Security
Showing 12 of 178 articles · Page 7 of 15
Programming Blunder Exposes Spyware Attack Targeting Claude AI Users
A malicious npm package targeting Claude AI users was exposed after the hacker accidentally leaked their own GitHub token in the source code.
US Troops Targeted via Digital Ad Tracking Data
U.S. soldiers are facing missile and drone threats as adtech companies sell location data captured from personal mobile devices in war zones.
FROST Attack: How Websites Spy on Your SSD Activity via Browser Tabs
Discover how the FROST attack uses SSD activity and JavaScript to spy on your open tabs and apps without your consent.
Carnival Cruise Data Breach Exposes Information of 6 Million Customers
Carnival Cruise confirms a data breach affecting 6 million customers after a social engineering attack. ShinyHunters claims to have stolen terabytes of data.
New Security Risk: Attackers Poison SKILL.md Files for Prompt Injection
Security researchers reveal how simple modifications to SKILL.md files can lead to prompt injection and help attackers bypass AI detection mechanisms.
Google API Keys Remain Active After Deletion
Security research reveals Google API keys remain functional for up to 16 minutes after deletion, requiring a 30-minute safety window for security teams.
Missing Documents Lead to Release of R$800 Million Hackers in Spain
Brazilian hackers who stole R$800 million were released in Spain after Brazil missed an extradition deadline. Learn more about the procedural error.
Microsoft Accused of Intentional Backdoor in BitLocker Encryption
Researcher Nightmare-Eclipse claims Microsoft added a backdoor to BitLocker (CVE-2026-45585) affecting Windows 11 and Windows Server 2022/2025.
Google Accidentally Leaks Exploit Code for Unpatched Chromium Vulnerability
Google leaks Chromium exploit code for a long-standing unpatched flaw. Learn how it affects Brave, Edge, and Opera users and how to stay safe.
CISA GitHub Repository Leak: Plaintext Passwords Exposed for Months
CISA exposed plaintext passwords and private keys on a public GitHub repository for six months before a security researcher reported the leak.
GitHub Investigates Massive Internal Code Leak via Malicious VS Code Extension
GitHub confirms 3,800 internal repositories leaked after a malicious VS Code extension attack. Customer data is safe as investigation continues.
Grafana Codebase Stolen After GitHub Token Compromise
Grafana Labs refuses to pay ransom after an attacker used a stolen GitHub token to capture the company's full source code. No customer data was compromised.