Schneier on Security (1 hour ago)
Climate change is the issue. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
Read the full story on Schneier on Security.
The FAA called a ground stop on all US flights, which means no planes are taking off, and many are landing. There’s no indication of a cyberattack, but the telecommunications system between air traffic control and pilots is not functioning at full capacity.
Hackers broke into an AI startup used by Uber and made off with thousands of drivers’ personal information. Notion was caught up in the breach, too.
Federal officials have yet to say what caused the communications disruption or whether they are investigating a possible cyberattack.
The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen information.
Cryptocurrency hardware wallet maker Trezor has confirmed that three Safe 5 devices sold by Southeast Asian reseller CryptoBilis contained malicious hardware implants designed to steal wallet recovery phrases and send them to attackers over cellular networks.
German defense technology company Quantum Systems confirmed that it detected an incident in late October that was part of an active cyberattack by “hostile actors.”
This essay is adapted from a keynote speech delivered at the DEF CON 34 conference in Las Vegas on August 7, 2026. The essay originally appeared in CyberScoop. I want to talk about AI hacking.
Penlink’s Webloc is an application that locates people using information from the weather, gaming, email, and religious apps on their phone. It’s sold to the police. The tool collects vast quantities of location data from smartphones via commonly used weather, gaming, email and religious apps.
It’s hard to believe how lucrative this crime can be: According to a press release from the United States attorney’s office for the southern district of New York, three men Jacob Soall, Sharon Hazan, and Guy Sheetrit were arrested for using AI to alter and impersonate the voices and images of…
It’s a bad one, and it’s been in the code for a decade: A newly disclosed flaw involving OpenSSH and musl, dubbed “*sshole,” allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts configured to block password authentication simply by entering an oversized password.
The Guardian Technology
65 active sources
20 Turkish · 45 English
All sources
