Biz & IT - Ars Technica at 2026-05-28 21:29:53
Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code
Undisclosed addition in jqwik instructed AI coding agents to delete app output.
From Biz & IT - Ars Technica at 2026-05-27 21:56:03
Websites have a new way to spy on visitors: analyzing their SSD activity
Telltale SSD activity can be measured in the browser using simple JavaScript.
From Biz & IT - Ars Technica at 2026-05-26 20:50:33
Millions of AI agents imperiled by critical vulnerability in open source package
"BadHost" was found in Starlette, a package with 325 million weekly downloads.
From Biz & IT - Ars Technica at 2026-05-25 13:00:15
US's big bet on quantum computing may not be entirely legal
Deal also launched the first quantum foundry company, but is there a need for it?
From Biz & IT - Ars Technica at 2026-05-22 19:13:05
Texas AG sues Meta over claims that WhatsApp doesn't provide end-to-end encryption
Critics note a lack of factual support in lawsuit filed by US Senate candidate.
From Biz & IT - Ars Technica at 2026-05-22 11:30:14
A hacker group is poisoning open source code at an unprecedented scale
GitHub is just the latest victim of TeamPCP, a gang that has carried out a spree of software supply chain attacks.
From Biz & IT - Ars Technica at 2026-05-21 14:48:38
US government takes $2 billion equity stake in nine quantum computing firms
Beneficiaries include startup backed by firm with links to the Trump family.
From Biz & IT - Ars Technica at 2026-05-20 20:10:36
Google publishes exploit code threatening millions of Chromium users
Google publishes exploit code before patch, reported 29 months earlier, is fixed.
From Biz & IT - Ars Technica at 2026-05-19 19:27:08
In stunning display of stupid, secret CISA credentials found in public GitHub repo
SSH keys, plaintext passwords, other sensitive data had been up since November 2025.
From Biz & IT - Ars Technica at 2026-05-14 19:32:01
Zero-day exploit completely defeats default Windows 11 BitLocker protections
It's not entirely clear how the exploit works. Microsoft says it's investigating.
From Biz & IT - Ars Technica at 2026-05-14 17:47:43
Cisco announces record revenue and 4,000 layoffs in the same day
Layoffs are "not a savings-driven resutrcture," CFO says.
From Biz & IT - Ars Technica at 2026-05-11 23:28:19
Linux bitten by second severe vulnerability in as many weeks
Production-version patches are coming online and should be installed pronto.
From Biz & IT - Ars Technica at 2026-05-08 19:33:48
Chaos erupts as cyberattack disrupts learning platform Canvas amid finals
Across the country, schools and colleges postpone year-end tests.
From Biz & IT - Ars Technica at 2026-05-07 20:18:16
Mozilla says 271 vulnerabilities found by Mythos have "almost no false positives"
The developer of Firefox says it has "completely bought in" on AI-assisted bug discovery.
From Biz & IT - Ars Technica at 2026-05-06 14:32:47
Ars Asks: Share your shell and show us your tricked-out terminals!
A celebration of the tweaks and customizations that make life easier at the CLI.
From Biz & IT - Ars Technica at 2026-05-05 20:46:15
Widely used Daemon Tools disk app backdoored in monthlong supply-chain attack
Daemon Tools users: It's time to check your machines for stealthy infections, stat.
From Biz & IT - Ars Technica at 2026-05-05 12:20:08
Why Reddit blocked my daily visit to its mobile website
Reddit REALLY wants you to use its app.
From Biz & IT - Ars Technica at 2026-05-04 18:57:46
GameStop offers $56 billion for eBay, struggles to explain how it'll pay for it
Amid falling revenue and store closures, GameStop wants to buy the much larger eBay.
From Biz & IT - Ars Technica at 2026-05-01 20:12:26
Ubuntu infrastructure has been down for more than a day
The outage has hampered communication concerning a critical vulnerability that gives root.
From Biz & IT - Ars Technica at 2026-04-30 21:20:48
The most severe Linux threat to surface in years catches the world flat-footed
CopyFail threatens multi-tenant servers, CI/CD work flows, Kubernetes containers, and more.
From Biz & IT - Ars Technica at 2026-04-29 12:00:24
Why a recent supply-chain attack singled out security firms Checkmarx and Bitwarden
Security firms find themselves especially exposed.
From Biz & IT - Ars Technica at 2026-04-27 22:04:03
Open source package with 1 million monthly downloads stole user credentials
If you're one of millions using element-data, it's time to check for compromise.
From Biz & IT - Ars Technica at 2026-04-24 20:00:39
Why are top university websites serving porn? It comes down to shoddy housekeeping.
Hundreds of subdomains from dozens of universities have been hijacked by scammers.
From Biz & IT - Ars Technica at 2026-04-23 21:41:23
In a first, a ransomware family is confirmed to be quantum-safe
Technically speaking, there's no practical benefit to use PQC. So why is it being used?
From Biz & IT - Ars Technica at 2026-04-22 20:32:56
Microsoft issues emergency update for macOS and Linux ASP.NET threat
When authentication fails, things can go very, very wrong.
From Biz & IT - Ars Technica at 2026-04-21 13:35:20
Contrary to popular superstition, AES 128 is just fine in a post-quantum world
A stubborn misconception is hampering the already hard work of quantum readiness.
From Biz & IT - Ars Technica at 2026-04-17 22:28:35
US-sanctioned currency exchange says $15 million heist done by "unfriendly states"
Grinex says needed hacking resources "available exclusively to ... unfriendly states."
From Biz & IT - Ars Technica at 2026-04-17 12:00:50
Recent advances push Big Tech closer to the Q-Day danger zone
Here's which players are winning the race to transition to post-quantum crypto.
From Biz & IT - Ars Technica at 2026-04-09 20:44:31
“Negative” views of Broadcom driving thousands of VMware migrations, rival says
Western Union exec says there were "challenges" working with Broadcom.
From Biz & IT - Ars Technica at 2026-04-08 21:49:11
Iran-linked hackers disrupt operations at US critical infrastructure sites
As the US and Israel's war has ramped up, so too have hacks on US industrial sites.
From Biz & IT - Ars Technica at 2026-04-08 12:00:08
Thousands of consumer routers hacked by Russia's military
End-of-life routers in homes and small offices hacked in 120 countries.
From Biz & IT - Ars Technica at 2026-04-03 21:30:15
OpenClaw gives users yet another reason to be freaked out about security
The viral AI agentic tool let attackers silently gain admin unauthenticated access.
From Biz & IT - Ars Technica at 2026-04-02 18:00:11
New Rowhammer attacks give complete control of machines running Nvidia GPUs
Both GDDRHammer and GeForge hammer GPU memory in ways that compromise the CPU.
From Biz & IT - Ars Technica at 2026-03-31 19:25:33
Quantum computers need vastly fewer resources than thought to break vital encryption
No, the sky isn't falling, but Q Day is coming, and it won't be as expensive as thought.
From Biz & IT - Ars Technica at 2026-03-25 15:49:17
Google bumps up Q Day deadline to 2029, far sooner than previously thought
Company warns entire industry to move off RSA and EC more quickly.
From Biz & IT - Ars Technica at 2026-03-24 12:38:09
Self-propagating malware poisons open source software and wipes Iran-based machines
Development houses: It's time to check your networks for infections.
From Biz & IT - Ars Technica at 2026-03-20 20:50:46
Widely used Trivy scanner compromised in ongoing supply-chain attack
Admins: Sorry to say, but it's likely a rotate-your-secrets kind of weekend.
From Biz & IT - Ars Technica at 2026-03-19 21:29:53
Cloud service providers ask EU regulator to reinstate VMware partner program
Broadcom says the group is misrepresenting market "realities."
From Biz & IT - Ars Technica at 2026-03-18 17:36:40
Federal cyber experts called Microsoft's cloud a "pile of shit," approved it anyway
One Microsoft product was approved despite years of concerns about its security.
From Biz & IT - Ars Technica at 2026-03-17 17:07:12
Researchers disclose vulnerabilities in IP KVMs from four manufacturers
Internet-exposed devices that give BIOS-level access? What could possibly go wrong?
From Biz & IT - Ars Technica at 2026-03-13 20:18:08
Supply-chain attack using invisible code hits GitHub and other repositories
Unicode that's invisible to the human eye was largely abandoned—until attackers took notice.
From Biz & IT - Ars Technica at 2026-03-12 22:18:11
The who, what, and why of the attack that has shut down Stryker's Windows network"
Company says it doesn't know how long it will take to restore its Microsoft environment.
From Biz & IT - Ars Technica at 2026-03-11 21:27:16
14,000 routers are infected by malware that's highly resistant to takedowns
Most of the devices are made by Asus and are located in the US.
From Biz & IT - Ars Technica at 2026-03-06 19:41:33
Feds take notice of iOS vulnerabilities exploited under mysterious circumstances
The long, strange trip of a large assembly of advanced iOS exploits.
From Biz & IT - Ars Technica at 2026-03-05 21:06:05
Amazon appears to be down, with over 20,000 reported problems
Problems viewing products and checking out.
From Biz & IT - Ars Technica at 2026-03-05 18:41:28
Trump gets data center companies to pledge to pay for power generation
With no enforcement and questionable economics, it may not make a difference.
From Biz & IT - Ars Technica at 2026-03-03 22:20:06
Downdetector, Speedtest sold to IT service provider Accenture in $1.2B deal
Accenture plans to buy Ookla, which also includes RootMetrics and Ekahau.
From Biz & IT - Ars Technica at 2026-03-03 12:30:24
LLMs can unmask pseudonymous users at scale with surprising accuracy
Pseudonymity has never been perfect for preserving privacy. Soon it may be pointless.
From Biz & IT - Ars Technica at 2026-02-28 01:26:41
Google quantum-proofs HTTPS by squeezing 2.5kB of data into 64-byte space
Merkle Tree Certificate support is already in Chrome. Soon, it will be everywhere.
From Biz & IT - Ars Technica at 2026-02-26 15:45:18
New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises
That guest network you set up for your neighbors may not be as secure as you think.
From Biz & IT - Ars Technica at 2026-02-17 20:43:01
Password managers' promise that they can't see your vaults isn't always true
Contrary to what password managers say, a server compromise can mean game over.
From Biz & IT - Ars Technica at 2026-02-17 18:38:10
Most VMware users still "actively reducing their VMware footprint," survey finds
Broadcom's "strategy was never to keep every customer," CloudBolt report says.