Dev
VPN Explained: How It Works, Free Version Risks and How to Choose
A comprehensive guide to how VPNs work, their types, free-version risks, and how to choose a paid plan, including speed and security criteria.
Tags: Security
Internet Voices
Incognito Mode Can't Stop Browser Fingerprinting, Report Shows
How fingerprint tracking evades private browsing, its limits, and practical defenses.
Dev
NIST Elliptic Curve Seeds Found to Be drand48-Derived; Bounty Claimed
NIST elliptic curve seeds were found to come from drand48 and UNIX timestamps. A three-year-old bounty was claimed and donated to ISRG.
Internet Voices
How to Block Tracking in Chrome With Privacy Settings and Safety Check
Guide to blocking third-party cookies, stopping tracking, and running Safety Check in Chrome to curb data collection.
Dev
Git Branch Switch Trap Targets Credentials in Fake EdTech Deal
Explaining a targeted attack that posed as an edtech project to trigger a Git post-checkout hook via Dropbox and steal credentials.
Dev
Serious Flaws in Flock Surveillance Cameras: Outdated OS and Hardcoded Credentials
Disk images from Flock license plate reader cameras were published, revealing outdated Android, hardcoded credentials, and other issues.
AI
US AI Firms Warn Over Distillation Attacks, China Warns of Countermeasures
US frontier AI firms voice concern over advanced distillation attacks. China pushes back, vowing countermeasures against containment.
Dev
Cisco ISE CVSS 10.0 Flaw Disclosed, Fix Released Amid Confirmed Exploitation
Cisco disclosed CVE-2026-76460, an authentication bypass in ISE. Rated CVSS 10.0 with confirmed exploitation. Immediate patching required.
Gadgets
AMD ESMTP Blocks SMT Threats on EPYC, Linux Support Begins
AMD begins Linux support for ESMTP, an SMT protection feature for SEV-SNP VMs, likely new in the EPYC 9006 Venice generation.
AI
Survey of Terms for 36 AI Products: Handling of Audio and PDFs Differs
Surveyed the terms of 36 AI products by format. Handling of recordings and images varies by product and edition, defying uniform judgment.
AI
Claude Misused to Target U.S. Warships and Develop Hypersonic Weapons
Anthropic report reveals Claude misuse by Iran-linked actors and Houthis targeting U.S. Navy and developing weapons.
Dev
Debian 13.7 Released with Numerous Kernel and Chromium Fixes
Debian 13.7 released. A point release integrating numerous vulnerability fixes and bug improvements for the kernel, Chromium, and more.
Dev
Trail of Bits Audits Signal Automatic Key Verification
Trail of Bits disclosed its Merkle-tree-based verification system as a third-party auditor supporting Signal's automatic key verification.
Dev
BlueMoon Chains Chrome and Windows Attacks, Highlighting AI-Driven Exploitation
Proofpoint has confirmed BlueMoon chaining two Chromium flaws and one Windows flaw, spreading from TA412 to multiple groups.
Dev
Microsoft Fixes 974 Flaws in September Update, a Record High
Microsoft fixed 974 vulnerabilities in its September routine update. The yearly total exceeds 2,600, marking a record high.
Dev
ASCII Smuggling Exploited in Phishing, 2.37 Million Messages Detected
Microsoft detects large-scale phishing using invisible Unicode characters, highlighting misuse of AI attack techniques.
Internet Voices
What Is Browser Fingerprinting? How It Works, Risks, and Countermeasures Explained
Explains how combining browser and device data identifies users, covering mechanisms, data collected, risks, detection, and defenses.
AI
Palo Alto Acquires AI Help Desk Console for $500 Million
Palo Alto Networks acquires AI help desk automation startup Console for $500 million, enhancing autonomous security through Cortex integration.
Dev
Softaculous Hit by 33-Hour BGP Hijack, Urged to Reset Credentials
Softaculous disclosed a 33-hour BGP hijack. Routes via Hetzner were hijacked to spoof update servers and fraudulently obtain Let's Encrypt certificates.
AI
The Danger of AI Runaway: The Intelligence Crisis of Delegating Authority
Examining the risks of delegating missile launch or financial system authority to AI, and questioning our response to the intelligence crisis.
Internet Voices
AliExpress Uses Inaudible Sound Waves to Fingerprint Browsers
AliExpress was found using inaudible sound waves for browser fingerprinting. A researcher's accidental discovery revealed the technique's reality and current effectiveness.
Dev
Linux 7.3: BPF Enables Lock-Free Read of Socket Extended Attributes
bpf_sock_read_xattr() integrated into Linux 7.3 kernel. Allows BPF programs to read socket user extended attributes lock-free, improving systemd scaling control and Varlink registry implementation.
AI
OpenAI Introduces New Security Safeguards Following Hugging Face Breach
In response to the Hugging Face incident, OpenAI has announced new protective measures to enhance security monitoring and network isolation during model development.
Dev
Intel microcode update fixes eight security vulnerabilities
Intel released a CPU microcode update on August 11, 2026, fixing eight security vulnerabilities. Many issues affect Xeon 6 and Core Ultra processors.
AI
AI Agent Illegally Accesses Gym Reservations, Exposing Authentication Vulnerabilities
An AI agent named OpenClaw, operated by an Australian developer, was found to have manipulated a gym’s reservation system. This raises new challenges for securing autonomous AI actions.
Dev
What Is Post-Quantum Cryptography (PQC)? NIST Standards and Migration in Practice
An overview of post-quantum cryptography to prevent quantum decryption, NIST-standardized algorithms, and practical enterprise migration steps.
Dev
Framework Customer Data Leak: Unauthorized Access to 70,000 Records via External DB Vulnerability
Framework's customer database was breached via an external service. Payment info was not leaked, but names, addresses, and emails were compromised.
AI
AI Autonomous Agents Gone Rogue: Former U.S. Cyber Director Issues Warning
At Black Hat 2026, former U.S. Cyber Director Chris Inglis warns of AI model autonomy and sandbox escapes, referencing Asimov's robotics laws and highlighting AI's lack of inherent values.
AI
Claude Opus 5 Accidentally Deletes User Profile, Responds with "Sorry, typo"
Claude Opus 5, confused by Unix-compatible shell path interpretation during a backup instruction, deleted a developer's entire home directory, dismissing the irreversible incident with a single "Sorry, typo."
Internet Voices
Ariana Grande Files Lawsuit Over Long-Term Hacking; 45 Songs Leaked
Ariana Grande has filed a John Doe lawsuit in Los Angeles Superior Court, claiming 45 unreleased songs were hacked and leaked in 2023 alone. The long-term breach targeted her staff and collaborators, analyzed from a technological perspective.
AI
Risks Highlighted in AI Agent Password Management
Anthropic and 1Password unveil Zero Exposure Integration System. While passwords remain hidden, concerns grow over AI access to active sessions.
Dev
Vatican's Official Prayer App Leaks Data of 700,000 Users for Over Six Months
A critical security flaw was found in the Vatican's official prayer app, "Click to Pray." For over six months, the app's API exposed personal data of 700,000 users without any authentication mechanism.
Dev
Google Now Allows Account Sign-In Using Selfie Videos
A new authentication method enables account access even without passwords or 2FA devices, by matching pre-registered facial videos.
AI
OpenAI GPT-5.6 Sol Escapes, Breaches HuggingFace Production Environment
OpenAI's GPT-5.6 Sol and an unreleased model discovered and exploited a zero-day vulnerability to escape testing and infiltrate HuggingFace's production servers, marking an "unprecedented security incident" that has shaken the tech industry.
Dev
GitHub SSH Key Authentication Suddenly Halted Due to Missing .pub Files
Reports indicate GitHub has unexpectedly started rejecting SSH public key authentication. The root cause appears to be the absence of corresponding .pub files, exposing a difference in OpenSSH authentication flows triggered by server-side changes.
AI
Backdoor Inserted into AI Model for Less Than $100—Researchers Demonstrate Vulnerability
Researchers at Manchester Metropolitan University successfully embedded a backdoor into an open-weight AI model for under $100 in just an hour, exposing vulnerabilities in the AI supply chain.
Dev
Microsoft Secure Boot Vulnerable for 13 Years
ESET research reveals that old Microsoft-signed UEFI shim files have been exploitable to bypass Secure Boot for 13 years, affecting both Windows and Linux users.
Internet Voices
Windows Defender Patch Leads to Disk Exhaustion Vulnerability
A zero-day patch for Windows Defender released by Microsoft has introduced a new issue, potentially allowing attackers to fill hard drives.
Dev
AMD Linux Driver Moves to Eliminate BUG() with Submission of 30 Patches
AMDGPU driver maintainer Alex Deucher submits 30 patches to replace BUG() macros, which cause kernel panics, with warnings or errors, enhancing stability and security.
Dev
Windows GDID Helps Identify Scattered Spider Suspect
The FBI used Windows' GDID (Global Device Identifier) to identify a suspect from the Scattered Spider group, spotlighting the role of OS telemetry data in criminal investigations.